Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/lGcg95M5TCXX0bAI5YNcEkuejxc.roa
File: lGcg95M5TCXX0bAI5YNcEkuejxc.roa (raw, json)
Hash identifier: pa8Cpf9rNq2m6ieIuJ5KIE+23UmaNwTfc5CYp/h8oH4=
Subject key identifier: 94:67:20:F7:93:39:4C:25:D7:D1:B0:08:E5:83:5C:12:4B:9E:8F:17
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FA777D9A73C88EF1E7F61DF72950990A
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/lGcg95M5TCXX0bAI5YNcEkuejxc.roa
Signing time: Thu 03 Apr 2025 07:04:49 +0000
ROA not before: Thu 03 Apr 2025 07:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:fa77:7494/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:77:7d:9a:73:c8:8e:f1:e7:f6:1d:f7:29:50:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 3 07:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=946720f793394c25d7d1b008e5835c124b9e8f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:7d:9e:c7:8e:ee:d6:4c:89:b8:06:80:52:
14:ae:b6:0d:ac:4b:01:25:c0:08:3b:2a:3e:58:7e:
16:39:95:05:06:65:5b:b4:6c:85:66:92:4e:69:1c:
29:7b:01:c7:51:08:f6:86:d7:0e:88:fb:61:f5:a3:
9f:f6:86:ad:d2:b5:45:94:e3:af:b5:99:e9:3b:c3:
52:28:5f:47:bc:29:3d:ed:d6:c3:d8:d5:46:3a:4c:
2f:5d:e9:95:d4:b9:04:5b:89:a7:c6:bd:e2:d2:d5:
7e:0d:c4:a0:1c:06:ca:76:17:18:fd:5f:2f:01:31:
4b:97:7e:f4:61:cf:d7:ac:43:c9:5c:23:3f:62:c7:
8e:b3:5a:ac:c6:63:4f:b1:54:ec:c1:9f:57:1c:e6:
70:c5:93:62:c3:11:56:88:93:46:8e:21:7e:91:ad:
bc:84:80:d3:4f:54:97:c8:79:bd:da:26:ea:3c:9b:
20:fc:8e:78:01:89:8e:5e:72:1a:ac:a6:37:52:05:
c6:04:d6:11:2a:a8:20:d3:49:0e:8f:b0:3f:1a:bc:
72:8b:7f:a1:51:79:b4:d3:4b:2e:10:51:a7:15:b2:
d0:44:2c:f3:75:90:95:0c:bd:f5:93:74:c8:3b:db:
a4:6f:b0:fa:0c:08:9c:5d:f5:8e:cc:ff:4e:5f:f0:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:20:F7:93:39:4C:25:D7:D1:B0:08:E5:83:5C:12:4B:9E:8F:17
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/lGcg95M5TCXX0bAI5YNcEkuejxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:fa77:7494/128
Signature Algorithm: sha256WithRSAEncryption
5a:a1:44:1c:92:1b:60:bf:73:3e:1f:0b:d4:01:be:25:ca:04:
1d:d7:43:51:ca:d1:09:6a:32:85:77:e6:02:be:98:ac:29:fd:
0f:bb:40:b2:63:30:32:38:09:b7:98:ff:0d:ad:76:ee:75:e8:
64:4f:95:f3:76:35:83:c2:d3:72:42:3a:d6:36:32:70:49:3c:
d5:18:1d:95:b2:88:47:cd:ee:42:aa:cc:0b:fa:d1:07:71:01:
23:06:83:46:ad:a9:08:ae:96:de:0c:a5:9a:8d:6e:eb:e3:6a:
e3:9c:09:ee:0f:07:95:e3:04:58:05:ff:30:c3:6f:73:04:8b:
70:ab:c3:b5:9c:56:65:60:e6:00:9f:a6:fc:e7:65:09:cf:e5:
a4:1b:b5:0b:d0:a8:19:a0:be:7b:68:3a:50:29:fe:fe:37:18:
71:c6:72:13:6f:21:3b:7c:83:f5:c4:e8:8c:1d:57:a0:85:3c:
71:a8:d9:0f:14:70:a5:7d:54:5f:91:cc:ff:79:0c:f1:2a:eb:
77:49:01:b5:59:c0:07:f2:cc:79:7f:63:15:5d:81:57:14:99:
f5:44:64:a2:b7:4a:02:e2:eb:1a:76:ac:90:1f:64:28:c2:fe:
38:72:99:62:58:4c:64:8d:b7:27:b3:09:2b:d8:b4:6e:f6:ed:
ff:6a:8a:da
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZX6d32ac8iO8ef2HfcpUJkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAzMDcwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDY3MjBmNzkzMzk0YzI1ZDdkMWIwMDhlNTgzNWMxMjRiOWU4ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ht9nseO7tZMibgGgFIUrrYNrEsB
JcAIOyo+WH4WOZUFBmVbtGyFZpJOaRwpewHHUQj2htcOiPth9aOf9oat0rVFlOOv
tZnpO8NSKF9HvCk97dbD2NVGOkwvXemV1LkEW4mnxr3i0tV+DcSgHAbKdhcY/V8v
ATFLl370Yc/XrEPJXCM/YseOs1qsxmNPsVTswZ9XHOZwxZNiwxFWiJNGjiF+ka28
hIDTT1SXyHm92ibqPJsg/I54AYmOXnIarKY3UgXGBNYRKqgg00kOj7A/Grxyi3+h
UXm000suEFGnFbLQRCzzdZCVDL31k3TIO9ukb7D6DAicXfWOzP9OX/CQzQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJRnIPeTOUwl19GwCOWDXBJLno8XMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvbEdjZzk1TTVUQ1hYMGJBSTVZTmNFa3VlanhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGV3GzZ3wMRACABBnwAZP//AAABlfp3dJQwDQYJKoZIhvcNAQELBQADggEB
AFqhRBySG2C/cz4fC9QBviXKBB3XQ1HK0QlqMoV35gK+mKwp/Q+7QLJjMDI4CbeY
/w2tdu516GRPlfN2NYPC03JCOtY2MnBJPNUYHZWyiEfN7kKqzAv60QdxASMGg0at
qQiult4MpZqNbuvjauOcCe4PB5XjBFgF/zDDb3MEi3Crw7WcVmVg5gCfpvznZQnP
5aQbtQvQqBmgvntoOlAp/v43GHHGchNvITt8g/XE6IwdV6CFPHGo2Q8UcKV9VF+R
zP95DPEq63dJAbVZwAfyzHl/YxVdgVcUmfVEZKK3SgLi6xp2rJAfZCjC/jhymWJY
TGSNtyezCSvYtG727f9qito=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:46:48 2025 by rpki-client