Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/A--9q2fn7Dhc9LyT3WYl_Cx0JcM.roa
File: A--9q2fn7Dhc9LyT3WYl_Cx0JcM.roa (raw, json)
Hash identifier: MYhSCls2w2ucR59r/PHAWiq8d8fZ4fGOIRKaQC9zcVg=
Subject key identifier: 03:EF:BD:AB:67:E7:EC:38:5C:F4:BC:93:DD:66:25:FC:2C:74:25:C3
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195B716F5558D5FD8ED7B0A6793F68D07F6
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/A--9q2fn7Dhc9LyT3WYl_Cx0JcM.roa
Signing time: Fri 21 Mar 2025 05:04:49 +0000
ROA not before: Fri 21 Mar 2025 05:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:b716:4842/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:16:f5:55:8d:5f:d8:ed:7b:0a:67:93:f6:8d:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 21 05:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03efbdab67e7ec385cf4bc93dd6625fc2c7425c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:78:57:1a:06:0c:d0:2b:29:e0:f7:9f:24:
cc:d6:56:7f:7f:90:5e:7a:b5:3d:e9:1b:7b:62:0b:
12:72:57:f3:e1:c6:78:6a:af:bb:0c:4e:e7:57:a6:
ff:0d:2c:a2:c0:15:d4:db:7a:fa:31:43:95:a0:68:
5e:4a:b5:7e:ac:2a:32:12:5a:fc:02:f2:c0:88:d3:
97:50:57:84:9b:e5:a7:33:12:ef:29:a2:33:21:3c:
6d:d6:24:1e:67:7b:86:47:73:cb:b8:3d:fe:0c:29:
a3:ee:c5:b2:ef:61:66:8f:07:76:46:fe:c8:85:8e:
c4:40:c6:6b:ee:3b:9d:1e:2e:fd:a3:be:68:60:47:
91:cd:0b:97:db:8e:83:e0:01:c8:8b:88:82:65:29:
47:5e:94:89:78:4a:8d:f1:02:46:3c:a7:f9:ee:02:
7d:68:f9:af:8d:ca:81:1c:17:2b:b4:58:70:b9:80:
14:b7:00:b7:e2:5b:4d:55:7e:da:f3:5e:4d:f1:62:
91:2b:9d:ac:f2:a2:b3:52:93:01:59:26:18:14:b0:
37:f2:f8:83:20:40:bb:b2:cf:ac:51:bc:11:66:bc:
fb:b2:6c:b5:c8:3b:5c:6d:d1:0f:b2:f1:61:b7:ee:
5c:cb:68:0f:1a:9f:08:9c:dd:77:9b:27:03:de:5d:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EF:BD:AB:67:E7:EC:38:5C:F4:BC:93:DD:66:25:FC:2C:74:25:C3
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/A--9q2fn7Dhc9LyT3WYl_Cx0JcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:b716:4842/128
Signature Algorithm: sha256WithRSAEncryption
1d:4f:11:69:13:3c:83:2d:9c:fe:32:5b:be:d4:d2:0e:8d:1b:
9d:d1:17:d4:b8:61:18:4e:8b:7a:fe:77:66:74:22:64:e0:f2:
a8:18:28:81:15:da:4b:cd:60:39:78:f9:2e:aa:44:84:dd:33:
67:46:d6:b5:20:57:4f:a5:75:6d:50:d3:cb:65:05:2c:32:24:
02:e9:b0:b8:7a:13:18:b7:c5:2a:a2:14:1d:2f:b5:95:54:d1:
3c:ab:c8:61:a7:b2:6b:98:f6:5b:0f:8c:ee:d7:11:b7:73:21:
f6:15:35:9f:41:ce:b0:c3:56:bd:88:f9:a5:ad:2b:20:c8:ad:
75:74:b8:12:18:22:b2:98:cd:42:6b:0e:0d:88:e5:df:ca:1c:
aa:54:28:bd:0b:8d:6a:ff:39:72:0a:2c:11:b5:90:94:86:4e:
d6:57:e4:26:c6:12:8e:79:fa:1b:31:1d:f1:22:47:d8:86:7f:
0a:5a:27:13:4f:8a:f2:22:46:de:9a:d6:99:b0:e1:db:bc:0c:
cb:66:e7:b5:a9:ec:2a:65:51:a1:38:b2:39:6d:93:da:df:5c:
b0:d5:4a:68:7a:7e:d9:49:89:48:38:22:78:06:64:0f:43:7c:
f2:f7:41:5e:11:8c:ea:66:69:6c:45:7f:24:25:4c:1a:62:67:
89:fc:fa:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:53 2025 by rpki-client