Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/vLH6vcMw6dERu6pagRaUQJrje8U.roa
File: vLH6vcMw6dERu6pagRaUQJrje8U.roa (raw, json)
Hash identifier: bO835nurlRwubftS0Z/gD38yUTraJZe7Z8PrZYHnsOQ=
Subject key identifier: BC:B1:FA:BD:C3:30:E9:D1:11:BB:AA:5A:81:16:94:40:9A:E3:7B:C5
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F2C71B7B94460A01E47FFECF101F6E18
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/vLH6vcMw6dERu6pagRaUQJrje8U.roa
Signing time: Tue 01 Apr 2025 19:14:49 +0000
ROA not before: Tue 01 Apr 2025 19:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:c7:1b:7b:94:46:0a:01:e4:7f:fe:cf:10:1f:6e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 19:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcb1fabdc330e9d111bbaa5a811694409ae37bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:01:97:2c:b6:dc:97:94:08:fd:5d:99:ac:
2e:96:7a:e4:b7:b2:aa:7a:5e:18:f3:de:37:db:86:
02:b2:50:17:8b:f3:00:82:4a:48:dc:e7:5e:ae:0b:
4a:bc:ca:b7:fc:2c:85:bf:a7:ab:27:c7:9e:bb:f1:
c1:58:98:48:c5:21:0f:28:84:ad:bf:18:51:e3:13:
d4:a7:81:6d:4c:96:43:d3:8f:d1:a4:76:95:0a:b2:
79:d4:3e:40:55:25:6a:1e:86:6c:8a:69:d1:54:85:
2d:47:0b:53:82:c4:8b:b5:18:0f:42:fc:35:a6:e8:
c3:dc:c2:36:26:6c:5d:71:36:6f:86:62:b1:19:f3:
8e:0d:1d:03:fc:70:7c:49:fd:75:a3:18:ac:27:b0:
4a:43:ce:64:cb:a9:10:f4:a9:c1:2a:16:ab:b9:48:
fd:d5:14:bb:44:04:56:c7:2b:f0:a6:9f:3b:04:ff:
cc:c5:c7:79:1a:f1:73:3b:a8:ef:d5:d4:46:81:de:
24:f6:4e:a5:46:22:d9:85:b6:43:d0:57:5b:20:da:
3f:b9:38:c1:36:1c:12:16:a1:f0:ec:f6:2a:c5:58:
13:7d:5e:b4:81:4d:91:0c:16:f4:0a:c1:df:0a:5b:
42:d8:8b:d2:ee:e5:f5:24:91:6a:7b:e5:96:d3:70:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:FA:BD:C3:30:E9:D1:11:BB:AA:5A:81:16:94:40:9A:E3:7B:C5
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/vLH6vcMw6dERu6pagRaUQJrje8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
5b:c7:c7:c6:5d:05:98:31:8d:bd:cf:18:2f:29:a3:a2:8d:65:
64:7c:8f:75:a9:ae:60:46:d8:e9:5d:9a:3f:20:97:d2:29:f4:
4b:90:7e:50:c3:d9:b1:4d:26:d0:42:97:f5:98:cb:af:10:64:
53:98:13:5d:04:ab:ac:bc:85:5c:b4:91:e7:6f:14:78:36:46:
72:3b:e7:83:1b:b1:9c:17:42:4f:49:56:bd:35:b2:9a:4c:f1:
77:bd:c3:33:6c:88:66:94:98:04:fa:ce:be:f9:29:18:e4:70:
69:07:ee:65:c6:6b:25:da:26:70:3f:1e:56:25:df:2c:e9:6e:
a7:70:7b:8b:5d:9f:1b:fc:61:d3:92:bc:50:17:ee:26:ce:29:
55:2e:9c:7f:b5:af:62:cc:59:d2:7b:2e:f6:ee:7f:10:c8:01:
98:8f:af:94:5d:bf:18:5a:e6:5c:cf:a3:b3:b0:c3:87:5b:98:
c9:b6:72:59:c0:c2:a3:9b:62:e6:ef:f9:6d:7d:ab:78:ad:97:
da:17:67:a7:5e:ba:e7:b8:15:1f:2c:44:10:60:ca:71:ff:f8:
e3:88:32:14:1a:4f:27:32:62:43:15:db:fe:d1:5a:96:32:04:
bc:8f:a4:68:14:32:33:7d:04:3d:28:df:5e:2a:a8:d1:da:f4:
e7:26:1a:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 18 00:06:56 2025 by rpki-client