Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/z6qIZmOZYM8e8MKvxzainWyhLco.roa
File: z6qIZmOZYM8e8MKvxzainWyhLco.roa (raw, json)
Hash identifier: pq3OmlF+lqEWRcKQiFAzjchtBgkgmbKdMLH84JqLVrQ=
Subject key identifier: CF:AA:88:66:63:99:60:CF:1E:F0:C2:AF:C7:36:A2:9D:6C:A1:2D:CA
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FE936E5F7E5B9E7D2A27B270059FCF1F
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/z6qIZmOZYM8e8MKvxzainWyhLco.roa
Signing time: Fri 04 Apr 2025 02:13:49 +0000
ROA not before: Fri 04 Apr 2025 02:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fe:93:6e:5f:7e:5b:9e:7d:2a:27:b2:70:05:9f:cf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 4 02:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfaa8866639960cf1ef0c2afc736a29d6ca12dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:60:21:80:d4:64:eb:56:38:ef:d9:72:69:
40:aa:12:eb:ee:88:f6:b0:ef:a9:00:13:62:c0:42:
b4:7a:09:b8:18:d0:dc:ff:32:79:0a:91:72:68:e1:
6d:4d:fe:72:6b:66:ad:69:77:e3:9e:91:28:b9:8a:
45:19:39:cb:ba:13:ab:19:ca:1b:f0:35:2b:ce:51:
9c:fe:1b:5d:8e:97:07:87:d9:62:fe:58:7e:be:21:
5b:82:25:45:bb:b9:03:d9:f2:00:2b:63:f0:27:5e:
d2:59:a9:f5:8d:d7:86:5d:2a:f5:88:77:aa:b2:0e:
9f:75:0b:aa:23:a8:53:4c:18:09:d6:f8:5a:6f:35:
98:27:67:d9:80:7a:6e:53:f9:ab:4c:56:b2:70:ac:
61:26:59:23:3b:62:f7:dd:46:dd:c6:69:df:58:44:
2c:e5:1e:7b:8a:5d:8e:6f:0a:c7:5a:f5:03:43:9d:
80:2c:1c:d5:50:49:68:a7:17:cb:22:0d:49:5c:4d:
e5:78:aa:e6:e1:4c:a8:9a:2e:0c:3d:89:58:74:5d:
c1:76:f2:c2:56:8b:8a:a1:3b:15:31:b8:c4:90:29:
25:8e:db:56:99:14:f6:4a:05:f3:b2:0e:42:7f:57:
2c:23:42:34:44:5e:cc:96:39:d7:39:56:b2:48:81:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AA:88:66:63:99:60:CF:1E:F0:C2:AF:C7:36:A2:9D:6C:A1:2D:CA
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/z6qIZmOZYM8e8MKvxzainWyhLco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
5b:32:76:97:c5:09:7a:9c:9c:17:e1:d6:58:c3:50:9e:3c:44:
83:47:f7:34:ab:8d:9a:2f:5b:da:0a:2e:a9:ac:5a:05:ac:97:
c2:32:8f:8b:20:cb:b0:fe:ff:a0:22:65:a5:b9:fd:b5:29:c0:
3c:26:c2:e1:c2:27:b9:65:63:87:8a:48:db:7d:15:d1:1c:75:
04:6a:fd:e9:29:2d:fd:2d:84:b5:f7:bb:10:ae:18:82:a8:c6:
3b:60:31:4a:ca:f5:46:9d:74:64:40:f6:f9:35:5f:04:bc:87:
c1:cf:65:38:72:a1:2c:90:83:55:07:b8:c2:a3:d2:2e:1a:59:
b4:12:8a:c7:0b:73:e1:8c:d1:2b:ac:3c:c0:e6:53:e4:d8:ba:
ef:97:05:8f:40:2e:00:0d:00:a5:2b:eb:7f:da:cf:67:21:67:
24:3c:00:f8:26:69:36:dd:ff:4b:37:85:8f:d1:9c:af:4b:f9:
62:f4:e3:77:72:4b:96:cf:19:8b:06:4f:ae:96:0c:16:75:3e:
9d:31:fb:89:b3:31:b2:ff:20:46:ea:56:7e:b1:e3:16:36:b5:
34:6b:78:2e:2a:cc:3d:89:20:06:26:95:0b:75:5c:64:a3:bb:
6f:8f:55:fd:bf:cd:ea:0d:a3:03:5b:b5:fd:4d:21:e2:dc:80:
da:d9:fe:19
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZX+k25ffluefSonsnAFn88fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDA0MDIxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmFhODg2NjYzOTk2MGNmMWVmMGMyYWZjNzM2YTI5ZDZjYTEyZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBlgIYDUZOtWOO/ZcmlAqhLr7oj2
sO+pABNiwEK0egm4GNDc/zJ5CpFyaOFtTf5ya2ataXfjnpEouYpFGTnLuhOrGcob
8DUrzlGc/htdjpcHh9li/lh+viFbgiVFu7kD2fIAK2PwJ17SWan1jdeGXSr1iHeq
sg6fdQuqI6hTTBgJ1vhabzWYJ2fZgHpuU/mrTFaycKxhJlkjO2L33UbdxmnfWEQs
5R57il2ObwrHWvUDQ52ALBzVUElopxfLIg1JXE3leKrm4Uyomi4MPYlYdF3BdvLC
VouKoTsVMbjEkCkljttWmRT2SgXzsg5Cf1csI0I0RF7MljnXOVaySIGSbQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFM+qiGZjmWDPHvDCr8c2op1soS3KMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvejZxSVptT1pZTThlOE1Ldnh6YWluV3loTGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAWzJ2l8UJepycF+HWWMNQnjxE
g0f3NKuNmi9b2gouqaxaBayXwjKPiyDLsP7/oCJlpbn9tSnAPCbC4cInuWVjh4pI
230V0Rx1BGr96Skt/S2Etfe7EK4YgqjGO2AxSsr1Rp10ZED2+TVfBLyHwc9lOHKh
LJCDVQe4wqPSLhpZtBKKxwtz4YzRK6w8wOZT5Ni675cFj0AuAA0ApSvrf9rPZyFn
JDwA+CZpNt3/SzeFj9Gcr0v5YvTjd3JLls8ZiwZPrpYMFnU+nTH7ibMxsv8gRupW
frHjFja1NGt4LirMPYkgBiaVC3VcZKO7b49V/b/N6g2jA1u1/U0h4tyA2tn+GQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:18:47 2025 by rpki-client