Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RGbSlka1TqcbG4s8dNn8NDNPTKg.roa
File: RGbSlka1TqcbG4s8dNn8NDNPTKg.roa (raw, json)
Hash identifier: +KluvKPh5CicHBzrQBy/EJHZEOF5omJ4ks+AWGU+IFw=
Subject key identifier: 44:66:D2:96:46:B5:4E:A7:1B:1B:8B:3C:74:D9:FC:34:33:4F:4C:A8
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DED361EAA00DB5576B6AB7A8433E9A66
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RGbSlka1TqcbG4s8dNn8NDNPTKg.roa
Signing time: Fri 28 Mar 2025 22:15:49 +0000
ROA not before: Fri 28 Mar 2025 22:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:de:d3:61:ea:a0:0d:b5:57:6b:6a:b7:a8:43:3e:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 28 22:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4466d29646b54ea71b1b8b3c74d9fc34334f4ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:df:5e:df:5e:2f:60:1a:a6:d5:90:b4:5a:88:
a5:36:5f:0f:49:cb:8d:76:98:f2:1d:b9:b1:86:1c:
a4:98:ae:36:a3:30:9b:0a:56:ac:23:f8:60:28:8a:
ff:72:f5:b6:59:ce:53:a1:f2:f1:ee:a3:0a:ad:d0:
f5:2e:31:49:b6:91:3b:6c:29:93:4c:85:9f:2f:77:
e7:34:60:9b:85:1c:73:c4:23:92:b0:97:8b:76:ac:
6a:ba:37:fc:e5:5e:a6:4e:0e:72:ff:f6:52:73:29:
30:9b:b1:56:66:d3:cb:13:50:18:84:7f:97:72:7a:
13:5c:c5:70:4a:10:dd:5b:ca:95:86:45:39:5d:ee:
81:68:b1:b7:36:4d:7f:88:d0:15:23:52:da:68:6f:
bd:24:12:71:da:bb:ce:43:5c:bd:c8:05:7a:fd:ff:
ba:d1:14:27:bd:ab:21:28:3c:02:03:63:9a:4d:da:
3a:05:dc:e9:06:fa:f5:75:96:39:78:0e:ec:c5:dc:
e1:dc:d5:31:93:c9:3d:a6:f4:1c:da:be:47:68:f0:
73:e1:68:23:d5:de:48:6a:a7:b7:c0:c7:7a:b3:3d:
d6:fc:45:cb:b7:a0:aa:f9:cb:1c:df:91:f3:ea:17:
9a:03:d4:e2:e5:ad:eb:f3:a0:6c:15:3c:a3:3e:b8:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:D2:96:46:B5:4E:A7:1B:1B:8B:3C:74:D9:FC:34:33:4F:4C:A8
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RGbSlka1TqcbG4s8dNn8NDNPTKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
61:d3:f2:0f:4d:ce:ad:81:8b:f9:c3:87:56:1b:b1:20:89:74:
54:10:90:9d:c1:0a:d8:b1:57:51:86:d3:45:93:7e:cf:f1:8e:
d1:07:26:04:0a:7c:ae:e3:fe:6c:fe:7d:7b:41:56:bf:12:c0:
c4:61:98:c8:bd:e7:c1:40:a7:ad:60:8e:4d:bb:5b:e5:b4:b3:
df:5a:de:bd:8a:2c:5d:ae:20:1d:05:8e:d9:de:f7:c7:21:7b:
81:b5:dd:d4:d4:bf:bc:d7:cb:0c:7f:15:54:c4:ad:81:46:ac:
91:93:56:7d:69:c9:22:17:fd:33:92:c4:c8:0e:65:2d:af:3b:
01:eb:9f:d1:2a:ed:fd:b2:3d:8d:6a:d8:f8:1a:3c:91:16:bf:
dd:b6:42:04:d3:2b:16:0c:a8:5c:a3:2c:70:79:21:c0:6d:0c:
a2:79:2d:ad:a7:b7:5f:f1:fe:38:01:65:8b:07:1f:f1:0a:93:
d4:c5:5a:c4:be:90:02:31:fc:4b:ab:12:53:1e:1d:b9:ac:5c:
42:ec:a3:7e:93:47:a4:78:20:69:ec:6a:b4:a5:6c:25:9e:50:
26:86:12:e5:92:35:32:0e:20:1e:5a:ac:17:4f:be:90:e9:92:
a9:97:f0:fe:10:5a:75:60:ef:6c:73:7d:65:af:64:43:f0:b2:
c8:09:75:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:03 2025 by rpki-client