Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/mhcA4IXnNJ5an4BPp3LrHsBl1MA.roa
File: mhcA4IXnNJ5an4BPp3LrHsBl1MA.roa (raw, json)
Hash identifier: ShNheE9NISOSsbaLIIYnLive2iU0HMOf8bTI4xvXFTY=
Subject key identifier: 9A:17:00:E0:85:E7:34:9E:5A:9F:80:4F:A7:72:EB:1E:C0:65:D4:C0
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E79CD4D533AE84FE2F4303F17495A3F8
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/mhcA4IXnNJ5an4BPp3LrHsBl1MA.roa
Signing time: Sun 30 Mar 2025 15:12:49 +0000
ROA not before: Sun 30 Mar 2025 15:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e7:9c:d4:d5:33:ae:84:fe:2f:43:03:f1:74:95:a3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 15:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a1700e085e7349e5a9f804fa772eb1ec065d4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:3d:c7:44:46:d7:26:c6:53:ff:89:6b:e3:
33:0a:c4:69:ee:34:cc:d8:45:d5:7f:e2:14:e9:d9:
33:0d:dc:61:5c:65:5b:79:1e:20:1d:90:b6:ed:f2:
ed:d0:20:ce:62:6b:1f:b2:6d:46:80:47:49:16:4f:
d8:83:fb:0f:97:74:e7:56:20:f8:24:4c:58:91:16:
9f:99:00:14:5e:c8:70:5f:d2:08:3a:48:6c:42:61:
a7:81:7c:a9:b2:7f:50:6c:0a:ab:92:83:47:92:02:
a2:87:d7:59:16:a0:24:81:50:eb:d1:09:fb:ab:f7:
4b:b8:cd:12:ba:bf:e6:82:6f:38:88:4d:ed:70:d6:
41:1f:42:30:d3:8e:4b:3c:5a:0c:86:03:ea:94:bf:
e9:53:bb:46:ea:02:08:0e:37:35:bc:7a:48:70:76:
89:7e:7a:60:19:50:f4:f2:ac:7b:eb:06:d9:82:9c:
ed:5d:02:f2:3e:e5:3d:9c:6e:a0:63:80:85:ea:ed:
90:6a:20:be:dc:6c:7d:94:ca:04:3d:ac:2f:ed:47:
87:cb:e5:91:c0:c3:80:14:fb:d4:9f:c2:2f:d4:e1:
bd:09:c9:58:7a:12:f2:5e:de:6d:79:c6:45:cb:04:
0f:26:ae:7c:88:38:fc:b6:a6:b6:35:c6:d2:46:96:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:17:00:E0:85:E7:34:9E:5A:9F:80:4F:A7:72:EB:1E:C0:65:D4:C0
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/mhcA4IXnNJ5an4BPp3LrHsBl1MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
9e:4b:d7:ce:16:5b:7c:5a:b7:67:77:63:45:f4:ad:0b:e3:63:
6e:11:f9:32:18:50:3f:4f:42:ef:70:45:b9:b0:82:54:0a:b3:
65:e3:60:65:fe:32:7d:95:d2:57:e8:62:03:43:95:1b:54:23:
aa:26:4c:5c:d6:8d:41:f2:d8:df:6c:c5:73:84:9f:b4:ef:cc:
ac:76:43:03:e9:5c:40:f0:5d:1d:18:6c:75:5d:b8:fb:f0:af:
2d:4d:0d:2e:6b:d4:54:74:60:0f:4d:09:80:67:f3:d5:48:22:
d1:0c:37:6d:a5:63:ac:ed:b6:9d:76:a3:3d:7c:6c:91:b5:d3:
68:d9:c1:7c:e6:21:5b:dd:8f:3a:ae:31:d3:ee:5e:02:ba:b3:
b8:cd:a3:cc:95:61:63:48:53:93:a9:bf:22:67:3c:3e:5a:09:
6b:f1:28:3e:42:b7:4f:e2:0a:b5:38:59:ee:b5:87:ec:b2:4a:
23:24:ed:a6:d3:f6:0e:ef:41:e9:ed:60:31:2f:93:d0:0d:97:
5c:6a:a7:00:8c:1a:20:ad:92:2b:86:f4:31:af:13:57:b3:69:
58:af:b0:62:fd:bf:f1:eb:d2:8c:80:39:2e:51:b1:8f:90:01:
06:62:00:6e:f6:f7:7f:b7:b7:23:26:71:48:d8:88:dd:0e:59:
d1:7a:ce:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:56:37 2025 by rpki-client