Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/xF8_O5VeGFFybHw4g_QkaweGoBY.roa
File: xF8_O5VeGFFybHw4g_QkaweGoBY.roa (raw, json)
Hash identifier: fpcgrUH5I09inqcVUUFxl8jmw0H5S3Qy7dmyvWvnpsc=
Subject key identifier: C4:5F:3F:3B:95:5E:18:51:72:6C:7C:38:83:F4:24:6B:07:86:A0:16
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E5417FCE1A7623FF3C0C0FCB94984DAC
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/xF8_O5VeGFFybHw4g_QkaweGoBY.roa
Signing time: Sun 30 Mar 2025 04:13:49 +0000
ROA not before: Sun 30 Mar 2025 04:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e5:41:7f:ce:1a:76:23:ff:3c:0c:0f:cb:94:98:4d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 04:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c45f3f3b955e1851726c7c3883f4246b0786a016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:27:91:b8:f5:82:e2:ae:6c:a8:01:d1:15:00:
08:4b:62:27:29:81:9b:d2:d9:64:80:e2:36:b3:d1:
23:b7:97:88:7f:4c:f3:7e:cb:d6:2b:66:86:00:9d:
e5:72:9c:63:60:7c:a9:fe:4c:08:8e:06:20:85:26:
3e:e2:51:8f:7e:6c:4e:72:dd:8a:a6:60:05:b8:d8:
60:28:0f:9d:e5:b3:db:9d:65:1a:4e:de:46:45:f4:
ae:c2:a6:46:82:a6:7f:f7:1b:dc:3c:09:6c:ae:7d:
ff:09:70:24:e8:04:ee:3e:1e:cc:f3:3b:ab:54:e1:
94:f2:45:e6:47:2d:ec:90:c2:ab:01:f1:41:ce:f4:
41:ac:c0:5b:ae:64:2c:2f:cc:2a:bd:a2:08:27:78:
1b:84:dd:cf:11:fb:08:6a:12:d0:48:e7:6f:bd:71:
c9:d9:fb:b5:95:8a:2f:a5:98:8a:22:07:90:a6:40:
d8:c4:e4:3c:dd:f4:81:5a:0b:6d:73:21:88:01:9d:
b9:91:0a:4c:77:30:e9:38:fa:e7:db:b5:f7:d0:99:
9d:e6:47:d7:a6:89:30:d6:dc:17:bd:a2:fd:d1:a9:
cd:a4:c8:e6:38:01:07:ab:e0:93:d8:63:de:32:67:
ab:2b:13:e9:b1:38:fa:bd:04:0e:e9:5e:93:54:6d:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:3F:3B:95:5E:18:51:72:6C:7C:38:83:F4:24:6B:07:86:A0:16
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/xF8_O5VeGFFybHw4g_QkaweGoBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
5c:7f:09:be:d7:aa:20:c5:df:e6:99:1c:15:ea:d3:e9:37:2c:
c8:0a:5b:e1:4a:e1:26:f2:b7:5f:8f:0a:fc:6d:84:ff:27:6f:
72:3b:5e:1d:59:c2:2d:9a:91:1f:09:a0:0a:39:b1:33:ac:24:
c9:74:59:ec:8e:b1:88:78:13:67:60:d5:5d:e9:e8:59:7f:b4:
4a:40:bf:83:2d:53:a4:fc:1b:58:3a:55:7e:ea:cc:61:16:ca:
89:27:b3:43:71:18:9d:96:68:ef:93:de:8a:b7:7e:3e:65:91:
13:75:5b:aa:98:1f:bc:f5:00:03:e4:9b:3d:12:e2:45:47:a6:
07:70:57:2b:a7:24:c8:12:c0:86:9e:8a:a7:bc:cf:d5:51:1c:
91:68:09:45:e5:b0:04:ac:27:87:ff:74:3f:c5:57:95:5c:ae:
91:d8:4a:eb:58:30:6f:1b:ed:74:ef:f0:8f:b1:9c:45:e7:56:
9b:56:3b:c0:cd:02:dc:95:8b:76:c4:92:5a:ec:10:20:17:29:
44:bf:65:14:9f:91:52:13:64:06:3c:54:ce:53:47:fd:d0:a6:
86:e2:f7:4b:6a:0e:f8:63:49:1a:64:55:b5:75:36:bf:da:1b:
49:be:34:bf:70:51:46:08:3e:03:67:34:d6:b6:87:0f:2a:6c:
cd:a6:3f:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:58 2025 by rpki-client