Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/aDW2skoJ2lOBtKj1l4qFaCrBoSQ.roa
File: aDW2skoJ2lOBtKj1l4qFaCrBoSQ.roa (raw, json)
Hash identifier: CzFdJNiYJipdZ4s41SghAa3nY9WzIZyh3zQuIbMrIo4=
Subject key identifier: 68:35:B6:B2:4A:09:DA:53:81:B4:A8:F5:97:8A:85:68:2A:C1:A1:24
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EFFCFF44FA4A8EDCCD137327F2C97EE3
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/aDW2skoJ2lOBtKj1l4qFaCrBoSQ.roa
Signing time: Tue 01 Apr 2025 06:14:49 +0000
ROA not before: Tue 01 Apr 2025 06:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ef:fc:ff:44:fa:4a:8e:dc:cd:13:73:27:f2:c9:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 06:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6835b6b24a09da5381b4a8f5978a85682ac1a124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:10:a4:07:6a:08:e7:27:6e:9a:2c:02:73:
41:81:b6:bc:2a:99:3b:0d:24:41:c9:62:b6:0e:a8:
d3:01:d1:2b:9d:a6:e6:f9:ff:bf:db:f9:12:35:5e:
c4:74:7a:ab:8a:8d:30:ce:1b:8f:28:ce:49:46:e0:
23:5d:3d:ad:74:a2:aa:b9:08:f7:45:d9:b9:04:f4:
fe:66:bb:28:e0:54:f8:59:a2:1f:e1:6f:b8:6a:bf:
a6:b0:04:05:4c:14:43:16:20:8e:1c:ca:ad:67:2e:
6b:8d:84:43:94:d5:fb:43:5e:ea:1a:b9:a7:b7:ac:
d7:55:1c:63:2f:7c:d8:b9:f6:a5:ac:b4:29:c5:90:
f0:b3:19:a8:bf:9b:73:50:6a:03:09:f1:c4:9e:b5:
a2:6f:67:77:0b:5d:90:64:07:1f:b8:7b:d1:bb:d1:
ee:c9:e4:ab:ad:f6:f5:36:73:c2:53:a2:df:1e:5e:
b8:e8:e2:2c:71:40:c3:74:ce:87:89:26:fa:33:99:
ec:73:d3:8c:54:8a:f2:fe:60:6a:21:35:7a:dc:59:
5d:2b:ac:96:7e:40:be:c2:30:ae:6c:05:ec:d1:3d:
19:89:5d:80:2a:2e:d1:b1:6e:a5:bc:dc:7b:98:e5:
b0:8e:63:82:d3:d6:1e:9e:86:61:dc:79:35:f7:96:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:35:B6:B2:4A:09:DA:53:81:B4:A8:F5:97:8A:85:68:2A:C1:A1:24
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/aDW2skoJ2lOBtKj1l4qFaCrBoSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
30:c8:0d:66:e2:55:b0:5c:c5:2e:95:b9:c0:cf:90:c7:cd:3d:
81:bc:4e:fb:0a:4e:e8:3a:d0:28:5a:1e:0c:f9:03:3b:1d:02:
9c:e7:44:8d:41:e3:76:19:d4:ce:51:29:8b:53:c4:4e:f1:87:
54:83:58:0a:6d:b2:53:a3:6b:e9:08:81:fd:bb:d2:dc:86:84:
7d:1a:3a:27:9f:df:30:c7:f1:53:c7:8c:80:15:58:c5:87:91:
43:f6:ad:31:56:6a:39:91:91:b3:3e:30:01:b7:7b:bb:28:14:
a3:4a:7f:e8:2e:97:ae:66:f5:4b:3c:d2:37:04:98:9e:fd:54:
42:4f:60:65:75:d5:1d:15:af:b4:91:5a:70:2e:95:bc:52:30:
b7:c6:1e:b6:f9:2a:a2:5d:2f:62:c7:8b:b2:ac:33:3f:0b:03:
ce:5d:42:c8:d6:09:e8:55:78:da:65:81:65:27:de:28:d3:28:
20:b8:9b:fb:57:55:1f:7d:de:53:f6:87:eb:ee:72:f3:51:6c:
da:87:38:a1:26:8e:20:af:59:90:93:5d:52:c2:91:de:29:ea:
a4:ed:ab:78:83:e1:01:aa:3f:fd:bc:3d:d3:24:b3:60:74:7b:
70:7d:f6:62:ff:82:49:84:b7:6d:e0:90:12:6a:c6:14:12:13:
e9:af:59:d4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXv/P9E+kqO3M0TcyfyyX7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAxMDYxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODM1YjZiMjRhMDlkYTUzODFiNGE4ZjU5NzhhODU2ODJhYzFhMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KMQpAdqCOcnbposAnNBgba8Kpk7
DSRByWK2DqjTAdErnabm+f+/2/kSNV7EdHqrio0wzhuPKM5JRuAjXT2tdKKquQj3
Rdm5BPT+Zrso4FT4WaIf4W+4ar+msAQFTBRDFiCOHMqtZy5rjYRDlNX7Q17qGrmn
t6zXVRxjL3zYufalrLQpxZDwsxmov5tzUGoDCfHEnrWib2d3C12QZAcfuHvRu9Hu
yeSrrfb1NnPCU6LfHl646OIscUDDdM6HiSb6M5nsc9OMVIry/mBqITV63FldK6yW
fkC+wjCubAXs0T0ZiV2AKi7RsW6lvNx7mOWwjmOC09YenoZh3Hk195Z+0QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGg1trJKCdpTgbSo9ZeKhWgqwaEkMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvYURXMnNrb0oybE9CdEtqMWw0cUZhQ3JCb1NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAMMgNZuJVsFzFLpW5wM+Qx809
gbxO+wpO6DrQKFoeDPkDOx0CnOdEjUHjdhnUzlEpi1PETvGHVINYCm2yU6Nr6QiB
/bvS3IaEfRo6J5/fMMfxU8eMgBVYxYeRQ/atMVZqOZGRsz4wAbd7uygUo0p/6C6X
rmb1SzzSNwSYnv1UQk9gZXXVHRWvtJFacC6VvFIwt8Yetvkqol0vYseLsqwzPwsD
zl1CyNYJ6FV42mWBZSfeKNMoILib+1dVH33eU/aH6+5y81Fs2oc4oSaOIK9ZkJNd
UsKR3inqpO2reIPhAao//bw90ySzYHR7cH32Yv+CSYS3beCQEmrGFBIT6a9Z1A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:57 2025 by rpki-client