Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/AgZ9jt2yuOS57TmmvrcY9SwpOdo.roa
File: AgZ9jt2yuOS57TmmvrcY9SwpOdo.roa (raw, json)
Hash identifier: Ok6jvBDJK5z2wXZ0KMilOoUfRnN07ipNC9v1vnhZOSw=
Subject key identifier: 02:06:7D:8E:DD:B2:B8:E4:B9:ED:39:A6:BE:B7:18:F5:2C:29:39:DA
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DF756E215BC47F974A825E5FD7B76958
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/AgZ9jt2yuOS57TmmvrcY9SwpOdo.roa
Signing time: Sat 29 Mar 2025 01:12:49 +0000
ROA not before: Sat 29 Mar 2025 01:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:75:6e:21:5b:c4:7f:97:4a:82:5e:5f:d7:b7:69:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 01:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02067d8eddb2b8e4b9ed39a6beb718f52c2939da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:29:56:3c:06:21:ce:21:07:73:ce:f8:07:
d8:84:f4:08:0b:d4:27:13:76:fc:93:3d:b7:a2:87:
ea:77:d9:2e:d4:62:99:e7:78:50:46:27:94:06:7e:
76:f0:51:8c:ba:a5:f7:4e:93:dc:87:b6:af:7b:72:
8f:ad:a9:1a:76:2c:21:bd:0e:95:42:09:c6:e1:7f:
e7:99:95:74:9e:3e:ef:3c:f4:15:12:28:e7:8a:3c:
67:9c:23:ab:bf:19:59:f6:7f:d4:6e:6c:90:9d:ad:
5f:4d:13:32:e4:69:f6:9d:ce:89:2f:c4:9b:4c:34:
0c:78:7d:b9:8c:71:a3:0e:de:fb:26:e3:bf:c9:a3:
92:94:cc:af:fc:b1:63:44:ba:05:32:c3:88:bb:0b:
63:56:c0:79:1e:02:34:d6:0d:b0:80:c0:36:72:0f:
3a:16:be:6a:4a:ba:b2:aa:6d:ec:67:3a:c2:97:65:
b0:f9:11:7c:61:c7:e6:03:8e:f3:b0:f6:54:61:d7:
4f:3d:a2:85:bb:33:91:b8:a1:19:38:55:c6:24:d0:
0a:2e:c8:75:96:5c:44:64:5b:68:01:07:d2:e4:fa:
e2:ad:44:ae:07:3d:21:ff:cb:07:61:6b:ef:6e:01:
3a:ab:3b:b8:1b:b5:dd:ca:4c:c5:5f:c5:1d:ad:01:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:7D:8E:DD:B2:B8:E4:B9:ED:39:A6:BE:B7:18:F5:2C:29:39:DA
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/AgZ9jt2yuOS57TmmvrcY9SwpOdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
99:35:7a:38:ec:d1:8d:57:cb:ad:0a:e8:31:be:41:40:3a:22:
75:33:d4:f9:83:57:ee:a5:af:5d:92:40:78:cd:02:2a:6e:9a:
71:91:46:79:dd:60:f2:b4:b8:ac:cd:cf:19:53:4c:12:f2:3a:
0b:66:e7:02:a3:b5:37:60:a9:52:20:6f:b0:7f:93:d0:9d:e2:
7f:b1:e5:75:be:09:ec:b0:3b:eb:d9:e1:11:57:71:bc:a5:e4:
b6:d9:5f:63:89:a9:64:87:9a:44:6c:b4:59:75:bb:6d:7c:b0:
f1:97:aa:9e:56:6d:48:4a:5a:45:d3:93:63:b5:bd:17:79:be:
fc:22:c2:a8:e8:6c:ee:ff:bf:88:e4:68:a7:b0:96:cd:e2:be:
10:44:b1:12:51:51:c6:a6:61:99:cb:ff:0d:bb:64:6f:60:c3:
ca:bf:f1:d5:44:12:73:da:d6:18:10:5d:64:6b:b7:cc:b1:6d:
ef:fb:38:54:1e:23:bd:5e:92:4f:17:7a:4a:0c:54:9c:d0:d2:
0f:c4:13:18:50:00:41:4c:6c:a5:8a:e0:22:d5:70:29:6e:f1:
53:c9:43:06:de:eb:02:ec:a5:a9:49:58:da:27:ec:ef:01:bc:
c9:2a:8b:bc:8f:58:ee:63:80:09:b8:94:6a:8d:d0:7a:93:f6:
13:92:32:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:27:32 2025 by rpki-client