Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ZwJFxsMSdBfj-AxGDqIzOG01V_Y.roa
File: ZwJFxsMSdBfj-AxGDqIzOG01V_Y.roa (raw, json)
Hash identifier: 0AW1ynbUJF9+vJUpLGzIIimjAxgpINGX69o9s0sOKl4=
Subject key identifier: 67:02:45:C6:C3:12:74:17:E3:F8:0C:46:0E:A2:33:38:6D:35:57:F6
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EB0D91143A2C9E4EFDD95D5BCAE69EB7
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ZwJFxsMSdBfj-AxGDqIzOG01V_Y.roa
Signing time: Mon 31 Mar 2025 07:14:49 +0000
ROA not before: Mon 31 Mar 2025 07:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:0d:91:14:3a:2c:9e:4e:fd:d9:5d:5b:ca:e6:9e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 31 07:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670245c6c3127417e3f80c460ea233386d3557f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:ea:b6:87:ab:42:07:2c:27:ee:4c:64:e2:
9f:99:9d:29:55:3b:fd:bf:9c:e9:88:5c:08:16:ce:
ef:b1:ec:0b:c9:42:60:40:b7:81:42:dd:62:5a:7d:
cf:01:88:6c:9e:63:80:e6:54:76:d3:86:a8:a0:8a:
7b:08:44:65:b3:b4:94:94:6e:8b:a3:b3:a3:29:18:
28:9d:aa:03:36:eb:3c:d1:24:cf:48:fd:df:f5:7f:
e1:38:b1:68:76:05:65:1c:0d:95:05:ce:9b:db:01:
d8:f1:8a:ec:89:bb:02:a3:ff:cb:6c:41:c5:bc:c5:
77:e2:64:5a:55:aa:9c:57:b7:78:79:d1:2f:17:b4:
d1:6d:90:db:65:06:e4:46:33:9f:b0:52:f3:db:a5:
4f:58:f8:e4:64:52:38:5e:7d:5c:41:08:e0:b5:4a:
67:50:96:eb:12:f9:ad:1f:34:00:ca:06:6e:e7:62:
03:ac:67:8b:12:f7:d1:95:d9:44:33:3f:b4:00:b2:
94:63:09:da:dc:22:79:98:ea:96:0b:87:f0:4a:3e:
97:84:e4:4e:aa:a2:03:90:ac:a3:5b:f9:2d:cb:95:
67:ce:2b:51:cd:33:fc:b2:dd:5a:d2:86:6e:60:9a:
c5:03:f9:02:12:55:f2:0e:f6:bf:51:54:90:2a:d8:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:45:C6:C3:12:74:17:E3:F8:0C:46:0E:A2:33:38:6D:35:57:F6
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ZwJFxsMSdBfj-AxGDqIzOG01V_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
9d:8f:05:dd:4f:39:0f:f1:91:a5:76:f4:1b:71:26:6d:55:f7:
7c:c2:6b:c8:b7:a6:28:2e:79:7f:0c:34:59:6c:08:c4:bf:45:
ec:74:2c:cc:f4:b7:b6:7c:a9:9b:51:9e:04:59:0b:50:28:2d:
fc:e4:1b:f7:f9:f5:ad:ff:04:ac:d8:c2:27:38:46:2a:1a:f6:
59:30:67:8d:33:8d:cb:be:40:58:b7:4d:c9:75:74:f4:d1:f7:
d2:05:13:8c:38:e2:78:6c:b3:97:a0:28:9b:f0:65:95:4a:20:
ca:3c:15:17:60:a3:ae:be:fd:45:23:5d:8f:ae:f2:3d:d2:31:
2a:32:79:49:71:1b:f5:05:b2:78:c0:24:a5:3a:da:d1:a8:58:
b0:4f:6e:cd:c6:8a:05:fb:71:69:b7:1c:29:e6:80:f7:21:b9:
63:ce:a4:9a:bc:d7:6c:fc:fe:ef:54:b1:88:cd:da:00:62:ea:
6a:7a:c7:5f:d3:6c:69:a9:37:ab:98:ea:d5:c8:0f:69:84:9f:
e9:7b:a3:be:68:17:ce:ed:49:aa:c9:64:1b:09:1e:ca:fc:c3:
4c:91:d1:54:9d:28:d3:73:26:2d:66:de:90:a3:cb:94:a1:c7:
61:7a:fd:56:9e:85:a0:6d:78:de:14:c7:48:15:f5:4e:a9:02:
af:fb:6e:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:16:17 2025 by rpki-client