Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sjZi1NN-0xXgygZ6MpTGduOKLVQ.roa
File: sjZi1NN-0xXgygZ6MpTGduOKLVQ.roa (raw, json)
Hash identifier: 1V3uBd04sRQvz9nGx2EIdBI9FGjeE/Xf83Tcy2VB1S0=
Subject key identifier: B2:36:62:D4:D3:7E:D3:15:E0:CA:06:7A:32:94:C6:76:E3:8A:2D:54
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E91F2F4CCBFDFCC865B3934137C44DB9
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sjZi1NN-0xXgygZ6MpTGduOKLVQ.roa
Signing time: Sun 30 Mar 2025 22:14:49 +0000
ROA not before: Sun 30 Mar 2025 22:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e9:1f:2f:4c:cb:fd:fc:c8:65:b3:93:41:37:c4:4d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 22:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b23662d4d37ed315e0ca067a3294c676e38a2d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:02:7b:ef:f7:db:e5:a0:f2:ef:0e:c7:e1:
6f:4b:8c:7c:bf:4d:fd:eb:70:77:67:b1:e0:0b:cb:
2a:41:da:bb:eb:a0:9e:d8:8b:2a:98:89:b4:ba:91:
bc:16:23:35:ec:c5:b9:12:d4:6f:24:9d:42:55:25:
6f:d2:eb:6d:66:ac:84:ae:d0:48:97:11:18:97:76:
eb:f2:5e:12:16:fe:2e:17:59:65:85:ac:f2:8c:bb:
c7:0b:32:b1:6c:30:82:9c:10:4c:f1:90:a2:c6:a8:
cf:23:bf:20:1b:ea:2e:79:e4:f3:7c:37:c6:1f:f1:
70:98:6a:29:da:46:7d:09:e5:e2:59:f8:13:15:3c:
85:6e:49:ac:01:8a:f8:6d:e0:9f:89:b8:da:27:1a:
74:ff:3e:70:3d:72:c0:19:8d:fd:8c:ea:2d:c5:4b:
47:30:f5:cf:af:fd:fb:14:69:57:16:52:80:2d:20:
d6:a4:cd:dc:53:e5:19:b3:9a:45:b2:f9:89:9b:ea:
cf:b8:64:5b:33:21:8d:95:32:07:3d:c8:a1:6f:66:
c4:e9:d4:be:e5:8e:d5:b3:b5:5f:64:f2:82:6b:89:
35:80:33:27:9e:b3:a7:fc:09:18:33:42:89:90:9d:
2e:f5:ee:92:62:b8:2c:e0:d2:2a:39:b4:a4:8f:21:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:36:62:D4:D3:7E:D3:15:E0:CA:06:7A:32:94:C6:76:E3:8A:2D:54
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sjZi1NN-0xXgygZ6MpTGduOKLVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
8b:a6:69:22:1c:fe:14:ad:d3:11:ca:17:d1:ff:1d:3c:85:0b:
85:a0:6d:67:16:85:f0:54:b6:81:3e:60:76:aa:4b:24:77:3a:
55:fb:4f:14:35:51:b9:6a:6e:fc:a6:5b:ba:42:bc:98:75:cc:
8f:95:4b:96:8d:59:e4:24:c8:4f:ed:28:52:5f:b5:f6:1e:75:
ee:71:93:dc:11:aa:c4:21:1c:9c:70:dc:9f:4f:d0:7b:72:13:
a9:68:9e:3b:ab:11:69:38:8e:d3:c7:a4:d8:cf:df:29:01:a2:
4d:37:47:cb:b4:ca:ea:7a:62:e1:10:02:84:58:41:4a:6e:5a:
04:4f:ed:92:10:26:2f:f7:2d:38:af:f5:54:13:4e:ff:e0:06:
2d:d8:55:89:0e:8b:40:49:e8:d0:51:ba:7b:0f:89:8c:c5:e8:
13:9a:23:13:96:08:2f:58:c7:44:51:04:6c:3a:dc:5a:09:2f:
98:37:cf:5d:2e:7f:cc:1b:c7:3b:16:2d:c9:ee:3a:3e:5c:b3:
fa:d9:50:f3:ff:2f:ee:28:d2:91:2a:05:c9:8f:b1:18:19:cd:
35:49:45:1f:b5:61:76:7f:3c:32:d5:eb:45:3c:eb:92:aa:45:
18:2f:ad:92:5f:fc:97:6f:38:8d:61:f8:6d:63:35:9f:69:15:
50:07:0e:4a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXpHy9My/38yGWzk0E3xE25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzMwMjIxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjM2NjJkNGQzN2VkMzE1ZTBjYTA2N2EzMjk0YzY3NmUzOGEyZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOACe+/32+Wg8u8Ox+FvS4x8v039
63B3Z7HgC8sqQdq766Ce2IsqmIm0upG8FiM17MW5EtRvJJ1CVSVv0uttZqyErtBI
lxEYl3br8l4SFv4uF1llhazyjLvHCzKxbDCCnBBM8ZCixqjPI78gG+oueeTzfDfG
H/FwmGop2kZ9CeXiWfgTFTyFbkmsAYr4beCfibjaJxp0/z5wPXLAGY39jOotxUtH
MPXPr/37FGlXFlKALSDWpM3cU+UZs5pFsvmJm+rPuGRbMyGNlTIHPcihb2bE6dS+
5Y7Vs7VfZPKCa4k1gDMnnrOn/AkYM0KJkJ0u9e6SYrgs4NIqObSkjyEH7wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLI2YtTTftMV4MoGejKUxnbjii1UMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvc2paaTFOTi0weFhneWdaNk1wVEdkdU9LTFZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAi6ZpIhz+FK3TEcoX0f8dPIUL
haBtZxaF8FS2gT5gdqpLJHc6VftPFDVRuWpu/KZbukK8mHXMj5VLlo1Z5CTIT+0o
Ul+19h517nGT3BGqxCEcnHDcn0/Qe3ITqWieO6sRaTiO08ek2M/fKQGiTTdHy7TK
6npi4RAChFhBSm5aBE/tkhAmL/ctOK/1VBNO/+AGLdhViQ6LQEno0FG6ew+JjMXo
E5ojE5YIL1jHRFEEbDrcWgkvmDfPXS5/zBvHOxYtye46Plyz+tlQ8/8v7ijSkSoF
yY+xGBnNNUlFH7Vhdn88MtXrRTzrkqpFGC+tkl/8l284jWH4bWM1n2kVUAcOSg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:28:44 2025 by rpki-client