Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/t-fm94_CclC5pQ51qC3aYRHAsVM.roa
File: t-fm94_CclC5pQ51qC3aYRHAsVM.roa (raw, json)
Hash identifier: HV7bHuSYxaphuU1bxdU7v3a1WmEa5U7SaIrp+vmM4/Y=
Subject key identifier: B7:E7:E6:F7:8F:C2:72:50:B9:A5:0E:75:A8:2D:DA:61:11:C0:B1:53
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195B4F1A3E829419ABC4628793706D321B5
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/t-fm94_CclC5pQ51qC3aYRHAsVM.roa
Signing time: Thu 20 Mar 2025 19:04:49 +0000
ROA not before: Thu 20 Mar 2025 19:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:b4f0:f305/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:f1:a3:e8:29:41:9a:bc:46:28:79:37:06:d3:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 20 19:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7e7e6f78fc27250b9a50e75a82dda6111c0b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:53:ad:b0:ae:00:b5:d0:8b:4d:6b:b2:a7:
ed:a3:60:80:73:3d:3d:8b:0a:f3:4b:39:a8:95:34:
73:bc:c1:88:57:69:fe:7c:11:a5:67:d3:38:2e:e0:
bf:42:61:7d:5a:bd:29:72:60:6b:25:e2:52:e4:45:
b2:37:e6:0a:a9:5e:ab:05:f3:2a:a7:33:4b:77:4e:
c5:7d:02:54:52:6a:20:af:36:75:bb:43:70:fd:7d:
f3:d2:96:5a:be:2d:fc:03:49:05:8b:1d:56:12:85:
22:e3:3c:a3:53:58:be:fc:17:d1:96:32:1b:32:01:
e5:85:be:a2:de:5c:34:0d:89:16:8b:b5:48:6a:10:
5c:0b:35:4c:77:2c:0f:15:53:84:81:69:cd:bd:d6:
60:38:10:72:d6:c3:9b:3c:7e:40:9f:65:7a:36:ff:
b6:75:21:d2:b2:f7:4d:3d:c7:cf:0c:ff:9f:a6:d1:
ef:de:8e:3f:6e:86:46:d5:34:cd:64:e4:64:aa:6e:
5d:d1:1d:61:9c:0d:32:af:2a:c1:1c:94:c3:47:1d:
3f:dc:b0:5c:e8:c4:e7:4a:c8:6e:de:cf:54:03:5f:
37:fd:cf:7b:00:29:93:7e:ff:43:53:6a:2a:46:2e:
e8:83:07:00:d7:79:fe:8b:ba:3c:7c:9d:f0:22:57:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:E6:F7:8F:C2:72:50:B9:A5:0E:75:A8:2D:DA:61:11:C0:B1:53
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/t-fm94_CclC5pQ51qC3aYRHAsVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:b4f0:f305/128
Signature Algorithm: sha256WithRSAEncryption
41:ac:ad:cb:67:9e:bc:ea:c8:4f:c7:52:3f:7d:cd:62:e7:08:
c1:d8:4b:8d:a6:ef:1e:47:5a:37:39:3c:84:22:6e:de:14:5a:
f2:07:7b:18:30:6d:5d:fb:26:f2:97:04:df:ec:b2:f3:d3:3c:
77:f7:d6:81:8e:60:d6:eb:1b:07:0f:36:40:28:37:6e:92:42:
84:44:1a:66:87:c2:2d:dd:39:6a:87:c2:15:e1:c5:bf:81:05:
05:de:28:7e:c0:0b:6f:88:d4:54:83:3d:75:7b:1c:58:06:39:
19:b6:0f:76:33:9f:0f:8b:00:14:52:0f:e1:c4:a3:cb:03:d5:
6d:b5:53:bd:c3:4f:52:8c:f1:f1:5b:e3:fb:c9:db:3d:73:ff:
45:e5:d1:d6:d8:fe:d6:31:9b:85:d5:25:fd:0f:41:f6:09:51:
21:a2:21:6b:9b:d1:63:d6:67:d5:f3:ed:23:25:72:42:4b:7e:
17:ab:66:94:e0:99:73:f9:e7:b1:ce:2d:67:fc:8a:5d:98:ad:
df:27:85:08:ca:4a:1a:cf:8c:a2:57:62:69:76:d7:7e:cf:51:
6d:c5:fb:0f:10:ed:71:d8:c0:4c:df:8b:13:44:16:25:74:d4:
8c:b9:2b:c2:77:6a:42:41:09:b9:09:a6:1c:3f:4c:66:05:b6:
65:fd:7b:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:45 2025 by rpki-client