Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/7oaVHwl2nWeCI6KRJFBVajpTw7s.roa
File: 7oaVHwl2nWeCI6KRJFBVajpTw7s.roa (raw, json)
Hash identifier: npLnMhXjAHFKifwvcReTAYsxFqJQbdAr8+45cD438aI=
Subject key identifier: EE:86:95:1F:09:76:9D:67:82:23:A2:91:24:50:55:6A:3A:53:C3:BB
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EEB3685CC7F11EF358928821EF5B9785
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/7oaVHwl2nWeCI6KRJFBVajpTw7s.roa
Signing time: Tue 01 Apr 2025 00:14:49 +0000
ROA not before: Tue 01 Apr 2025 00:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ee:b3:68:5c:c7:f1:1e:f3:58:92:88:21:ef:5b:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 00:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee86951f09769d678223a2912450556a3a53c3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:ad:9d:1f:35:bc:69:bd:eb:1a:66:c7:25:
a6:e9:fb:79:2c:6e:52:4a:f6:3c:04:f9:64:ae:a8:
bf:64:b9:22:74:66:74:43:97:e2:3f:75:47:cd:ed:
a6:39:a0:88:a5:6b:64:3d:70:33:bb:7b:c3:83:95:
b4:b5:ab:d6:4c:e0:77:89:d2:93:79:d3:b8:02:1a:
8b:3d:9e:4c:30:ba:4f:8b:ca:a9:7a:59:07:92:5c:
77:70:d2:65:fd:62:51:c9:64:bd:dc:da:25:a2:21:
03:b3:23:1b:72:ae:67:4e:5e:31:d1:fd:61:25:f7:
3a:98:4f:58:92:30:40:dd:c4:6b:8b:77:d5:a8:f6:
2f:05:f1:c5:c6:eb:8f:cd:73:5a:54:54:b1:05:3f:
83:d6:05:9f:f6:37:14:ea:80:68:f5:60:76:19:0f:
28:03:e1:54:3b:14:96:e9:45:57:bc:15:d2:c3:dd:
18:62:0a:92:d5:3c:b1:e6:f6:79:3b:1d:e1:51:09:
a4:3e:f2:ab:c9:ad:dd:4e:96:92:a3:be:ec:82:36:
97:03:9a:bc:5f:63:2c:d2:ac:f3:5a:2d:f8:8d:fd:
20:3d:b4:25:16:63:97:d9:cb:49:97:f7:ad:bc:b4:
bd:ea:b9:24:55:09:eb:9f:ab:fd:26:7d:90:29:a7:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:95:1F:09:76:9D:67:82:23:A2:91:24:50:55:6A:3A:53:C3:BB
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/7oaVHwl2nWeCI6KRJFBVajpTw7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
6a:18:ee:97:e7:fd:ee:a1:b9:0e:05:8b:b6:61:05:dd:b4:e5:
ba:dd:ba:80:95:f1:00:12:d5:cc:72:53:cf:20:59:0a:0a:f7:
03:d1:59:d5:bf:78:dc:86:15:43:3f:c1:82:b1:3e:3b:ae:7f:
f2:b2:98:63:a1:30:78:b5:fc:de:ba:8a:5b:9e:4c:27:72:03:
66:86:e2:3a:cf:62:6b:bb:8d:49:0f:70:2c:fc:90:67:a7:ec:
48:63:d3:a0:b2:29:cc:b0:40:96:89:ba:ab:93:dc:4b:75:0a:
e8:74:c2:7b:2e:17:76:c4:52:5a:22:e4:ef:62:56:1f:81:b9:
ac:f1:0f:ec:06:f2:1c:8a:6f:85:94:3b:50:43:54:4b:af:c3:
ad:db:3c:be:aa:d9:29:07:b8:0d:39:48:58:d6:37:d5:e6:39:
79:a1:fd:68:93:06:59:f4:b2:f8:cb:6f:98:d0:bb:e3:9e:62:
8b:62:bb:37:5d:ec:86:69:42:3b:a1:45:89:cb:6b:bd:c2:ec:
9e:4f:2d:93:87:54:37:a3:7e:c0:ef:7e:4a:d2:f7:dd:43:3f:
81:6b:fe:96:46:04:9e:f3:3f:22:6d:54:1d:8e:89:12:3d:36:
cd:51:5c:fe:7f:0c:c6:f1:dd:6c:e1:c7:71:e5:ce:77:e7:eb:
97:d3:3b:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:30:00 2025 by rpki-client