Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_QpKBLMI1q3SPukx2Gj0hwSJemg.roa
File: _QpKBLMI1q3SPukx2Gj0hwSJemg.roa (raw, json)
Hash identifier: bnLknY4T5BnGmWWmP2QKO/jfzLdEljw+sKm19l1FIxo=
Subject key identifier: FD:0A:4A:04:B3:08:D6:AD:D2:3E:E9:31:D8:68:F4:87:04:89:7A:68
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DC6D0FF802372005A4DE41B18FE89CAB
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_QpKBLMI1q3SPukx2Gj0hwSJemg.roa
Signing time: Fri 28 Mar 2025 11:04:49 +0000
ROA not before: Fri 28 Mar 2025 11:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:6d:0f:f8:02:37:20:05:a4:de:41:b1:8f:e8:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 28 11:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0a4a04b308d6add23ee931d868f48704897a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:4e:71:e8:92:30:09:f2:68:3b:8f:b8:7e:
27:70:2c:1e:ca:72:16:12:8d:02:3e:f7:c9:b5:56:
20:6d:25:ff:5f:4a:b8:ed:b4:d2:ea:0f:1e:9a:83:
a6:50:60:d6:7a:a1:c0:75:d5:c3:6d:e7:7d:de:b6:
51:2e:13:f0:52:3a:62:21:0e:53:73:83:2c:bc:3a:
dc:f1:fe:0e:e9:75:4e:11:c3:5b:0e:49:2c:d5:9f:
47:af:4b:39:93:8b:0b:84:84:f9:1f:f4:59:d2:c2:
5c:c6:11:17:92:71:b7:b2:da:60:4a:a3:f7:65:92:
9d:d8:f6:de:b2:48:bd:29:c8:77:b0:cb:21:e5:34:
1e:49:fa:0f:c5:8e:88:b7:02:e8:cb:a6:36:62:8a:
68:a9:50:c4:fe:a5:65:7c:37:2c:2d:a3:c0:a0:c4:
0a:a0:2e:b0:f8:1e:ec:e7:cb:29:41:28:86:62:3c:
80:d3:9f:a5:74:8f:64:7f:9c:d3:c1:9d:be:72:59:
cd:64:d1:be:b7:d0:7a:08:6b:41:e0:1d:a2:53:2b:
c2:88:14:d0:2d:c5:0b:97:37:ae:c4:0b:b4:02:f3:
4a:af:bb:41:73:7c:72:76:c1:8d:fd:f4:da:e9:e1:
76:fc:49:f7:e5:d1:a0:0d:8b:3f:3f:ba:d0:12:18:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:4A:04:B3:08:D6:AD:D2:3E:E9:31:D8:68:F4:87:04:89:7A:68
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_QpKBLMI1q3SPukx2Gj0hwSJemg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
94:dc:0a:da:fa:b3:67:f1:c1:d5:e9:a2:1f:8f:98:d6:b9:63:
0e:5e:c7:80:d2:da:6b:43:3a:89:6a:76:67:fa:2c:d4:00:78:
41:b1:e2:cf:bb:74:c4:c6:c1:4d:f5:75:9a:2d:66:7e:06:97:
5b:85:72:5d:e4:36:06:e0:39:9d:66:a4:c5:09:5a:9f:00:28:
68:d4:62:7e:02:7e:b3:c5:4f:35:04:bf:3a:bc:dd:4d:c2:0f:
9e:63:90:76:e1:47:c7:1f:05:aa:78:ba:75:3e:70:ae:d8:65:
03:e9:31:be:a7:c1:c1:9c:46:3c:3f:0a:61:01:0f:fc:02:8a:
ad:ad:df:d2:5b:f1:e2:06:79:e3:50:a0:63:18:7f:a3:bc:f1:
45:71:96:01:63:b4:6d:04:1f:92:e5:35:c6:f6:79:09:94:3e:
b6:40:7f:a0:29:61:5b:ed:39:9c:8c:86:91:12:d5:54:ed:c4:
9b:34:e8:53:ff:75:3d:a6:6c:6a:9d:d8:a7:ae:4c:53:ca:ef:
95:c0:6b:0a:63:7f:35:d2:5a:eb:ff:c9:32:b4:e5:8e:ab:59:
0c:84:de:dc:6a:96:b4:af:15:89:d3:93:8a:cb:1e:37:3f:30:
12:0a:ff:1b:73:50:4e:ec:17:61:d7:c5:b3:a0:a7:e2:97:d6:
10:df:be:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:11 2025 by rpki-client