Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YjCW7JJDcfl8tcvkUbqozWY_4KU.roa
File: YjCW7JJDcfl8tcvkUbqozWY_4KU.roa (raw, json)
Hash identifier: ZnMYgRFU78de+KOxeP0SrDfQ47g3c6wy+9/MS6y9WTE=
Subject key identifier: 62:30:96:EC:92:43:71:F9:7C:B5:CB:E4:51:BA:A8:CD:66:3F:E0:A5
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E3540769C6E35458A22739FA2D43E3EF
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YjCW7JJDcfl8tcvkUbqozWY_4KU.roa
Signing time: Sat 29 Mar 2025 19:14:49 +0000
ROA not before: Sat 29 Mar 2025 19:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e3:54:07:69:c6:e3:54:58:a2:27:39:fa:2d:43:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 19:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=623096ec924371f97cb5cbe451baa8cd663fe0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:b4:70:3c:bd:d0:a8:7b:88:be:9c:8d:2f:
2c:d7:59:57:22:c5:8a:b4:91:af:0b:49:61:38:ad:
80:b1:b5:85:b8:0b:f8:22:73:8c:8a:0f:5f:e0:cd:
5e:0b:db:a4:f1:4b:b8:0a:9b:ca:26:40:91:9a:22:
1b:05:29:01:03:53:88:b9:c7:14:46:7e:d5:35:3b:
9e:6e:a4:6f:f7:bf:64:bf:ad:f4:5a:ed:f7:a0:da:
dc:25:c1:4d:08:5f:ec:17:3f:de:cf:2e:db:0b:ec:
44:bb:23:07:79:fa:48:e7:58:1e:c2:f1:2f:df:6c:
46:46:d8:64:2f:bd:ae:52:ab:48:27:b0:17:cb:0b:
ae:d4:45:78:94:55:c0:a0:85:c4:16:86:ec:ee:62:
01:f9:4e:09:29:66:1c:eb:61:0f:00:90:2f:e8:d6:
6f:9d:39:9b:73:aa:89:24:10:85:fe:93:d6:52:5b:
94:06:96:e8:be:e3:cd:b7:51:8a:ed:13:9c:26:6a:
40:f8:42:c6:f8:33:a5:ac:82:fb:71:f1:1f:04:6e:
61:f5:2d:bb:1c:03:27:17:a2:6d:f5:e1:89:c1:54:
8e:3e:00:b6:79:ab:b6:6a:e2:ad:df:b7:9f:df:03:
4c:d7:5e:83:40:38:fe:c5:ab:0c:6f:59:61:e5:ba:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:96:EC:92:43:71:F9:7C:B5:CB:E4:51:BA:A8:CD:66:3F:E0:A5
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YjCW7JJDcfl8tcvkUbqozWY_4KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
5a:77:ae:f5:f3:da:7a:d5:ba:a2:2e:ea:a5:89:6d:29:95:da:
88:8d:73:96:14:80:01:6b:21:17:98:fd:83:2e:b4:8f:55:e3:
ea:eb:c1:d0:4d:5b:7f:4e:4f:16:fe:bf:ea:3b:87:11:d9:34:
47:53:47:10:2a:2c:de:5c:08:28:ee:a9:39:92:19:2d:46:bd:
98:c1:28:47:fa:b4:8e:54:f5:f5:63:ab:18:a7:18:98:8a:b5:
6e:f3:c7:c7:4b:bf:80:36:b3:18:93:b5:19:71:b4:92:dd:34:
6f:78:ae:d9:62:ff:0c:07:e7:b7:cd:d9:b4:c0:00:80:23:13:
eb:a9:a4:4c:a2:34:c3:8f:94:5c:c2:f3:6e:7a:8a:83:51:d8:
21:b2:78:28:f8:eb:43:26:3b:7d:16:e9:56:a2:f7:d9:a4:46:
45:72:5e:df:2e:0a:00:71:b9:88:4c:00:ec:8e:83:05:05:a7:
35:e9:ba:5f:70:ef:2c:39:d6:97:35:2c:6f:43:3a:88:b2:d0:
18:f0:d8:0c:68:4b:1b:6b:d4:31:49:21:0f:75:f4:01:91:e1:
d8:64:6e:d6:9a:dd:5e:d6:c0:f5:35:26:48:da:72:54:3e:f7:
40:aa:08:12:5e:b5:e9:35:a1:83:30:7f:22:ee:38:0f:13:52:
3e:5e:85:19
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXjVAdpxuNUWKInOfotQ+PvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzI5MTkxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjMwOTZlYzkyNDM3MWY5N2NiNWNiZTQ1MWJhYThjZDY2M2ZlMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+y0cDy90Kh7iL6cjS8s11lXIsWK
tJGvC0lhOK2AsbWFuAv4InOMig9f4M1eC9uk8Uu4CpvKJkCRmiIbBSkBA1OIuccU
Rn7VNTuebqRv979kv630Wu33oNrcJcFNCF/sFz/ezy7bC+xEuyMHefpI51gewvEv
32xGRthkL72uUqtIJ7AXywuu1EV4lFXAoIXEFobs7mIB+U4JKWYc62EPAJAv6NZv
nTmbc6qJJBCF/pPWUluUBpbovuPNt1GK7ROcJmpA+ELG+DOlrIL7cfEfBG5h9S27
HAMnF6Jt9eGJwVSOPgC2eau2auKt37ef3wNM116DQDj+xasMb1lh5brnuQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGIwluySQ3H5fLXL5FG6qM1mP+ClMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvWWpDVzdKSkRjZmw4dGN2a1VicW96V1lfNEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAWneu9fPaetW6oi7qpYltKZXa
iI1zlhSAAWshF5j9gy60j1Xj6uvB0E1bf05PFv6/6juHEdk0R1NHECos3lwIKO6p
OZIZLUa9mMEoR/q0jlT19WOrGKcYmIq1bvPHx0u/gDazGJO1GXG0kt00b3iu2WL/
DAfnt83ZtMAAgCMT66mkTKI0w4+UXMLzbnqKg1HYIbJ4KPjrQyY7fRbpVqL32aRG
RXJe3y4KAHG5iEwA7I6DBQWnNem6X3DvLDnWlzUsb0M6iLLQGPDYDGhLG2vUMUkh
D3X0AZHh2GRu1prdXtbA9TUmSNpyVD73QKoIEl616TWhgzB/Iu44DxNSPl6FGQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:26:34 2025 by rpki-client