Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Vl6YJ9FekL6lH2UpkPdtgHINoPQ.roa
File: Vl6YJ9FekL6lH2UpkPdtgHINoPQ.roa (raw, json)
Hash identifier: tJ3f0RA2Khrtm6zRD9s/Hv5NfYRrB+R1U1mf4a03GRc=
Subject key identifier: 56:5E:98:27:D1:5E:90:BE:A5:1F:65:29:90:F7:6D:80:72:0D:A0:F4
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195D445A8871E79155F38CF57ABA768A404
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Vl6YJ9FekL6lH2UpkPdtgHINoPQ.roa
Signing time: Wed 26 Mar 2025 21:04:49 +0000
ROA not before: Wed 26 Mar 2025 21:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:d445:47f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:45:a8:87:1e:79:15:5f:38:cf:57:ab:a7:68:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 26 21:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=565e9827d15e90bea51f652990f76d80720da0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:d8:72:67:45:c7:ae:8c:e1:12:7a:43:0c:
22:90:2a:0e:31:eb:4b:7b:46:a8:f9:08:3a:46:40:
c8:6d:de:73:83:84:69:d5:37:02:91:67:b2:20:1a:
aa:0c:13:05:bb:d2:60:c5:64:29:ab:6b:ff:11:fb:
1b:40:e2:f7:75:63:59:12:ac:97:65:37:cf:81:23:
af:54:f1:6b:d1:8d:3b:4a:a6:f3:85:49:a2:5f:0c:
6d:3b:66:26:df:a0:d3:e2:a8:53:98:5c:8e:63:b7:
c9:ba:e1:3b:4a:33:6c:c9:75:71:61:57:80:a0:59:
c3:43:2b:0e:2f:c4:fb:b9:36:6b:87:f6:8a:3f:24:
6b:10:2f:0f:09:34:c3:af:ee:95:eb:27:a3:3e:00:
6b:6c:4f:cb:86:de:78:2d:52:a2:0f:23:1d:33:6c:
d4:1d:b6:67:83:1f:ac:63:39:c2:b6:38:31:f1:47:
6e:a5:67:6f:79:82:d7:79:84:7e:d0:a7:8a:3a:33:
8f:f2:82:af:3a:0a:bf:60:4f:d1:f9:8d:08:9f:9a:
08:b1:f9:e0:f1:47:94:a8:6c:6e:32:db:60:f8:0a:
1a:2d:ce:76:40:18:a3:da:31:d2:64:7b:04:7d:95:
42:71:5b:a1:84:8e:b8:b3:a3:13:61:75:4f:6e:95:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:98:27:D1:5E:90:BE:A5:1F:65:29:90:F7:6D:80:72:0D:A0:F4
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Vl6YJ9FekL6lH2UpkPdtgHINoPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:d445:47f/128
Signature Algorithm: sha256WithRSAEncryption
6c:b9:24:3d:26:17:bd:f6:85:12:79:ec:3c:eb:04:b7:1a:82:
e8:40:ef:a3:12:3b:72:09:9f:bc:c4:7c:22:0e:4c:66:d0:0a:
8a:1d:38:f2:18:b5:b4:23:c3:18:3e:11:9c:79:4e:53:7e:ce:
21:e5:7b:a3:35:73:2a:3d:b9:60:33:08:31:fa:98:f8:6c:40:
5b:c7:a8:a6:be:19:e5:33:44:65:34:7e:1c:15:52:fe:d3:18:
a3:2e:4d:6f:9b:31:b2:3e:a8:35:e7:0a:d6:d1:4a:a7:68:4d:
83:07:ae:4a:99:2c:4a:bd:10:b3:ee:1e:9b:5f:54:21:7e:56:
18:c2:1c:a8:ef:34:72:c6:88:61:15:fa:46:e2:e4:c1:65:a0:
bf:bd:81:de:e4:6e:14:35:2c:20:69:81:1b:1b:4c:39:06:c4:
db:d8:fb:88:d6:37:f5:a1:ee:47:ae:10:96:9c:33:8c:13:4a:
5d:f4:51:d6:dc:46:6e:45:76:65:14:f9:06:8c:e0:92:0f:75:
1d:b1:4e:be:46:a0:84:f1:6e:44:c3:c9:c4:2e:48:f0:e2:80:
42:b1:b9:19:99:c6:eb:34:b2:ac:c7:3e:a9:55:13:f3:60:97:
10:d3:5b:cd:40:cd:fa:79:5b:c4:c6:f3:eb:7b:22:3f:42:32:
3f:0b:29:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:00 2025 by rpki-client