Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/baYC5mgFAUGxUOPh8bauC_o-M5s.roa
File: baYC5mgFAUGxUOPh8bauC_o-M5s.roa (raw, json)
Hash identifier: TZDqOOcuReetl+WC1Pr6NmmFQUcr4oiwovA/DssYsc4=
Subject key identifier: 6D:A6:02:E6:68:05:01:41:B1:50:E3:E1:F1:B6:AE:0B:FA:3E:33:9B
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E12FA181A7BD54203A526828D167D75D
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/baYC5mgFAUGxUOPh8bauC_o-M5s.roa
Signing time: Sat 29 Mar 2025 09:15:49 +0000
ROA not before: Sat 29 Mar 2025 09:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:2f:a1:81:a7:bd:54:20:3a:52:68:28:d1:67:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 09:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6da602e668050141b150e3e1f1b6ae0bfa3e339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:16:ee:57:ee:f8:94:51:2d:67:a8:10:4f:
76:fb:84:b6:15:b3:01:a4:ff:a9:f9:6b:68:7c:56:
29:10:98:dd:35:a4:58:d6:cb:44:9b:ef:94:0b:05:
83:2b:9d:84:a3:df:62:57:d0:fa:e9:07:00:1a:7f:
b2:ca:93:6d:ff:05:bb:e0:ef:2b:c7:49:fd:d4:5f:
51:00:92:c5:ad:4e:37:dc:35:0b:38:47:56:64:e3:
f2:3b:fd:99:97:a8:c6:5a:5d:33:14:3b:f4:4d:e4:
8c:9c:ff:63:ac:88:1b:b9:3b:dc:87:e8:42:c7:63:
36:7c:8a:8c:33:ac:c0:a0:48:e0:4a:21:74:a3:79:
c5:9e:02:f0:f2:2a:90:80:c4:39:20:95:04:8c:69:
e9:4c:4e:49:0e:7e:fa:d3:e7:9c:ec:c8:58:c7:c3:
ac:da:b8:96:84:d7:8a:a3:89:13:ea:fb:02:8a:8c:
d3:7f:3f:d0:5f:1b:c6:a0:3b:c2:f3:35:2d:14:46:
03:de:df:b2:fe:76:46:aa:af:d8:ad:1b:be:e6:f8:
20:84:41:38:86:22:be:96:20:b3:34:5a:f3:f5:d1:
b1:4a:a4:df:a1:83:12:3b:39:89:a7:91:8c:fd:af:
14:0d:cd:09:24:4b:01:1a:52:fc:6f:36:df:f1:3b:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:02:E6:68:05:01:41:B1:50:E3:E1:F1:B6:AE:0B:FA:3E:33:9B
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/baYC5mgFAUGxUOPh8bauC_o-M5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
74:2c:59:b1:8c:c1:e4:ac:b1:76:93:0f:5d:83:8f:6a:31:92:
be:cd:d0:e4:07:79:73:18:e1:46:31:19:e4:c4:90:e7:30:73:
d7:04:a0:bc:26:8d:b6:d0:08:dc:8f:1d:38:92:c3:83:90:24:
98:06:9e:18:8e:c9:21:25:20:e8:4f:a7:7c:fc:d4:24:d6:6f:
0a:41:45:24:5a:b3:03:9d:a9:db:2f:a9:7a:3a:54:01:50:f3:
d5:90:1f:f3:bd:1c:15:e6:05:56:f7:a1:76:29:1f:31:15:ca:
bc:59:e6:c7:64:fc:8c:d2:72:aa:4c:91:9a:27:70:d1:9d:6c:
5b:95:20:e7:58:b2:15:04:2d:16:24:b4:59:2b:8c:46:25:b4:
50:6e:c5:1a:47:83:fc:f7:b1:02:7e:5b:d8:af:0e:78:a2:d8:
26:28:3c:b2:bb:09:f1:96:92:8c:d3:1f:a3:e8:f5:ae:03:87:
97:f4:76:13:2f:1a:cf:51:9d:dc:2b:00:4f:ad:c2:ed:46:a2:
b6:29:24:b2:e1:16:87:24:40:0b:4d:43:eb:91:53:59:5c:0c:
ff:69:98:e3:96:e0:fc:03:96:c1:c4:58:1c:94:92:72:d5:ba:
f2:01:fc:ce:c7:7a:18:70:82:0a:4a:1d:6e:e7:85:03:bd:0f:
37:0f:03:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:10 2025 by rpki-client