Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/uorsXnbsrzSQtIFIjrvwuBl4tdo.roa
File: uorsXnbsrzSQtIFIjrvwuBl4tdo.roa (raw, json)
Hash identifier: W/c47iIf5PcUXCdUINtVNzw/zFjfwiFSdqeaIfDJPC0=
Subject key identifier: BA:8A:EC:5E:76:EC:AF:34:90:B4:81:48:8E:BB:F0:B8:19:78:B5:DA
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F7767343685BE9E91AB4B19451E4EAC8
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/uorsXnbsrzSQtIFIjrvwuBl4tdo.roa
Signing time: Wed 02 Apr 2025 17:04:49 +0000
ROA not before: Wed 02 Apr 2025 17:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:f775:f468/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:76:73:43:68:5b:e9:e9:1a:b4:b1:94:51:e4:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 17:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba8aec5e76ecaf3490b481488ebbf0b81978b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:bc:0f:50:9a:d1:c9:66:17:1b:45:d0:3b:
ea:44:67:7f:26:24:86:be:43:6a:36:ce:fa:8c:b2:
ab:8c:f4:53:f6:5c:33:e6:19:7e:90:18:b9:75:9a:
f2:36:af:e5:2c:ac:c8:9b:e1:1f:0c:fb:ea:71:0c:
b7:8f:24:7e:45:df:b5:15:bd:07:71:0e:a3:79:de:
02:d0:60:60:4b:6f:71:31:1c:4c:b4:12:11:79:d3:
39:15:7c:c6:1e:a8:a1:9f:2c:6b:e5:4a:9b:2a:02:
1b:04:c4:c6:3a:5e:47:c5:fd:c3:4e:ba:aa:fb:ec:
7b:af:d6:a2:20:07:db:b8:73:e6:15:15:e7:92:29:
8d:97:28:db:a5:41:af:67:5b:32:e1:be:9e:11:8e:
34:c3:a8:15:04:4d:3c:a6:a0:b3:a2:3b:5b:97:13:
a8:ee:82:67:c0:01:a7:cb:96:fa:57:44:f7:e5:e9:
ac:a6:da:4c:77:ed:9b:81:4c:74:91:7c:ad:e6:f8:
21:20:5c:60:32:d2:4d:69:29:01:69:ff:dc:bd:f6:
ba:b5:40:23:b2:ee:21:aa:ca:e7:09:9b:2a:97:5a:
c9:9d:11:cb:ef:37:87:b3:cf:45:d4:0f:78:9a:24:
e8:37:b9:63:03:0d:f9:7d:be:1b:78:59:1c:49:36:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:EC:5E:76:EC:AF:34:90:B4:81:48:8E:BB:F0:B8:19:78:B5:DA
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/uorsXnbsrzSQtIFIjrvwuBl4tdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:f775:f468/128
Signature Algorithm: sha256WithRSAEncryption
7a:79:64:60:d6:5e:88:1f:bc:2c:79:b4:31:18:2b:95:14:4f:
23:56:c0:3b:4b:bf:e0:aa:ad:a6:6f:f5:63:1b:ed:d8:c2:33:
1c:a9:e6:2a:1b:e0:75:0a:19:85:7f:3f:73:18:15:e2:b7:fc:
20:cc:27:de:86:2c:e6:a8:8d:0b:00:0d:08:7d:cf:2a:51:2d:
0e:97:0c:9e:36:d6:d2:d6:ef:23:d1:95:5c:68:5c:48:7c:15:
93:f6:80:45:5a:a4:ac:e0:ce:f5:3e:a4:ab:fa:a6:40:dd:48:
80:f9:2f:2b:f0:36:46:b7:fc:93:0c:a4:42:66:5c:1f:05:28:
b6:ef:09:78:06:d7:9a:d5:2f:22:42:03:e7:b3:af:c2:10:10:
d9:12:b8:e4:98:53:ed:43:c0:9e:da:b2:56:cd:52:6c:44:e7:
6e:14:8b:61:eb:b6:36:07:14:dc:f5:a0:e2:d2:d8:3f:a1:63:
49:ce:dd:f0:a3:ce:17:0c:f6:6b:ba:c2:18:d2:ac:cd:11:da:
3e:92:fb:c7:98:b8:ef:8f:ab:a4:ff:96:ca:a5:79:25:a4:d9:
16:05:28:1d:ae:12:da:c4:3d:d0:7e:05:66:ff:0f:75:ba:9a:
2f:9d:8b:36:29:6b:22:4b:b0:06:2d:6c:e6:08:35:c2:54:e0:
4b:8e:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:44:15 2025 by rpki-client