Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/swVqltxRA5cH_EJ_jJ8RRIamaVc.roa
File: swVqltxRA5cH_EJ_jJ8RRIamaVc.roa (raw, json)
Hash identifier: JS5qM7JK+tj0lYOjACexGrQGhpBXJZ/gIUiNkYhDlTo=
Subject key identifier: B3:05:6A:96:DC:51:03:97:07:FC:42:7F:8C:9F:11:44:86:A6:69:57
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FDB98970C3D8FB55CC9AF43512A561D5
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/swVqltxRA5cH_EJ_jJ8RRIamaVc.roa
Signing time: Thu 03 Apr 2025 22:15:49 +0000
ROA not before: Thu 03 Apr 2025 22:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fd:b9:89:70:c3:d8:fb:55:cc:9a:f4:35:12:a5:61:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 3 22:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3056a96dc51039707fc427f8c9f114486a66957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:1c:36:cb:87:07:38:ec:36:98:be:30:dd:
66:93:c5:3b:72:fe:8a:57:93:8b:e1:c1:77:ad:12:
3e:88:0d:77:08:85:93:22:f7:d2:ae:f8:b7:d0:51:
d4:fa:c6:24:a4:5f:90:74:e7:67:d4:17:05:b8:5d:
98:d0:23:5c:d2:f7:f1:60:2b:77:80:63:4f:1c:a8:
5a:f2:a0:8d:9f:4a:e0:7f:79:8e:25:95:d8:d2:25:
77:db:16:8e:8d:e3:7e:70:f4:df:f8:d7:cf:50:68:
06:aa:23:23:6d:b0:4a:7c:2d:3d:61:c7:31:c5:72:
fd:f2:ca:86:4e:51:e4:01:fd:b5:33:29:a3:06:c6:
8c:d7:d8:82:16:1e:f1:3b:90:6f:28:49:ad:e2:2e:
3b:5d:5d:48:37:6c:d4:4e:02:72:60:ce:21:d4:85:
48:55:af:b0:58:c1:ad:1b:ef:21:6d:d3:7e:bc:de:
32:45:6c:48:b5:74:f4:ee:91:e7:53:dc:bd:74:bb:
6b:e4:b9:84:91:6d:02:95:9a:6e:4d:5c:04:4c:31:
4d:69:23:23:cf:96:27:57:16:b0:f8:f2:08:13:2c:
a7:e5:16:c7:79:6a:76:63:3b:30:70:60:bf:2d:f9:
d2:21:5a:98:6c:30:e6:f9:4a:7e:94:bd:c8:93:17:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:6A:96:DC:51:03:97:07:FC:42:7F:8C:9F:11:44:86:A6:69:57
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/swVqltxRA5cH_EJ_jJ8RRIamaVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
5c:e7:f6:ae:e0:fa:92:48:2c:60:3f:39:79:c8:f8:6a:6e:19:
84:ca:3e:1f:36:75:f6:7b:aa:08:8d:94:bc:d1:fb:c7:5a:41:
b1:74:8c:3e:3e:39:48:17:a5:ff:69:22:ed:23:35:93:01:a0:
63:46:4c:7b:98:f9:1d:58:31:1a:61:2d:90:5c:e0:21:c8:52:
d9:6a:b4:d7:de:52:49:b2:37:26:e8:18:6b:8a:7d:20:df:45:
37:6b:50:ae:1f:30:f4:f5:b8:bc:d2:cc:8b:fa:71:dd:46:a8:
5f:37:28:bf:55:4b:a0:74:b4:55:d4:62:07:8b:49:a3:dc:ae:
54:2e:99:7d:f9:37:a8:ab:86:52:45:3c:71:bb:f6:c5:57:dd:
f4:92:13:22:4d:e0:be:fc:bb:c1:60:21:e0:f5:b8:fd:fb:5d:
c3:c9:da:98:f2:8c:4b:cd:79:e3:08:0d:54:a6:72:65:54:4b:
4f:b2:cf:86:72:8d:65:dd:9b:ed:85:c7:d6:4c:e7:7c:86:3b:
0e:17:93:f0:dd:43:54:77:c9:09:8c:aa:2f:57:7b:e3:e8:71:
49:c9:2d:67:0f:45:dc:77:dc:d5:3b:9c:ba:b1:06:1f:f7:5a:
19:d3:b1:56:57:00:98:a7:02:60:21:1d:6c:77:bb:ed:38:5d:
18:80:10:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:59 2025 by rpki-client