Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/E0F4XYJuswyZtmRq56Hd3QNz5m0.roa
File: E0F4XYJuswyZtmRq56Hd3QNz5m0.roa (raw, json)
Hash identifier: ixBtZHvoi4iwO8BnkNy6X2cfuYKaQPXm2QAvt2LVJVI=
Subject key identifier: 13:41:78:5D:82:6E:B3:0C:99:B6:64:6A:E7:A1:DD:DD:03:73:E6:6D
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FE2591EF62752B7754AB757D129DE0EC
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/E0F4XYJuswyZtmRq56Hd3QNz5m0.roa
Signing time: Fri 04 Apr 2025 00:13:49 +0000
ROA not before: Fri 04 Apr 2025 00:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fe:25:91:ef:62:75:2b:77:54:ab:75:7d:12:9d:e0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 4 00:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1341785d826eb30c99b6646ae7a1dddd0373e66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:60:ff:4e:fe:8a:e0:10:c5:d2:13:2f:0e:
70:12:ef:bb:bc:b5:ff:87:db:e2:ef:1e:ce:49:6b:
12:73:ad:21:0f:5b:00:60:e7:e5:92:44:35:c3:b2:
98:ac:21:87:4f:95:5f:73:41:65:45:54:79:b2:3b:
3f:37:4d:41:5e:8e:2c:a7:56:d3:a9:97:1a:56:00:
a3:fb:8c:29:9e:78:9f:96:62:1c:18:0c:86:e1:75:
d2:a7:98:52:aa:42:cf:1a:b6:5b:21:77:0f:be:d1:
b8:6c:ce:73:f1:cc:65:99:ad:88:15:25:4d:5b:a6:
ce:cd:1d:ab:28:c6:c7:36:22:12:75:6d:92:20:44:
bc:bd:9f:cd:ce:f4:48:2c:2d:3f:a4:80:3a:00:9e:
02:0c:5c:97:b7:5f:78:b3:b4:0c:46:e2:77:a8:22:
7e:32:96:18:f7:9d:fa:d6:e2:19:ff:2a:48:15:fc:
f2:47:b1:1a:80:3a:1f:6c:ef:1f:1f:88:1b:0b:f3:
76:dc:45:23:67:07:ae:08:be:54:9f:06:94:49:d5:
96:80:94:3d:96:b1:a7:d0:a8:25:7f:3e:80:43:cf:
11:67:21:0d:2f:6a:c2:ef:89:cc:64:9b:a0:05:99:
9a:a2:0c:b3:c8:0a:d2:03:fa:ac:73:c0:86:9c:9c:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:78:5D:82:6E:B3:0C:99:B6:64:6A:E7:A1:DD:DD:03:73:E6:6D
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/E0F4XYJuswyZtmRq56Hd3QNz5m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
6e:a8:76:d1:7f:27:45:18:64:89:0b:57:e6:95:46:4f:a3:a3:
2f:47:2b:38:2a:54:11:3b:5c:28:ca:15:ba:ae:66:2a:fa:59:
68:ab:48:86:fa:16:65:ad:43:87:fd:cf:df:83:85:42:26:e5:
6f:e1:4a:5f:b1:d3:09:29:53:4a:c9:2a:71:9a:bf:ba:5f:2e:
bb:84:5d:2d:82:4d:58:92:d1:91:28:63:b9:fa:a2:24:0b:3c:
20:34:a6:10:7e:25:74:d6:0a:14:03:0f:5e:14:9d:4b:8a:ae:
90:f6:16:95:a7:93:a5:4d:ad:d0:11:46:e0:e2:cc:4a:4b:5f:
d6:13:ba:af:f5:bd:a5:ba:e9:f6:2e:d2:3e:80:f6:77:79:f3:
be:a9:33:4f:6d:e9:3b:dd:2d:40:b8:92:ca:05:7e:07:65:14:
90:62:8b:36:aa:6f:81:c8:f5:4a:89:4d:b5:be:30:fe:cc:d7:
21:65:c1:12:34:86:6b:0a:d8:67:56:f5:b2:ce:9e:47:66:dc:
30:64:76:de:d6:74:ee:4f:bc:2b:8a:6c:91:90:29:a0:70:33:
39:00:d4:d3:69:bb:d2:df:68:2c:b0:73:22:53:f6:18:19:91:
b0:2f:05:63:48:ec:8b:f4:20:24:92:3e:73:b0:b2:d6:27:e0:
36:33:c4:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:13 2025 by rpki-client