Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ksMT7nB3us_rQV4iYU34KbyLinU.roa
File: ksMT7nB3us_rQV4iYU34KbyLinU.roa (raw, json)
Hash identifier: hHE2AtS0SFpwJnomB9JbX3TuByTWtrYkm7TAW52/DTk=
Subject key identifier: 92:C3:13:EE:70:77:BA:CF:EB:41:5E:22:61:4D:F8:29:BC:8B:8A:75
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195D28F1F5F7FEC5C9CC83144343FCFBC0A
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ksMT7nB3us_rQV4iYU34KbyLinU.roa
Signing time: Wed 26 Mar 2025 13:05:49 +0000
ROA not before: Wed 26 Mar 2025 13:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:d28e:3b76/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:8f:1f:5f:7f:ec:5c:9c:c8:31:44:34:3f:cf:bc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 26 13:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c313ee7077bacfeb415e22614df829bc8b8a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:c9:66:45:e7:11:8a:d9:17:ca:25:31:77:
72:e3:c7:1c:95:25:23:25:aa:6b:fe:8c:76:43:68:
c5:dd:5d:9d:07:1a:3b:95:6a:cd:6e:83:62:9f:3e:
1b:54:56:07:30:f8:ea:04:99:74:66:3a:f4:c4:2e:
f6:1f:8f:07:bc:85:18:8e:cd:f1:59:91:5f:1b:43:
63:18:26:dc:09:5b:31:d9:d3:1a:57:73:26:9c:d0:
f3:2d:18:4c:42:bd:46:df:cc:21:07:c6:5a:4e:18:
fb:47:b2:d2:87:f5:ff:c8:74:bd:36:a6:0c:16:1c:
e6:57:2e:30:98:3b:78:73:05:7e:77:11:d0:88:b1:
06:e3:0c:55:60:b7:0a:a5:bb:09:51:30:17:68:30:
c2:21:52:00:d1:d0:7f:31:b3:37:3c:9a:c4:bf:ad:
1a:28:f3:67:93:e5:0e:ef:4d:45:83:e9:9c:77:3b:
61:67:5f:00:90:95:f9:6a:18:b5:b6:05:bd:d6:3b:
c1:58:92:86:9a:0d:58:83:9d:19:df:dc:da:dc:02:
35:e1:f9:72:6c:ec:5c:da:df:06:1b:5b:c7:7f:47:
ff:da:65:fe:43:c8:3d:4e:81:ef:c8:ac:35:92:8b:
67:67:d9:61:d3:22:6c:9d:c0:c0:98:bd:57:17:ef:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:13:EE:70:77:BA:CF:EB:41:5E:22:61:4D:F8:29:BC:8B:8A:75
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ksMT7nB3us_rQV4iYU34KbyLinU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:d28e:3b76/128
Signature Algorithm: sha256WithRSAEncryption
2a:64:5c:a5:98:c3:c6:92:bd:51:8b:81:0b:e1:fa:8b:34:17:
2e:6d:43:ff:70:53:4d:83:dd:51:2d:62:bf:ae:5f:25:54:5e:
9f:7b:82:4e:11:ee:c7:f4:e1:96:39:0c:e6:79:2c:e4:33:0c:
21:47:3e:72:43:39:7c:f5:17:82:88:aa:df:f3:30:f1:db:dc:
37:54:8e:3b:d3:0a:3a:4e:3b:e7:8f:87:72:57:3c:39:46:81:
6b:3b:45:90:81:e1:b3:66:90:bd:e4:ba:ca:fd:2e:01:a9:6c:
f8:1d:67:f5:0a:9d:c3:a6:c9:9e:89:ba:70:29:a3:bb:3a:f7:
df:48:38:60:51:e3:aa:c8:28:c2:55:f8:6d:e3:51:d3:7a:12:
e5:45:b0:94:7c:e2:0e:99:d1:eb:1c:05:23:c6:3e:ef:d0:cb:
5b:87:b1:6f:54:e2:64:39:d5:82:d9:10:49:54:52:d5:5d:cb:
b4:29:84:f5:e9:38:32:ca:a5:4e:c8:04:48:54:38:a7:d1:c0:
fd:77:bf:76:59:9c:f3:f2:c1:ea:e6:2f:44:e3:a8:c0:08:ee:
29:fb:10:dc:3c:98:64:24:03:bd:4f:ca:2c:6a:d0:af:74:c2:
94:92:64:e8:7b:21:d0:60:04:71:a2:24:f1:a2:c6:4a:aa:67:
5f:7d:2b:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:44:19 2025 by rpki-client