Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/HLlAxZsi7kGVHwyAcsY0_QBWOMM.roa
File: HLlAxZsi7kGVHwyAcsY0_QBWOMM.roa (raw, json)
Hash identifier: CVSK807mL46xJ9eItAstu047K5qUlTdt5B9evnYXbGs=
Subject key identifier: 1C:B9:40:C5:9B:22:EE:41:95:1F:0C:80:72:C6:34:FD:00:56:38:C3
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E01C0DF20B0A2FC27BC2D268ED25ECA5
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/HLlAxZsi7kGVHwyAcsY0_QBWOMM.roa
Signing time: Sat 29 Mar 2025 04:14:49 +0000
ROA not before: Sat 29 Mar 2025 04:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:1c:0d:f2:0b:0a:2f:c2:7b:c2:d2:68:ed:25:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 04:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cb940c59b22ee41951f0c8072c634fd005638c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:0d:74:99:ce:4c:79:19:9b:c4:20:96:9b:
b1:f4:a5:5a:f5:b5:a2:da:c8:cd:36:b9:b2:d7:b5:
6c:92:68:ed:37:4f:2c:6a:75:4d:57:2a:8e:22:63:
33:bd:13:04:1e:aa:d0:cf:38:bd:59:3c:a9:e6:67:
f5:c4:9d:b7:d4:0c:2e:ff:41:b1:74:1f:f0:15:dd:
a0:bf:e1:35:c2:93:ca:6b:ea:bc:ea:d8:d7:dc:77:
e4:87:08:c7:c2:3f:27:90:67:bc:fb:22:77:42:cb:
d1:b0:69:69:bc:91:8b:2c:26:c5:61:31:e6:e4:af:
e1:4c:2b:e8:fc:f4:66:37:21:84:cb:a1:3c:46:0a:
50:24:57:fd:28:3a:3e:20:13:75:0f:a4:a6:34:ce:
47:33:22:e6:38:03:a4:41:d5:64:cc:72:6f:c5:67:
63:e3:b4:91:3a:7f:0e:38:26:e4:04:e8:fa:37:e5:
e1:b5:98:92:2c:59:a9:17:d4:64:2a:b5:25:5d:91:
b9:dc:45:af:3b:9a:f7:20:ab:f8:4d:c9:02:57:a7:
92:22:96:6e:b3:a6:86:dd:0c:92:dd:2e:1a:09:d0:
ea:28:65:d4:ab:f5:0f:ad:63:99:bb:42:c1:ad:a4:
60:b6:ea:0b:b1:cd:51:3a:36:cd:6b:20:39:19:82:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:40:C5:9B:22:EE:41:95:1F:0C:80:72:C6:34:FD:00:56:38:C3
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/HLlAxZsi7kGVHwyAcsY0_QBWOMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
7c:39:67:87:36:2a:e0:d1:21:27:99:5a:39:fb:67:c7:00:45:
96:73:34:0e:cf:1e:fd:53:c6:66:5c:ef:f7:2c:c1:7a:03:7b:
03:f9:78:4c:f8:fc:3a:d1:9f:5d:8a:1d:52:63:dd:98:76:e7:
6f:a4:0c:28:bd:9d:26:f9:a9:51:57:6c:86:e5:f9:14:f9:c5:
7d:40:e1:7c:19:14:3e:f4:9e:c4:c3:98:57:7d:b6:e4:1e:db:
80:5a:d0:2f:0f:9b:6d:d9:54:dc:2e:86:e3:8d:a4:59:de:6a:
f6:67:9c:37:a9:d4:68:f8:06:6b:a1:45:87:57:7c:4e:93:6e:
58:4f:cc:63:76:a9:b8:90:53:72:ab:ec:6c:af:65:7a:27:73:
49:5a:0b:91:2f:97:52:b6:27:20:97:19:de:56:89:03:b1:7d:
51:19:fd:8e:14:e7:d8:49:a5:8d:3b:b2:09:73:04:44:a4:8a:
f9:08:11:8c:75:87:cc:92:54:90:15:ed:5c:1a:4d:f7:6c:c2:
f6:59:3b:24:ff:9c:c0:5f:f8:51:02:b0:e6:ed:f4:c0:3e:93:
82:a5:0a:55:23:17:fd:79:28:d9:c6:5b:81:c4:28:b5:f5:d5:
95:79:0c:99:d0:3f:77:68:a4:91:32:5b:d4:a2:21:7d:44:7a:
6f:4f:bf:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:33:16 2025 by rpki-client