Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/4KN6lgJH1zaZusscTC_xhKUrUv8.roa
File: 4KN6lgJH1zaZusscTC_xhKUrUv8.roa (raw, json)
Hash identifier: XvdR3z8yzyNAiUUFCTR3Ngebxib2B5QX68iFV9b9368=
Subject key identifier: E0:A3:7A:96:02:47:D7:36:99:BA:CB:1C:4C:2F:F1:84:A5:2B:52:FF
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E165A4D988F51A083C3F09EB506AA646
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/4KN6lgJH1zaZusscTC_xhKUrUv8.roa
Signing time: Sat 29 Mar 2025 10:14:49 +0000
ROA not before: Sat 29 Mar 2025 10:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:65:a4:d9:88:f5:1a:08:3c:3f:09:eb:50:6a:a6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 10:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0a37a960247d73699bacb1c4c2ff184a52b52ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:56:35:b6:4e:f5:cc:d5:c8:d1:b4:0c:30:
d9:d8:d1:0c:3c:46:69:b2:a7:ab:cb:18:24:55:ac:
e1:2f:94:c9:a4:22:e5:58:bc:e3:2d:85:89:0d:d3:
53:c9:fc:87:10:4d:26:79:fe:13:5a:35:d8:97:e5:
7b:0c:bd:e0:8e:1e:51:03:16:2a:72:33:51:35:e6:
d1:e3:4f:7e:ce:7a:25:ba:ed:cd:fc:da:a3:8c:e0:
9a:42:22:e3:2f:b3:8c:4a:1e:a2:3d:ce:1d:b3:b0:
d9:7c:02:bc:cb:f8:5e:95:63:f8:dd:61:3b:46:c0:
b9:10:59:19:2a:c2:90:47:e7:f0:d7:0e:55:14:f7:
ec:62:a7:34:30:33:ce:a8:38:25:d7:fa:d8:12:49:
dd:30:7b:46:64:77:11:e1:c8:a9:41:1f:2a:4f:aa:
d1:bc:bb:1d:91:65:dd:d3:b3:1d:54:3f:64:41:9a:
99:01:6c:6d:39:87:09:0e:8a:8a:a1:3d:f1:fb:2f:
c2:75:75:bb:75:21:c4:62:a1:2f:e7:1d:91:40:ca:
54:56:05:cc:10:5b:2a:c3:3e:c7:8a:5c:4f:d2:60:
f1:3e:be:75:37:10:8f:67:f9:7a:69:f3:8d:f8:c0:
14:bb:bf:9c:13:46:b8:0c:25:00:a3:d0:ff:90:a2:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:7A:96:02:47:D7:36:99:BA:CB:1C:4C:2F:F1:84:A5:2B:52:FF
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/4KN6lgJH1zaZusscTC_xhKUrUv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
0a:31:21:77:4d:8a:63:f0:7f:47:89:45:84:43:58:25:e3:1c:
94:45:79:da:6e:a6:eb:b7:b1:72:03:3a:2a:4e:a4:4a:b9:e3:
71:b7:af:9c:9f:b2:38:7c:ae:90:b1:90:1b:1d:a9:af:84:9e:
f1:f3:6d:91:5c:94:d6:68:69:e1:67:27:9a:ba:25:80:f0:ee:
b7:92:15:82:49:6e:ff:be:d5:c1:ec:a8:82:28:85:e6:7c:19:
d4:18:f8:67:2d:d2:f1:32:3c:2d:2d:12:e0:90:d7:65:c7:ab:
86:8d:53:0a:9c:99:2a:59:32:34:69:f9:1b:be:94:2a:23:25:
8c:c2:13:3e:a1:7a:f4:4d:d3:57:74:f6:62:0e:54:ce:e3:c8:
fb:3c:fe:97:56:e1:52:8b:e8:a1:51:42:66:9c:f0:f4:00:9c:
ce:2a:62:2e:c2:6c:4f:bf:da:87:ac:1c:59:cb:0f:82:46:1c:
96:f2:88:4e:db:f4:ce:5e:d6:a8:7e:8e:93:0d:ad:ee:2c:4a:
5c:2e:27:82:1d:2f:a3:cd:d0:01:ff:a0:27:b0:37:4a:07:84:
50:7d:b4:05:30:fb:c8:14:5a:be:e3:e6:28:d1:ed:68:89:73:
ab:4d:63:f1:20:75:7d:03:d6:55:9e:fb:09:0b:45:14:20:b4:
b0:8d:2b:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:08 2025 by rpki-client