Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/1afb5bRRBJBct8v6-2L58Iujunk.roa
File: 1afb5bRRBJBct8v6-2L58Iujunk.roa (raw, json)
Hash identifier: JRcH9CbGRKFy144dKEoeNuomtXWgHCotT9/kniXS76Y=
Subject key identifier: D5:A7:DB:E5:B4:51:04:90:5C:B7:CB:FA:FB:62:F9:F0:8B:A3:BA:79
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195D6A1E87A21E5DAF23B7BB89C1702BA02
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/1afb5bRRBJBct8v6-2L58Iujunk.roa
Signing time: Thu 27 Mar 2025 08:04:49 +0000
ROA not before: Thu 27 Mar 2025 08:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:d6a1:19ad/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:a1:e8:7a:21:e5:da:f2:3b:7b:b8:9c:17:02:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 27 08:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5a7dbe5b45104905cb7cbfafb62f9f08ba3ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:f8:cf:5c:a1:64:b2:c7:da:fb:84:a6:5c:
ee:de:b4:3f:ab:96:f1:38:ae:92:af:35:76:56:2f:
2a:77:43:27:28:38:e4:2e:f5:41:33:af:36:d9:bf:
ad:bc:7e:b7:1a:81:98:fa:29:33:c0:ac:94:2f:f9:
06:d5:5c:d7:a7:70:75:ee:d7:83:21:19:c8:7d:90:
c1:f6:97:24:34:99:62:96:8d:40:91:a7:6c:ed:2f:
73:65:24:50:e9:08:42:00:e4:6d:1e:2e:29:36:34:
17:d0:f3:05:92:d8:c2:2b:c8:f6:34:1e:6f:d3:4e:
47:5d:2b:44:54:f2:dc:9b:d0:a9:b0:eb:ee:f6:39:
ca:fc:32:ad:14:2a:47:42:7d:ec:ee:19:0d:a4:e1:
80:e4:64:a6:4e:f6:86:27:77:53:49:24:85:44:50:
8b:bc:1b:a2:35:3c:8e:57:a4:81:3e:7c:10:6b:30:
d1:7e:d1:e6:c6:63:7d:17:3a:62:40:56:da:27:e6:
2a:84:45:c2:65:44:84:d8:f0:1c:bd:4d:d1:a2:ea:
dd:1c:51:99:79:07:ec:8f:81:5f:1c:8a:40:c8:9e:
5b:c0:cb:73:04:ed:00:02:c6:e3:a3:e6:8d:1c:4c:
1a:11:e7:0e:9c:5e:90:87:58:88:ad:0b:70:8a:df:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:DB:E5:B4:51:04:90:5C:B7:CB:FA:FB:62:F9:F0:8B:A3:BA:79
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/1afb5bRRBJBct8v6-2L58Iujunk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:d6a1:19ad/128
Signature Algorithm: sha256WithRSAEncryption
19:52:6c:35:ca:b4:05:7b:47:fa:a4:8b:19:d5:d2:d3:b7:2d:
a0:28:2f:bf:25:e3:fa:f2:16:1f:53:76:de:21:c0:11:02:09:
87:e2:75:25:0d:f7:fb:32:bc:22:eb:16:e2:15:bf:42:0c:d7:
3d:d7:8f:09:0c:bb:8c:b1:0d:05:3a:13:ff:4c:b8:00:81:bf:
c7:73:c6:8b:34:0f:a7:da:a6:d4:be:d3:2b:f6:b8:83:ee:bd:
de:67:fe:da:fa:e6:71:06:da:2f:0d:e0:f9:d0:3b:f1:93:fc:
c3:68:25:88:b3:80:ad:ae:40:29:69:5a:0d:77:ec:de:41:77:
9f:3a:45:49:6c:73:24:b5:3e:88:36:f5:d5:f8:ff:f7:45:ed:
05:70:92:54:b7:36:19:23:d6:1f:43:a2:4f:08:b6:b5:e7:bb:
14:b4:57:4a:53:e3:62:f3:03:43:46:51:f1:1d:b8:64:69:d1:
08:9e:75:fa:73:36:ec:62:f3:c7:dd:8b:43:ce:fc:ef:2f:9d:
8f:d8:fe:dc:42:a2:73:94:d0:fe:7d:c6:cc:52:3b:ba:96:db:
6a:ce:42:50:3d:4a:86:5d:99:82:ae:56:68:c8:74:04:db:26:
6e:7b:05:f2:52:f0:3f:cb:63:7a:7e:7b:2f:9c:b6:21:77:1d:
bc:ab:cc:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:49 2025 by rpki-client