Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/BbDfMw6b9R6pV1m6SfaPfciEHsw.roa
File: BbDfMw6b9R6pV1m6SfaPfciEHsw.roa (raw, json)
Hash identifier: CwZi2ym0Q9pN9ZWSPyKhRV2s30epna/3Jb9YXjw71tk=
Subject key identifier: 05:B0:DF:33:0E:9B:F5:1E:A9:57:59:BA:49:F6:8F:7D:C8:84:1E:CC
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195C208789F8D368BD011B070FB00FBA489
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/BbDfMw6b9R6pV1m6SfaPfciEHsw.roa
Signing time: Sun 23 Mar 2025 08:04:49 +0000
ROA not before: Sun 23 Mar 2025 08:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:c207:d07c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c2:08:78:9f:8d:36:8b:d0:11:b0:70:fb:00:fb:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 23 08:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05b0df330e9bf51ea95759ba49f68f7dc8841ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:fa:34:03:f0:44:9d:3f:60:4f:9f:ef:93:
2c:7c:17:7b:2e:4e:f7:5b:cb:0c:91:f6:9d:0b:02:
e9:ab:32:4a:56:da:99:92:2f:d9:a0:7e:63:f7:d2:
4f:0c:b9:fb:9e:9d:c9:ba:23:31:12:49:2a:42:d4:
18:cf:e8:d9:2d:c0:4b:0d:f6:e4:88:97:30:f0:5f:
e1:66:13:d8:35:b5:9c:f3:17:1c:7c:5b:81:4b:9e:
ad:e2:b8:97:39:f4:bb:f9:a0:bc:d2:9e:12:8d:d4:
31:ca:59:c5:01:a3:65:60:1b:54:d2:d5:bf:81:19:
7f:4a:8f:b0:66:9d:d2:3b:dc:ca:c0:9c:33:e7:64:
cc:f9:b2:94:31:8a:e1:8c:86:5f:2a:1d:ba:5a:2e:
56:1f:e8:78:ef:80:c2:1d:02:30:6e:58:17:c2:80:
5d:6c:2c:6f:19:39:d3:20:4d:94:18:01:d2:32:f4:
2a:1b:3c:c4:39:65:8e:3c:3f:fb:d6:5b:2d:80:99:
e1:7c:bf:77:66:51:cc:b9:7a:70:8b:fd:16:5f:71:
04:bf:d1:9b:f4:af:a2:ea:74:2c:a5:1d:64:af:e3:
35:f5:0c:15:c1:62:e8:7c:b3:c8:76:41:b9:3d:f0:
1e:60:92:7f:6a:2b:0d:ed:3f:da:38:a5:ff:2e:71:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:DF:33:0E:9B:F5:1E:A9:57:59:BA:49:F6:8F:7D:C8:84:1E:CC
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/BbDfMw6b9R6pV1m6SfaPfciEHsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:c207:d07c/128
Signature Algorithm: sha256WithRSAEncryption
80:26:a0:5c:4d:d8:76:a9:b9:be:8b:9c:76:a6:5b:53:47:a7:
ce:ca:d2:d8:14:61:44:11:52:d3:e5:cb:72:34:03:ee:5f:21:
b8:d6:93:cb:8b:0f:11:7a:6e:ba:da:42:0e:74:60:31:0a:9f:
c8:e4:52:14:d1:c2:84:36:6c:ef:cd:fe:80:09:65:4d:87:03:
a8:72:ff:ed:9a:25:f2:07:9b:4a:f6:99:c4:ef:9b:9e:c3:64:
35:50:19:38:0c:1f:5b:5c:66:76:cc:9c:38:38:b7:e6:d0:bb:
d4:64:79:ba:3e:d3:d0:4b:a6:3d:a1:15:9a:da:23:14:0e:b4:
c2:c3:ec:87:7b:63:2e:5f:2b:57:bb:63:9a:3c:43:02:23:df:
63:1a:34:79:88:21:fb:78:0c:ef:12:1a:cc:18:2a:0c:86:69:
00:7c:c4:96:4c:e3:31:77:01:8b:15:8b:b2:ed:5e:62:23:f7:
d5:8a:ac:cd:6b:82:ff:04:33:75:94:c2:9b:f3:33:dd:7a:b7:
b2:a5:f3:6c:32:41:8a:25:43:69:07:ff:ad:e4:6f:cb:53:55:
f0:3d:2b:f9:b1:bd:71:27:6b:58:ef:ae:7c:8a:b2:6b:3c:c5:
c8:42:08:fe:ed:75:79:99:de:4d:73:f3:05:d0:b1:3b:76:1f:
25:ff:2e:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:12 2025 by rpki-client