Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/d1ESV3FDqNllW8v39pRWsNjLkLQ.roa
File: d1ESV3FDqNllW8v39pRWsNjLkLQ.roa (raw, json)
Hash identifier: rvC+4TUy4dQcK68u25VE+osY5biTC9L+0tckE8Q8d2o=
Subject key identifier: 77:51:12:57:71:43:A8:D9:65:5B:CB:F7:F6:94:56:B0:D8:CB:90:B4
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F47DA4F29314979C2CF7ED801425B2DC
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/d1ESV3FDqNllW8v39pRWsNjLkLQ.roa
Signing time: Wed 02 Apr 2025 03:13:49 +0000
ROA not before: Wed 02 Apr 2025 03:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f4:7d:a4:f2:93:14:97:9c:2c:f7:ed:80:14:25:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 03:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=775112577143a8d9655bcbf7f69456b0d8cb90b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:96:87:51:9b:b1:a1:25:35:e4:e9:4f:2c:
e9:21:ab:62:ca:ff:ff:e3:23:bb:76:2e:e1:0d:90:
f4:90:a7:9c:49:97:58:5a:8c:dd:65:b6:95:9b:e6:
a6:6a:07:05:6a:85:52:52:00:54:6a:f5:d6:60:0d:
0a:e5:4d:d9:d3:c5:aa:02:ab:95:2d:e8:8c:1d:cd:
8c:48:24:94:5e:46:a8:d8:cd:31:09:68:1c:de:e6:
36:54:5f:02:7e:05:37:bf:26:d9:36:65:ac:dc:bd:
5f:a5:34:f1:1e:f7:82:c0:bc:d0:ee:75:35:c1:f1:
84:80:50:91:9d:20:16:83:42:35:b1:ff:33:21:92:
4c:5f:72:a2:c2:45:d9:28:5c:4c:20:eb:3b:d8:2b:
b4:de:f7:a2:4d:db:69:d5:ba:6f:b5:19:97:66:12:
5f:a8:fb:02:08:32:c2:cd:aa:7f:25:5c:ad:11:77:
4e:30:01:ef:6a:10:8f:97:d6:21:0f:6d:a0:3c:6e:
d5:1e:e0:05:76:4f:85:71:82:76:ac:f7:bf:6a:9f:
7c:a4:bf:45:2c:92:b6:af:32:03:99:eb:7f:d2:16:
db:ad:ac:e4:9b:05:a9:32:0a:ec:49:17:fe:14:7b:
d7:5f:71:77:77:8a:00:bf:29:84:4b:72:8a:09:06:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:12:57:71:43:A8:D9:65:5B:CB:F7:F6:94:56:B0:D8:CB:90:B4
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/d1ESV3FDqNllW8v39pRWsNjLkLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
2f:5d:9f:35:6a:94:21:b2:db:8e:7f:5f:6e:1b:3e:58:81:95:
36:99:44:65:10:93:a3:41:0f:a1:5c:16:e5:69:0b:bd:d6:ad:
d3:2d:3b:88:88:91:23:07:2b:60:52:09:39:ad:e4:6d:c5:17:
d6:80:82:76:84:7d:ce:2c:52:b1:92:e4:3f:d4:e7:76:66:05:
b8:f3:65:ee:69:f3:b2:f0:00:ea:90:d8:43:6c:e2:5e:d2:c6:
ee:b1:f8:7d:d5:bb:28:bd:12:43:a8:1d:ed:90:f1:68:43:64:
78:4d:f2:3c:e7:a1:eb:46:43:a7:cc:e1:ac:d9:f2:7b:b2:61:
d3:60:8d:31:f4:d4:7b:ac:46:18:3e:96:cd:4d:a2:b7:99:b3:
02:5c:8e:17:c7:72:0d:40:28:f0:f7:91:9b:eb:39:ab:ce:ce:
7a:15:45:31:b3:33:66:30:8f:86:13:be:e6:0c:b5:dd:b4:64:
67:a7:ef:4e:67:7c:53:18:3a:b5:35:a7:64:42:9b:1e:f6:98:
ca:53:1e:f4:8f:9e:6c:12:e2:6a:c4:dc:4e:32:23:6c:73:6f:
8b:c4:e0:65:e6:d4:a3:c8:31:60:f7:c8:4f:92:06:4d:72:6d:
a4:e1:cd:fa:0d:9c:cd:c9:bc:c6:77:af:ed:d6:42:a0:fc:55:
d4:f2:a3:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:08:52 2025 by rpki-client