Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GrEAVO1b-wW6TPow1WyrZQH2nyY.roa
File: GrEAVO1b-wW6TPow1WyrZQH2nyY.roa (raw, json)
Hash identifier: SiexGQ63nqRbXMsSZjQGfo++EIBBa0o/tQzz8rHZDH0=
Subject key identifier: 1A:B1:00:54:ED:5B:FB:05:BA:4C:FA:30:D5:6C:AB:65:01:F6:9F:26
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E19ABE8AFA1D3E2E0D297EA530F77942
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GrEAVO1b-wW6TPow1WyrZQH2nyY.roa
Signing time: Sat 29 Mar 2025 11:12:49 +0000
ROA not before: Sat 29 Mar 2025 11:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:9a:be:8a:fa:1d:3e:2e:0d:29:7e:a5:30:f7:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 11:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ab10054ed5bfb05ba4cfa30d56cab6501f69f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:4d:b0:a5:d7:3c:ab:b0:5d:39:b8:76:3b:
da:22:e7:4d:0e:16:23:99:96:1e:f7:0e:18:7a:4f:
2a:e4:ce:7e:f8:86:d2:c0:20:a7:51:51:ca:97:53:
56:58:13:74:26:33:0e:d7:c0:d6:4f:23:c8:87:c2:
a8:4b:7c:e9:bf:1f:e6:7c:ba:34:f3:05:72:a7:de:
31:6a:66:e8:0b:48:ac:95:b8:17:44:60:78:e8:8a:
ac:3b:af:02:54:35:c4:1c:d3:12:a0:bc:c1:be:23:
96:6c:42:3d:5d:4e:ce:f2:2b:cb:a9:24:25:5d:c5:
54:35:62:d7:c0:24:a5:7a:1a:39:e4:44:ea:a2:6a:
7e:dc:48:89:e3:b4:60:c1:b3:7d:60:b0:b7:a5:59:
cd:5e:b7:c1:43:59:79:48:ff:d4:bc:0b:12:fd:35:
3a:fb:ca:a3:02:29:33:89:43:bd:f0:b5:8b:ce:a3:
f7:e0:81:72:50:99:5e:7c:46:7a:d2:d5:c4:96:23:
6f:53:cb:3a:78:a0:d7:9a:33:c9:41:16:f6:8c:2e:
bc:6a:25:6d:5c:0e:90:5d:91:fd:8a:28:59:a1:5b:
03:ea:28:33:cf:6c:f9:10:97:e9:f9:b6:ac:ba:c5:
51:08:34:4f:84:04:f2:a2:01:70:1d:34:e7:e5:e9:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:00:54:ED:5B:FB:05:BA:4C:FA:30:D5:6C:AB:65:01:F6:9F:26
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GrEAVO1b-wW6TPow1WyrZQH2nyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
14:bf:c9:79:12:d8:6a:18:df:70:47:6a:1a:87:c6:8f:89:4c:
01:f3:25:e9:f3:d5:69:2d:78:dc:b3:8f:64:8c:b7:1f:94:04:
46:ea:eb:bc:bb:39:0b:39:81:a3:13:8d:e3:a3:3b:98:1c:e8:
c5:a2:0c:61:dd:db:c3:67:50:a7:df:4f:e7:35:c0:0b:24:af:
80:5f:4c:71:46:7f:ef:68:0e:ca:19:5c:d6:85:40:38:d4:9c:
a2:b8:6a:55:19:2f:2e:e0:b7:5a:68:7a:c4:97:fd:01:96:c4:
ea:0b:f1:db:1e:1a:6e:0a:eb:90:b7:2e:02:91:4f:7e:74:6a:
ba:b7:c5:74:f6:c3:cb:1d:c8:04:63:a0:84:59:1a:97:48:b2:
5a:f2:19:0d:0e:da:e5:b9:c6:c2:d2:b0:05:f8:f0:38:ff:3e:
04:cb:09:18:19:2b:9c:4a:d8:44:f3:66:9c:23:2c:f9:fe:b9:
06:01:ef:c5:f3:7b:14:c7:f4:29:8e:32:ab:4d:dc:33:33:7e:
45:35:40:9c:21:77:d5:9b:dc:c1:37:5a:d4:7b:93:8d:b3:77:
c4:61:56:c4:aa:b8:85:db:69:50:88:ab:5a:32:a4:e8:f6:e8:
4d:e3:ff:cc:5e:46:43:88:20:bd:4c:29:ed:48:2a:51:22:02:
59:34:7c:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:35 2025 by rpki-client