Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Ve9aZ0O6Lx27J__Wknip9U2WlHw.roa
File: Ve9aZ0O6Lx27J__Wknip9U2WlHw.roa (raw, json)
Hash identifier: KPJncqICVrO2EBpQyvj4WyH0XQy36aqgD8mXpMoBXY8=
Subject key identifier: 55:EF:5A:67:43:BA:2F:1D:BB:27:FF:D6:92:78:A9:F5:4D:96:94:7C
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FD80C5DB3DB4FBBF64908C3A16AD34EB
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Ve9aZ0O6Lx27J__Wknip9U2WlHw.roa
Signing time: Thu 03 Apr 2025 21:13:49 +0000
ROA not before: Thu 03 Apr 2025 21:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fd:80:c5:db:3d:b4:fb:bf:64:90:8c:3a:16:ad:34:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 3 21:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55ef5a6743ba2f1dbb27ffd69278a9f54d96947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:3f:e5:37:a6:ae:2e:21:26:ed:8f:21:69:
8c:cc:90:d5:46:22:51:d0:7d:b2:0e:00:50:fd:47:
bb:c8:13:70:f5:33:b1:eb:30:48:da:1f:28:8c:df:
20:74:70:75:ae:bd:a1:f1:5a:86:38:fa:41:19:ce:
5e:21:83:df:4c:20:62:33:ab:fd:bf:92:0a:3f:02:
90:3a:be:bb:f9:2b:d9:1f:8e:58:d7:21:67:e9:d9:
cc:f4:1d:01:70:c6:f0:2b:a5:aa:e3:e4:19:d4:9b:
67:eb:ee:e6:9f:cf:3e:5f:89:ff:46:aa:2c:77:4d:
f3:f4:cf:c9:e4:88:57:ba:27:45:af:1b:a3:29:07:
8a:cf:8d:fc:ed:ce:ba:ef:7b:af:7f:48:9e:de:19:
2c:ed:e6:82:35:1f:dc:ac:51:e4:2f:22:84:71:e1:
e2:d3:2c:bf:be:30:da:3b:e5:4f:9f:5b:3f:92:7c:
4d:4a:89:3d:65:12:d1:76:ec:31:e3:27:80:24:2f:
e6:90:78:57:63:fc:d6:c5:11:4f:2f:9c:ec:68:16:
2b:af:72:2f:67:86:e0:0d:21:c9:b7:e5:81:93:ef:
d9:f8:ae:ec:39:59:3e:ad:07:ae:f9:89:3f:08:05:
78:34:c8:2e:50:cc:a7:d7:f3:ca:90:b2:ec:08:f1:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EF:5A:67:43:BA:2F:1D:BB:27:FF:D6:92:78:A9:F5:4D:96:94:7C
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Ve9aZ0O6Lx27J__Wknip9U2WlHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
21:06:c4:0a:e4:4a:9b:41:ca:11:c1:fb:f5:5b:34:27:5c:e5:
69:86:da:33:15:3e:7c:bc:55:2e:0f:32:48:ea:ff:b6:64:33:
59:c6:ba:49:ef:b7:d9:f6:dd:8a:d1:f3:d0:9f:4e:67:0f:49:
53:20:41:e1:e1:fd:1d:10:81:58:13:65:d9:32:39:f4:b5:7c:
bf:06:fb:1d:47:f5:29:d3:cd:6d:96:79:b7:4b:ba:df:2e:b3:
ac:52:79:38:a8:5a:dc:c3:71:5d:eb:8f:db:8c:f9:9c:2d:f5:
74:84:a1:fb:a7:6f:bb:ec:02:7f:e7:cc:de:09:90:08:76:47:
f9:ac:a9:28:88:35:2d:9a:f1:9b:b4:a4:0e:1e:55:3a:cc:14:
77:2a:8c:f0:86:6b:a4:ec:a3:c8:ce:f3:dc:bc:8c:07:c3:4a:
05:5a:44:b7:e8:33:5a:ba:0b:69:3e:97:59:99:e8:9f:9b:29:
e2:38:b0:11:9b:23:41:3a:e0:a5:2a:32:0e:d5:1a:30:cd:0a:
fd:5d:72:66:c6:82:8e:e6:48:36:e0:25:65:56:a2:73:f0:35:
68:b0:6a:2b:02:9d:2a:da:dd:89:51:88:63:76:90:91:12:a6:
8c:f1:b4:d0:ac:55:c6:b9:f4:2d:40:76:82:75:a4:b6:4a:03:
99:2d:e3:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:54 2025 by rpki-client