Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/zUSM5nt-rTEuKt_hGe66IuMNt5g.roa
File: zUSM5nt-rTEuKt_hGe66IuMNt5g.roa (raw, json)
Hash identifier: hJ6gksem5uZRmDipVqo0mdzxZG3RNLKlUSFv2A0y70c=
Subject key identifier: CD:44:8C:E6:7B:7E:AD:31:2E:2A:DF:E1:19:EE:BA:22:E3:0D:B7:98
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E8E840794889E0723329944C59348D07
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/zUSM5nt-rTEuKt_hGe66IuMNt5g.roa
Signing time: Sun 30 Mar 2025 21:14:49 +0000
ROA not before: Sun 30 Mar 2025 21:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e8:e8:40:79:48:89:e0:72:33:29:94:4c:59:34:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 21:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd448ce67b7ead312e2adfe119eeba22e30db798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:96:81:ee:40:84:f5:f2:d7:3f:13:c5:cd:
1c:50:fd:2b:18:4a:85:cc:a4:55:91:6c:fa:98:98:
6f:35:01:9c:1c:f5:ac:d3:30:ba:78:10:d8:6b:d1:
2e:7d:5a:68:4e:3e:78:e0:bc:63:ee:3e:b7:88:3a:
6a:40:93:8c:24:97:30:04:67:27:a9:1d:6b:6e:89:
3a:3c:e8:ac:c4:38:55:38:82:b0:4d:86:fa:7f:77:
9c:51:93:95:1f:54:c5:ca:15:40:9a:6d:b1:3e:8f:
04:dc:14:3c:14:1b:a5:39:40:a3:0c:31:38:2e:d3:
bf:b7:be:12:15:af:b0:d3:69:c1:da:88:50:de:af:
0f:e7:68:47:cc:8b:d6:c1:0b:3b:fb:e3:fd:54:58:
a7:63:e7:d2:3b:3c:83:4f:e8:30:cd:ed:ac:36:10:
02:1b:63:2d:48:13:40:27:44:8b:e2:f4:67:7e:57:
f6:15:c2:05:a9:92:99:c9:4c:e2:fc:d4:f3:79:ef:
c1:81:68:aa:ae:4c:7a:fe:8b:dc:31:b7:39:a1:5b:
ab:ab:ef:c5:3c:c1:31:77:9e:a4:92:24:21:2c:be:
57:07:70:76:a3:0c:38:cb:b8:47:38:d9:f4:28:dd:
a0:c3:1d:b4:a8:c9:da:b6:8f:30:93:86:75:84:67:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:8C:E6:7B:7E:AD:31:2E:2A:DF:E1:19:EE:BA:22:E3:0D:B7:98
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/zUSM5nt-rTEuKt_hGe66IuMNt5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
1f:a9:11:26:19:9f:84:d0:a0:76:9f:03:38:0d:5f:85:7c:78:
9e:19:bc:b5:ec:bd:a1:55:28:f5:0e:86:1a:23:25:c1:4a:5c:
28:19:22:5c:0f:94:03:ca:0e:0c:43:d0:cf:e7:a2:f3:b7:6f:
03:ea:c9:91:5c:d1:c3:e3:c2:05:6e:e0:c0:9d:29:8b:3c:54:
0a:1e:21:05:44:39:31:08:81:c0:3e:6c:ed:40:66:f0:6e:82:
9a:a2:53:e8:79:fe:38:70:37:a0:22:32:f5:26:a9:06:19:77:
1c:94:20:97:e5:7f:7f:03:6c:dc:af:62:8f:40:c8:73:84:3e:
24:42:71:02:85:13:eb:40:75:34:2b:b1:de:f8:2d:d7:bc:1d:
69:e6:33:ae:8d:d3:04:a8:7c:99:23:bc:37:f4:06:fb:12:e4:
e7:26:11:1b:10:c0:00:38:ba:45:a7:fa:55:24:41:19:4a:36:
e9:e3:a2:12:0a:d3:35:6f:ff:fb:aa:5a:2b:3d:35:f7:3a:3b:
cf:cb:dc:77:ea:4d:b8:96:c2:4b:7e:52:18:d6:10:df:97:0b:
50:1d:8a:00:3e:a8:09:11:9e:9b:ec:c8:3b:0a:ad:f4:ac:a0:
7f:c8:d9:50:e7:8e:4e:1f:ea:e8:3d:b9:94:5b:d6:33:0d:bc:
97:10:a3:43
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXo6EB5SIngcjMplExZNI0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzMwMjExNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDQ0OGNlNjdiN2VhZDMxMmUyYWRmZTExOWVlYmEyMmUzMGRiNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLaWge5AhPXy1z8Txc0cUP0rGEqF
zKRVkWz6mJhvNQGcHPWs0zC6eBDYa9EufVpoTj544Lxj7j63iDpqQJOMJJcwBGcn
qR1rbok6POisxDhVOIKwTYb6f3ecUZOVH1TFyhVAmm2xPo8E3BQ8FBulOUCjDDE4
LtO/t74SFa+w02nB2ohQ3q8P52hHzIvWwQs7++P9VFinY+fSOzyDT+gwze2sNhAC
G2MtSBNAJ0SL4vRnflf2FcIFqZKZyUzi/NTzee/BgWiqrkx6/ovcMbc5oVurq+/F
PMExd56kkiQhLL5XB3B2oww4y7hHONn0KN2gwx20qMnato8wk4Z1hGcLmQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFM1EjOZ7fq0xLirf4RnuuiLjDbeYMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvelVTTTVudC1yVEV1S3RfaEdlNjZJdU1OdDVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAH6kRJhmfhNCgdp8DOA1fhXx4
nhm8tey9oVUo9Q6GGiMlwUpcKBkiXA+UA8oODEPQz+ei87dvA+rJkVzRw+PCBW7g
wJ0pizxUCh4hBUQ5MQiBwD5s7UBm8G6CmqJT6Hn+OHA3oCIy9SapBhl3HJQgl+V/
fwNs3K9ij0DIc4Q+JEJxAoUT60B1NCux3vgt17wdaeYzro3TBKh8mSO8N/QG+xLk
5yYRGxDAADi6Raf6VSRBGUo26eOiEgrTNW//+6paKz019zo7z8vcd+pNuJbCS35S
GNYQ35cLUB2KAD6oCRGem+zIOwqt9Kygf8jZUOeOTh/q6D25lFvWMw28lxCjQw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:21 2025 by rpki-client