Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/2A4raP1lJmxPyAkxWIWfHUFoIxc.roa
File: 2A4raP1lJmxPyAkxWIWfHUFoIxc.roa (raw, json)
Hash identifier: fMYdR6QOqCjvxPmrNRVWbInkORPBkCcCURravGsyE58=
Subject key identifier: D8:0E:2B:68:FD:65:26:6C:4F:C8:09:31:58:85:9F:1D:41:68:23:17
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F7B59E6EB3B44402F1C417D1CC48B511
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/2A4raP1lJmxPyAkxWIWfHUFoIxc.roa
Signing time: Wed 02 Apr 2025 18:13:49 +0000
ROA not before: Wed 02 Apr 2025 18:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:b5:9e:6e:b3:b4:44:02:f1:c4:17:d1:cc:48:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 18:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d80e2b68fd65266c4fc8093158859f1d41682317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:14:45:45:32:b6:04:6b:2c:0c:92:52:03:
01:23:b8:b3:9c:a8:24:e3:bb:b6:0f:87:23:0b:6d:
4f:c5:80:af:c3:f3:d7:65:da:5e:46:89:62:c5:a8:
67:a7:87:24:51:43:22:dd:66:4e:03:03:e5:23:f3:
bd:b9:2c:73:75:58:a4:03:7b:a9:85:4e:f7:de:2b:
ce:00:21:bf:be:a3:d7:a8:6f:23:5b:78:26:6c:bf:
57:f6:ff:25:15:56:2c:e3:55:c8:b0:f2:02:79:6c:
7d:79:f5:60:be:64:ba:ac:7b:0e:fc:9b:9b:da:97:
d5:57:c5:6a:54:5a:de:2a:af:6a:13:3e:42:76:4b:
e5:78:96:19:66:bd:f2:d5:fd:23:02:19:bf:87:7a:
50:f0:98:6b:e6:d3:c6:c9:ed:5b:e5:ef:2e:bc:10:
69:c7:4e:1e:08:bb:71:bc:b8:d8:88:cb:22:06:16:
6d:39:63:7b:f9:24:25:6b:47:cd:87:38:df:df:fc:
67:42:6d:c0:f5:c2:1c:c9:99:b2:9b:e2:40:83:61:
b4:6a:19:e4:ba:29:be:0e:ec:97:55:20:8b:49:6f:
2c:ab:9b:7f:57:0e:cb:09:dd:fa:25:d7:e7:d3:7c:
c7:a4:6c:f2:41:d7:7b:d7:79:09:82:24:1d:e0:bf:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:2B:68:FD:65:26:6C:4F:C8:09:31:58:85:9F:1D:41:68:23:17
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/2A4raP1lJmxPyAkxWIWfHUFoIxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
64:b7:4d:63:ab:44:d7:26:5b:91:ea:b8:80:94:a0:83:85:d7:
ee:90:14:50:bb:83:aa:4b:36:50:dc:fc:e8:d2:2d:8b:eb:96:
c6:25:58:c3:8a:d8:dd:77:ba:eb:16:53:91:b7:73:06:94:79:
b9:8c:99:a6:f1:e3:43:6c:3d:96:4b:da:a0:c9:af:39:3d:b6:
3f:fa:c5:b6:17:86:2e:c7:0a:89:d7:fd:8c:de:ce:fd:59:4b:
e9:7c:2e:ed:cf:89:0c:a5:5a:4f:b2:6c:ed:08:75:39:9d:a7:
ed:32:ab:18:93:cc:da:15:aa:2a:4b:76:6d:8e:22:a7:9e:a6:
a6:a3:d4:9c:d0:b1:16:29:92:27:dc:b4:e2:1a:9c:71:7b:46:
cc:a6:c7:dc:77:73:97:91:b4:e0:c7:73:cc:a0:84:fe:dd:10:
9b:67:74:1d:c7:73:a8:38:a5:c4:af:65:c5:6a:b0:e7:9e:a7:
ca:8d:22:77:ea:e1:ce:19:88:c9:a7:29:b6:a9:fe:b1:48:bc:
6f:3e:c6:e7:90:cc:82:f0:e2:1f:c4:48:0b:a5:c0:19:4d:94:
8e:61:cf:e8:49:d1:b6:76:da:c5:3a:cd:66:ee:7b:15:04:40:
bf:47:23:d3:4f:d6:31:00:32:2a:ac:a1:47:f4:3c:94:c1:7f:
3a:4e:22:e8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZX3tZ5us7REAvHEF9HMSLURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAyMTgxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODBlMmI2OGZkNjUyNjZjNGZjODA5MzE1ODg1OWYxZDQxNjgyMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sAURUUytgRrLAySUgMBI7iznKgk
47u2D4cjC21PxYCvw/PXZdpeRolixahnp4ckUUMi3WZOAwPlI/O9uSxzdVikA3up
hU733ivOACG/vqPXqG8jW3gmbL9X9v8lFVYs41XIsPICeWx9efVgvmS6rHsO/Jub
2pfVV8VqVFreKq9qEz5CdkvleJYZZr3y1f0jAhm/h3pQ8Jhr5tPGye1b5e8uvBBp
x04eCLtxvLjYiMsiBhZtOWN7+SQla0fNhzjf3/xnQm3A9cIcyZmym+JAg2G0ahnk
uim+DuyXVSCLSW8sq5t/Vw7LCd36Jdfn03zHpGzyQdd713kJgiQd4L/IOQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFNgOK2j9ZSZsT8gJMViFnx1BaCMXMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvMkE0cmFQMWxKbXhQeUFreFdJV2ZIVUZvSXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAZLdNY6tE1yZbkeq4gJSgg4XX
7pAUULuDqks2UNz86NIti+uWxiVYw4rY3Xe66xZTkbdzBpR5uYyZpvHjQ2w9lkva
oMmvOT22P/rFtheGLscKidf9jN7O/VlL6Xwu7c+JDKVaT7Js7Qh1OZ2n7TKrGJPM
2hWqKkt2bY4ip56mpqPUnNCxFimSJ9y04hqccXtGzKbH3Hdzl5G04MdzzKCE/t0Q
m2d0HcdzqDilxK9lxWqw556nyo0id+rhzhmIyacptqn+sUi8bz7G55DMgvDiH8RI
C6XAGU2UjmHP6EnRtnbaxTrNZu57FQRAv0cj00/WMQAyKqyhR/Q8lMF/Ok4i6A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:07 2025 by rpki-client