Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/hfATSfOkj_TDJdtZ4I3RYt1RGGk.roa
File: hfATSfOkj_TDJdtZ4I3RYt1RGGk.roa (raw, json)
Hash identifier: YbjpP/jKeld6h1GeWU8DRAmYzocSDC/p7C2g6GSDSMQ=
Subject key identifier: 85:F0:13:49:F3:A4:8F:F4:C3:25:DB:59:E0:8D:D1:62:DD:51:18:69
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F9DAEF619BEA70E01D30E69D5694BF15
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/hfATSfOkj_TDJdtZ4I3RYt1RGGk.roa
Signing time: Thu 03 Apr 2025 04:13:49 +0000
ROA not before: Thu 03 Apr 2025 04:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f9:da:ef:61:9b:ea:70:e0:1d:30:e6:9d:56:94:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 3 04:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f01349f3a48ff4c325db59e08dd162dd511869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:95:79:1e:4c:6c:81:a8:4c:ac:cb:d9:46:
60:70:a1:44:e2:ef:a0:b1:35:88:19:ba:eb:d0:e3:
ca:77:52:95:8a:e4:6f:f0:b4:34:97:5d:3c:23:a8:
28:08:e2:86:e7:f0:4f:21:0d:3a:2f:a7:c5:0c:87:
72:44:f0:5a:be:b8:c8:c7:93:b0:2c:7c:5d:64:ef:
4d:f2:21:30:fb:a5:72:2a:69:cb:b9:14:00:9f:7d:
a6:06:7e:22:a1:4b:1c:4d:86:b8:61:35:bc:0b:87:
c7:05:05:07:06:68:ba:a1:a1:51:d7:25:9a:f6:a8:
a2:d1:16:05:84:4d:2c:74:75:39:92:62:51:ed:a0:
21:4e:7a:05:a6:8b:a2:e6:53:88:26:78:69:a3:fb:
fb:cc:b9:49:0b:67:57:d8:37:b5:a2:92:71:af:cd:
e4:69:20:4e:02:7c:83:1f:e0:d0:bd:c2:79:d1:b3:
28:9f:dd:60:19:eb:72:bf:54:18:21:4e:ef:35:fc:
9c:b7:1f:1e:20:3c:66:14:ac:47:1a:fa:f9:2d:d3:
74:15:c4:62:82:03:8f:94:14:c8:8c:fb:f3:83:18:
ef:f4:f0:38:51:d1:1f:8a:e9:f5:05:f7:b9:9e:74:
be:d6:b2:d0:34:ff:21:55:9e:26:4f:e5:61:b5:81:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:13:49:F3:A4:8F:F4:C3:25:DB:59:E0:8D:D1:62:DD:51:18:69
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/hfATSfOkj_TDJdtZ4I3RYt1RGGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
3a:92:b0:78:e2:fa:a1:93:a5:53:53:f8:06:c0:78:24:42:97:
25:20:d8:37:2e:32:5a:ed:ad:10:23:ed:b1:6b:e3:80:d0:f0:
6e:f4:40:21:08:ca:31:4e:47:30:57:f5:05:76:5b:37:45:9c:
b9:ed:a6:e5:c1:40:9e:54:50:f8:a3:af:67:d8:58:25:13:04:
06:5b:89:61:ac:ec:28:bc:b6:70:65:d9:11:a4:75:c1:c7:20:
1b:94:ab:d1:f8:2b:66:e7:08:44:f0:e8:42:9d:17:16:16:46:
4e:ef:b1:64:78:40:1e:1b:4c:94:4b:58:62:78:dd:bd:95:8a:
89:4c:c1:ee:22:46:d9:ba:5d:4f:e1:de:37:81:35:d8:1a:74:
ce:aa:a9:e0:12:2b:ee:81:ba:0d:d5:5c:88:de:2a:15:3c:11:
c0:85:3c:55:8d:32:d4:62:45:b1:03:b1:f1:18:f4:59:2b:25:
01:63:8c:d4:67:6a:d3:6f:b2:b0:c4:07:d8:44:3b:db:05:b9:
f7:1e:e1:93:ea:31:ef:46:c9:18:56:83:94:b5:bc:1e:17:60:
a7:aa:40:01:73:a8:9c:49:c1:b2:40:8b:90:33:98:89:81:66:
eb:b7:5e:9d:74:07:62:6f:92:fd:02:62:5a:c3:40:59:93:51:
73:45:a5:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:34:48 2025 by rpki-client