Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/qj-ugvZCbXwAP89_1raH42PNHgo.roa
File: qj-ugvZCbXwAP89_1raH42PNHgo.roa (raw, json)
Hash identifier: hJ4jm/IsJJdbe6IT/hA4HMPSTm8/76F8keF6UvXEUWQ=
Subject key identifier: AA:3F:AE:82:F6:42:6D:7C:00:3F:CF:7F:D6:B6:87:E3:63:CD:1E:0A
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195D746B4269BC735D041FF719CB6BB85E7
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/qj-ugvZCbXwAP89_1raH42PNHgo.roa
Signing time: Thu 27 Mar 2025 11:04:49 +0000
ROA not before: Thu 27 Mar 2025 11:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:d746:940c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:46:b4:26:9b:c7:35:d0:41:ff:71:9c:b6:bb:85:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 27 11:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa3fae82f6426d7c003fcf7fd6b687e363cd1e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:69:4f:08:a2:a8:a6:2b:11:50:f2:a9:6f:
f9:3e:05:71:97:24:ec:69:a0:95:cb:c1:ef:b3:47:
ae:38:5b:3f:92:45:de:ba:ac:95:d7:9c:34:0a:55:
77:bf:ea:23:de:1e:c1:ab:5c:d5:66:e5:8f:ba:c2:
40:a9:4e:71:a5:f9:8a:c1:40:ca:ed:15:09:e9:ff:
25:13:9d:6e:cb:6b:5a:25:de:12:28:88:cb:25:bc:
d9:df:54:fb:24:c8:8c:98:85:46:18:9a:6e:35:88:
41:88:ba:50:4c:0b:2f:62:9a:f3:12:3e:2f:4b:04:
02:40:02:78:b3:17:b8:ae:3d:aa:98:aa:c6:af:82:
6f:62:fe:7c:40:fb:31:b6:cc:b2:1d:52:8a:dd:90:
cd:d7:59:4e:c0:5a:95:9e:66:af:ab:71:19:e4:72:
f2:c7:28:da:37:a4:61:1d:74:d9:a6:6b:6c:9f:89:
59:39:10:61:a7:e3:e7:c5:75:ad:fe:cc:67:e4:f9:
13:84:e7:2c:ef:ac:84:50:92:1e:a2:d6:4f:13:47:
54:dd:c8:94:7a:9f:0d:f4:71:19:e0:64:69:b6:94:
07:f5:ea:18:c2:91:6e:88:f3:d7:06:2c:4b:c4:5f:
ef:7a:6d:30:ed:39:52:c5:28:22:61:a2:d0:c1:67:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3F:AE:82:F6:42:6D:7C:00:3F:CF:7F:D6:B6:87:E3:63:CD:1E:0A
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/qj-ugvZCbXwAP89_1raH42PNHgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:d746:940c/128
Signature Algorithm: sha256WithRSAEncryption
34:43:ea:1b:fd:81:1d:a7:ba:db:33:66:8c:d5:7f:0c:06:d2:
f4:6e:19:11:06:7b:19:5d:be:64:c1:8a:5b:65:31:22:c7:dd:
e7:02:c3:e6:96:41:8f:0a:b9:65:91:70:65:91:13:04:40:fb:
f1:1a:95:3c:4e:6b:1b:63:bd:04:5e:83:92:69:f3:0f:67:e3:
83:67:1a:77:51:b7:c0:53:ca:da:48:92:e3:91:f4:d2:89:15:
bb:00:48:0c:31:6f:47:d3:60:61:02:b0:a6:76:b8:25:af:49:
56:e3:52:bd:e9:9d:8c:b3:f6:6a:80:69:c7:a2:50:dd:a3:88:
86:09:83:57:e6:54:9e:9d:91:85:64:86:65:46:98:92:dc:51:
e3:df:ed:a6:30:bc:db:69:04:70:fd:a9:fb:21:7c:96:c6:7f:
27:e9:ca:b8:7c:d4:10:93:98:f0:6f:54:63:c4:d6:41:e0:66:
b5:0f:06:24:5e:11:9d:74:09:2b:74:75:25:96:2b:3a:6a:7d:
7f:4e:53:c6:ff:3e:fb:c1:70:5b:c1:b5:fe:d6:4f:f7:b6:c6:
de:90:16:fb:8e:cb:be:53:70:72:f5:ec:99:c9:0b:69:cf:68:
13:8a:82:fb:e8:2d:fd:87:ac:4a:14:cd:42:82:77:52:53:b9:
10:a9:4c:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:25:42 2025 by rpki-client