Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/dovrE4j2iaOyHcq0gIISu8iwPOo.roa
File: dovrE4j2iaOyHcq0gIISu8iwPOo.roa (raw, json)
Hash identifier: DoKQODXm9UeblC5kTgzOGFFY2SQAMNVvmHn9Hl2FeMs=
Subject key identifier: 76:8B:EB:13:88:F6:89:A3:B2:1D:CA:B4:80:82:12:BB:C8:B0:3C:EA
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F0681D07C4F51322D1F36D8066A9FD02
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/dovrE4j2iaOyHcq0gIISu8iwPOo.roa
Signing time: Tue 01 Apr 2025 08:11:49 +0000
ROA not before: Tue 01 Apr 2025 08:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:68:1d:07:c4:f5:13:22:d1:f3:6d:80:66:a9:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 08:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768beb1388f689a3b21dcab4808212bbc8b03cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:f4:55:1d:3e:e2:30:97:42:2b:34:02:09:
af:f9:35:38:3b:5f:9d:2a:38:aa:ec:a3:c6:d1:d2:
94:b7:30:ad:55:ef:18:a5:41:31:7d:00:72:99:bc:
74:b9:2f:4d:f6:2d:fc:5f:9d:98:e8:aa:70:40:a8:
2e:90:be:5a:b4:42:c1:68:ec:2c:32:65:06:23:94:
61:66:08:32:6e:53:8c:c0:60:77:69:e0:ac:01:c9:
ed:be:60:03:01:69:d2:75:0f:a2:f1:0e:db:8e:a2:
d6:91:2e:c8:40:1d:1b:63:64:0c:c5:f8:9e:46:d4:
ff:24:15:ca:0b:27:4f:a5:24:bb:c3:63:c6:a8:51:
d5:76:72:19:a6:3e:29:f5:52:bf:99:d9:b8:82:0f:
dd:40:fe:20:fe:78:3d:56:29:66:8e:e3:31:a4:d4:
18:a7:09:4d:c8:df:ee:22:6e:2d:14:8a:08:e5:96:
93:b2:8e:df:b5:d3:e0:13:aa:d3:cd:75:05:54:b9:
31:ca:6f:be:23:a8:b6:31:a2:e2:e1:02:3d:d2:47:
fc:0c:98:5c:7f:8c:be:90:8c:e9:e6:f1:ef:2b:0e:
f1:e6:fa:d6:1c:6c:9b:71:d6:44:8d:19:71:9a:0e:
db:64:34:17:6d:3f:a6:f3:7e:5d:f0:ca:4f:f0:f9:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:EB:13:88:F6:89:A3:B2:1D:CA:B4:80:82:12:BB:C8:B0:3C:EA
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/dovrE4j2iaOyHcq0gIISu8iwPOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
45:ad:b1:c6:65:84:2f:fc:b5:ce:ee:04:b7:d7:fa:7f:b3:46:
10:73:9f:50:f2:4b:23:40:cb:9d:bc:56:29:db:d4:e4:79:59:
7a:bb:bd:92:d8:c8:6f:5a:4a:8b:51:17:c2:1d:42:7b:b8:d1:
40:34:01:d3:74:80:93:f2:f6:dc:bf:95:57:45:0e:03:22:39:
3f:5b:ad:f8:c9:1b:31:e6:76:01:0e:75:1f:b1:59:41:b4:5b:
f4:f9:56:93:69:5b:79:6d:8c:a5:1f:b6:8e:92:12:d4:77:2a:
47:59:9d:08:ba:2f:77:13:9d:97:1a:83:d8:75:04:e8:62:51:
71:03:69:9b:7c:6a:65:aa:b8:a8:04:e1:49:c3:26:fc:aa:3a:
58:e5:9b:98:d8:e5:10:b8:60:9b:90:e4:16:71:65:91:68:1d:
6e:26:0a:05:a7:a3:48:0d:31:b1:48:0f:51:96:55:66:90:9f:
06:67:47:63:23:34:9e:6b:e9:ee:7a:48:8a:dc:33:2c:ec:ab:
3f:d3:58:a6:44:5e:d9:36:96:17:c1:2e:cd:d7:d9:98:84:4d:
a7:da:99:f8:20:fc:cf:8c:3a:a0:e4:cd:97:a0:55:64:4b:20:
07:0d:c6:ff:05:a9:e2:27:12:a0:86:d9:92:af:19:67:66:94:
60:45:f1:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:46 2025 by rpki-client