Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/SUA2UzRIxIi_lIDWM_qbPsfRlc4.roa
File: SUA2UzRIxIi_lIDWM_qbPsfRlc4.roa (raw, json)
Hash identifier: 9sNjiVqsaKdXfZAuDgPrqr1NAlFRklyQhXSwu+6oKYk=
Subject key identifier: 49:40:36:53:34:48:C4:88:BF:94:80:D6:33:FA:9B:3E:C7:D1:95:CE
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E5AE727FD9032A6D8AB88BBF4D5E20DC
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/SUA2UzRIxIi_lIDWM_qbPsfRlc4.roa
Signing time: Sun 30 Mar 2025 06:12:49 +0000
ROA not before: Sun 30 Mar 2025 06:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e5:ae:72:7f:d9:03:2a:6d:8a:b8:8b:bf:4d:5e:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 06:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494036533448c488bf9480d633fa9b3ec7d195ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:67:59:cc:bd:e0:e2:9a:3a:a3:3a:6d:f6:
35:78:6b:de:34:27:b9:ab:9d:46:63:6e:de:96:c0:
a5:fa:77:34:1e:d3:9e:f1:e8:20:83:f2:f4:14:de:
85:a3:0c:c5:14:17:19:62:40:eb:d3:f3:f1:4d:d7:
22:a8:62:33:69:a6:c9:cc:7a:c2:38:95:22:43:2f:
b4:91:f9:d1:27:b8:be:31:15:04:91:3d:cb:dd:8d:
5d:9f:57:7d:c5:ab:40:74:6e:14:50:e9:b3:89:2f:
de:00:ef:b5:f1:4d:ea:65:a0:bc:f5:20:ef:ed:d6:
33:41:e5:6f:dd:64:b9:e7:90:ee:ad:36:b6:b5:62:
28:2e:c5:f2:39:07:9b:05:11:0f:42:38:93:b1:b4:
fa:71:ff:13:ee:93:08:48:62:4c:29:83:88:9a:45:
68:72:51:bf:bd:bf:54:4a:0a:ec:76:b1:5d:ff:76:
81:1f:b6:3d:69:49:2e:55:6e:6b:4e:b1:db:26:bf:
23:e7:af:fa:60:7b:53:e8:a4:77:71:a5:35:b2:d9:
01:9b:99:35:24:18:c0:71:66:49:12:0f:07:9d:14:
6e:c1:b1:6f:9d:58:e0:4d:40:02:05:e0:c7:1c:35:
ed:5a:e4:cb:0c:e6:0d:7e:71:49:cc:75:a1:51:e5:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:36:53:34:48:C4:88:BF:94:80:D6:33:FA:9B:3E:C7:D1:95:CE
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/SUA2UzRIxIi_lIDWM_qbPsfRlc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
7e:1c:42:70:f5:93:a2:a6:fc:01:38:15:52:68:38:1d:98:16:
0a:37:2d:d4:ef:71:9e:4e:86:f0:6b:91:df:c1:9b:5d:41:d3:
1b:f3:a5:73:01:d9:19:c7:52:04:a1:23:71:05:e3:f3:5b:23:
5e:62:39:f0:02:82:a6:f6:e0:a8:ca:d5:61:b6:af:6b:7b:5e:
7b:7e:3e:c7:5b:b7:18:13:eb:64:ca:b5:31:f2:ea:b2:f5:e0:
a5:3a:40:c8:77:d1:b7:4d:63:d6:19:90:6d:c8:66:5e:61:24:
80:55:2e:ab:60:b5:ef:3a:8e:11:5a:ee:6d:82:18:2c:99:da:
52:a5:b2:c4:9e:73:10:12:84:9f:f9:9b:2e:2c:94:5f:f7:11:
1d:97:1b:ef:53:ae:9d:88:02:bd:63:05:22:ed:7f:41:d0:08:
9a:7a:ef:f4:8a:ab:de:03:9e:25:6a:e0:df:23:fe:d0:b9:62:
13:c1:ba:cd:6e:e0:91:00:73:c3:b1:2f:ca:b0:7f:92:cf:2d:
7a:48:3f:b0:01:1d:a6:6a:cd:aa:41:b2:e0:76:35:4a:1a:7f:
4f:08:c0:49:96:b3:51:eb:c4:ed:87:8a:4b:de:40:97:84:cd:
94:40:0c:05:d7:a7:1d:42:89:82:7b:fe:2f:25:f9:29:8f:7f:
68:c9:77:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:28:23 2025 by rpki-client