Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/QtcvUlda45KGGRZkyBda4F15BP0.roa
File: QtcvUlda45KGGRZkyBda4F15BP0.roa (raw, json)
Hash identifier: H+Xh0Bhgy9pALPocCOu+5ZsdkQvOKJlNKVkylvaSAa0=
Subject key identifier: 42:D7:2F:52:57:5A:E3:92:86:19:16:64:C8:17:5A:E0:5D:79:04:FD
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F28F42AB771D11B2D52A009A016B4F92
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/QtcvUlda45KGGRZkyBda4F15BP0.roa
Signing time: Tue 01 Apr 2025 18:13:49 +0000
ROA not before: Tue 01 Apr 2025 18:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:8f:42:ab:77:1d:11:b2:d5:2a:00:9a:01:6b:4f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 18:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42d72f52575ae39286191664c8175ae05d7904fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:fa:04:91:f8:05:c0:e9:5c:eb:97:9b:ce:
30:a8:a2:e3:de:67:31:46:66:72:c3:a5:f0:7a:de:
53:e2:d5:92:c0:eb:18:82:15:dd:7d:89:46:a0:76:
39:15:ad:25:54:81:35:ed:31:65:dc:1f:dd:19:41:
8e:60:4d:f4:c5:25:4b:5a:07:6d:f0:d6:8d:db:35:
14:0f:98:41:f0:d2:a0:7f:3b:81:3f:ea:d1:d8:18:
bc:4f:38:cb:68:73:73:54:a1:cc:9c:f2:00:71:99:
0e:ef:84:95:af:f2:21:04:f3:a7:5f:fe:3e:a5:bc:
90:4b:82:37:97:5f:a5:45:55:f8:24:00:47:ab:32:
c4:be:2f:46:2a:4e:7a:42:86:d0:5c:de:a4:b0:81:
9d:87:4f:9f:73:d1:76:7f:a6:67:0e:71:8e:9b:08:
e4:9b:c8:51:7f:9d:77:fd:2f:12:15:1b:84:fe:33:
79:ae:33:3b:27:49:a1:5e:fa:10:34:ea:d5:84:3d:
be:bf:4d:38:97:98:64:9b:bd:2e:df:38:e4:de:7b:
64:55:75:0f:07:44:29:0f:cd:4d:6a:14:19:00:aa:
c8:e8:cc:e4:be:2d:d6:15:03:86:51:6a:3a:df:c2:
cd:4b:d2:25:87:3d:24:a7:42:6b:e5:57:fb:16:80:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:2F:52:57:5A:E3:92:86:19:16:64:C8:17:5A:E0:5D:79:04:FD
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/QtcvUlda45KGGRZkyBda4F15BP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
24:06:42:ed:0f:30:c2:4f:44:2a:ec:ab:ed:cd:c1:9a:2d:fc:
6d:f5:7e:13:fb:f8:8b:ec:f2:ad:06:27:41:53:ab:5f:bb:02:
5a:52:a0:be:b6:e4:00:4d:7f:03:c4:c2:43:c6:8a:59:8c:0e:
eb:d8:83:a2:ec:ae:cb:f4:06:07:8b:80:d2:59:56:c0:21:2c:
9e:69:bc:65:57:6c:0e:c9:53:63:38:51:0f:60:14:40:22:4a:
b7:c1:91:ac:d6:aa:5f:d1:f4:7e:27:35:09:2d:dc:37:7a:f4:
65:07:35:50:49:9b:b8:81:02:db:66:3b:2e:e9:56:b0:c8:c8:
d9:c2:a1:7c:33:9c:03:0a:87:64:5f:78:ef:24:f7:02:60:fb:
9c:5e:57:8a:53:51:3f:ca:37:31:9c:68:82:66:27:3d:54:fd:
bd:09:94:b1:eb:fb:ff:d0:7a:71:3e:57:4d:2c:eb:cb:c3:2f:
d5:33:51:f6:47:22:70:7c:25:0c:9e:58:d0:26:b9:db:72:03:
af:50:e5:f1:12:d2:4b:84:5c:80:4d:b9:83:2d:12:bd:3e:1f:
2f:fe:0d:15:4a:8e:b5:62:f6:8d:86:fe:13:25:a3:15:c6:57:
b8:f0:4c:78:7b:6f:99:1c:b3:c3:b3:48:25:36:b2:ca:0a:f9:
c3:37:d7:41
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXyj0Krdx0RstUqAJoBa0+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAxMTgxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmQ3MmY1MjU3NWFlMzkyODYxOTE2NjRjODE3NWFlMDVkNzkwNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0v6BJH4BcDpXOuXm84wqKLj3mcx
RmZyw6Xwet5T4tWSwOsYghXdfYlGoHY5Fa0lVIE17TFl3B/dGUGOYE30xSVLWgdt
8NaN2zUUD5hB8NKgfzuBP+rR2Bi8TzjLaHNzVKHMnPIAcZkO74SVr/IhBPOnX/4+
pbyQS4I3l1+lRVX4JABHqzLEvi9GKk56QobQXN6ksIGdh0+fc9F2f6ZnDnGOmwjk
m8hRf513/S8SFRuE/jN5rjM7J0mhXvoQNOrVhD2+v004l5hkm70u3zjk3ntkVXUP
B0QpD81NahQZAKrI6Mzkvi3WFQOGUWo638LNS9Ilhz0kp0Jr5Vf7FoC3vwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFELXL1JXWuOShhkWZMgXWuBdeQT9MB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvUXRjdlVsZGE0NUtHR1Jaa3lCZGE0RjE1QlAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAJAZC7Q8wwk9EKuyr7c3Bmi38
bfV+E/v4i+zyrQYnQVOrX7sCWlKgvrbkAE1/A8TCQ8aKWYwO69iDouyuy/QGB4uA
0llWwCEsnmm8ZVdsDslTYzhRD2AUQCJKt8GRrNaqX9H0fic1CS3cN3r0ZQc1UEmb
uIEC22Y7LulWsMjI2cKhfDOcAwqHZF947yT3AmD7nF5XilNRP8o3MZxogmYnPVT9
vQmUsev7/9B6cT5XTSzry8Mv1TNR9kcicHwlDJ5Y0Ca523IDr1Dl8RLSS4RcgE25
gy0SvT4fL/4NFUqOtWL2jYb+EyWjFcZXuPBMeHtvmRyzw7NIJTayygr5wzfXQQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:20:34 2025 by rpki-client