Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/LzLFRupxVvgq5ARmT-UD9NCbfUQ.roa
File: LzLFRupxVvgq5ARmT-UD9NCbfUQ.roa (raw, json)
Hash identifier: NJOy1K4sJVviwPpo3i7j9znNAfMP0/1DBIZtWNyQC3Y=
Subject key identifier: 2F:32:C5:46:EA:71:56:F8:2A:E4:04:66:4F:E5:03:F4:D0:9B:7D:44
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DD870B67100C4462FCF6F08A2B87AAC4
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/LzLFRupxVvgq5ARmT-UD9NCbfUQ.roa
Signing time: Fri 28 Mar 2025 16:12:49 +0000
ROA not before: Fri 28 Mar 2025 16:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:87:0b:67:10:0c:44:62:fc:f6:f0:8a:2b:87:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 28 16:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f32c546ea7156f82ae404664fe503f4d09b7d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:f4:7c:fa:d0:d7:46:4a:b9:7b:d1:42:75:
93:cb:79:7d:89:88:cb:ef:56:14:52:5a:51:61:70:
f5:fc:fd:0f:2c:42:57:2d:95:09:c7:c6:5f:8a:81:
03:71:c9:74:bf:af:50:e5:d5:96:02:f0:e1:3d:a2:
f6:a2:d6:79:14:68:aa:45:07:1e:f9:4c:49:f2:f6:
74:bc:00:d7:a0:8d:16:38:ea:bb:69:11:6d:43:04:
a7:c8:3b:36:bf:99:33:3f:93:70:07:81:0a:d7:bf:
19:4f:9a:e9:72:5e:91:3a:8b:fa:3c:a3:b6:d6:a6:
47:43:26:c9:6b:16:45:4d:6c:8e:41:9b:85:fb:3c:
68:ad:80:07:2d:e9:42:41:86:dd:b1:0b:f1:3e:8b:
a5:06:c7:e3:71:2a:62:12:d1:5b:0d:77:2b:74:4d:
77:1f:71:78:7c:15:81:06:05:59:ad:53:cf:9c:0e:
4d:d7:42:b8:5d:ec:4f:43:1a:3d:3e:82:86:19:b0:
50:83:45:f7:ae:6f:fd:c2:dc:48:1b:6e:f9:0c:d8:
3f:a8:b1:1a:5a:2f:21:cb:20:c9:d5:14:55:2f:f2:
ee:e0:c5:62:6f:ef:4b:02:f5:c3:b2:5a:a5:1b:67:
c3:17:bf:5a:8b:4f:68:05:f9:ef:f2:d2:b0:03:1f:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:32:C5:46:EA:71:56:F8:2A:E4:04:66:4F:E5:03:F4:D0:9B:7D:44
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/LzLFRupxVvgq5ARmT-UD9NCbfUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
6d:e5:fc:e3:ab:6e:7c:fa:32:a2:81:8c:48:fb:5c:d0:88:9b:
fe:c0:36:69:0b:f0:5b:64:a8:32:e9:1b:31:36:91:27:74:0f:
87:bf:fa:5e:71:81:42:c6:18:ef:18:3f:95:0d:00:c8:8c:76:
68:dd:5a:f2:99:27:8c:f0:a6:ae:f6:17:ee:ea:7d:5b:4e:49:
5f:7e:3b:0a:78:19:71:8d:91:e1:a5:64:3f:05:b8:91:d0:5d:
57:19:2a:87:6f:c4:06:41:52:24:9c:ae:a4:e5:7d:b6:d5:23:
a6:d4:c5:69:46:83:ba:7f:76:bb:64:85:01:53:0c:9f:18:5e:
da:27:0b:e9:83:08:7f:02:48:db:2d:ae:d6:a0:ee:89:50:7b:
bd:e6:12:ae:ce:0d:95:e2:d5:13:a3:e9:12:c3:fc:17:94:8a:
e9:c6:f7:08:d1:df:2c:dd:9f:c1:e6:41:57:50:08:68:9b:a5:
0f:a0:a0:61:bb:86:dd:57:0c:f8:6b:73:93:96:0b:b9:75:d2:
9a:e3:70:1e:90:f8:8c:01:54:f1:d3:6e:80:82:25:5e:4a:c6:
0c:2b:d7:dc:db:72:20:c0:0d:b9:8f:dd:f3:c2:1a:a6:96:65:
de:c2:b8:04:a1:63:b9:63:f4:91:bc:70:8b:2f:11:1e:e8:f0:
81:e2:9a:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:29:20 2025 by rpki-client