Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/xuHKMSZlRNcrM16uZepnIH0U9NE.roa
File: xuHKMSZlRNcrM16uZepnIH0U9NE.roa (raw, json)
Hash identifier: hNd0EaJwDT+pLKeaCwDm8VF2x7ulfSb5E5VH0H6Zw0I=
Subject key identifier: C6:E1:CA:31:26:65:44:D7:2B:33:5E:AE:65:EA:67:20:7D:14:F4:D1
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E9F829DB1F65289BBAFE5EA647112CA2
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/xuHKMSZlRNcrM16uZepnIH0U9NE.roa
Signing time: Mon 31 Mar 2025 02:11:49 +0000
ROA not before: Mon 31 Mar 2025 02:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e9:f8:29:db:1f:65:28:9b:ba:fe:5e:a6:47:11:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 31 02:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6e1ca31266544d72b335eae65ea67207d14f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:b5:e4:5d:9f:44:90:93:a2:dc:1d:bb:80:
4e:ba:32:4a:ba:27:36:38:e1:fc:a2:2c:ea:1a:eb:
4f:e4:82:e1:7b:73:62:26:5c:75:78:34:03:f6:d9:
35:20:ca:69:74:ec:ac:6e:21:66:79:ce:6b:0f:ad:
2a:25:ab:b6:1b:b5:6e:9a:4d:cf:83:46:64:2d:57:
80:30:1a:6d:f2:ef:19:dd:3b:2b:31:d6:31:51:d8:
08:4f:89:94:3f:10:72:cf:ce:75:c0:e6:20:e9:46:
e5:b3:42:03:dc:7a:86:2d:1b:81:fa:f7:b6:0f:c1:
e2:39:ca:d1:b3:66:03:4f:77:36:da:ab:a3:a6:f9:
79:e4:6c:2b:f5:30:00:d5:da:b0:0f:c6:6c:0e:f4:
ff:af:21:80:86:35:fc:a5:03:5a:7f:0a:49:18:de:
72:8b:53:59:ce:96:59:ba:b0:4b:3a:53:5b:37:ca:
39:f0:f4:5a:21:8d:cf:d1:f7:96:f0:d1:0a:e7:79:
25:b9:50:4b:0a:9c:15:39:d6:9b:98:ee:f7:2b:84:
eb:41:f1:77:04:8c:07:32:e1:fb:1b:8c:63:95:6b:
6d:23:9f:ce:c6:9f:84:2c:5a:7f:22:12:21:91:26:
86:e5:a3:0a:e6:ec:fa:74:b5:48:87:76:81:b2:96:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:CA:31:26:65:44:D7:2B:33:5E:AE:65:EA:67:20:7D:14:F4:D1
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/xuHKMSZlRNcrM16uZepnIH0U9NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
7b:10:c2:6c:80:88:b2:f7:e0:90:48:c7:bc:65:38:92:1a:df:
ec:df:92:cf:a6:11:bd:2b:71:06:19:35:c0:1d:88:d4:9d:19:
f1:8b:ca:4f:5f:5a:2d:7a:87:d2:3f:51:f9:aa:0a:ac:1b:a2:
2a:1b:b0:8e:2c:11:af:48:1a:04:a6:90:64:a9:ce:af:23:ff:
b4:5e:9a:e8:a1:8d:f8:13:c7:5b:05:a4:0b:e9:1a:37:68:ad:
fb:b0:48:1e:b5:5a:6c:7f:d6:98:92:d3:00:88:08:96:78:d2:
93:15:af:46:57:58:58:cd:90:b0:4c:fc:1b:fc:28:8c:8a:41:
c1:f2:de:03:c3:42:fd:f0:cf:62:b9:f0:93:80:9c:a6:1b:28:
68:ff:34:50:a2:8d:43:85:b1:cd:93:14:ca:73:88:36:fe:c9:
91:5f:1f:10:33:4a:8a:80:2c:ed:84:95:44:bd:c8:e1:25:f7:
7e:9f:59:fa:4d:96:a2:47:9a:9f:13:5c:f7:70:fc:e0:c4:b1:
d6:49:18:09:38:b5:01:b8:06:36:d5:48:c2:e3:32:4a:cf:58:
34:35:41:f5:c2:c7:3b:24:78:74:63:c5:5f:81:5d:ed:b5:17:
6c:a0:cc:a4:2a:03:02:aa:73:ec:51:e0:1b:d2:f7:94:10:05:
dc:d7:04:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:40:46 2025 by rpki-client