Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/c42DvCFZliyQ5oMgvt9eZmWhe9A.roa
File: c42DvCFZliyQ5oMgvt9eZmWhe9A.roa (raw, json)
Hash identifier: /KUyY6proMxC/4e95U99vs6DmFdaiKZ409UIFzkGRu0=
Subject key identifier: 73:8D:83:BC:21:59:96:2C:90:E6:83:20:BE:DF:5E:66:65:A1:7B:D0
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FB8B10F5B98EFEB70A88097929230230
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/c42DvCFZliyQ5oMgvt9eZmWhe9A.roa
Signing time: Thu 03 Apr 2025 12:05:49 +0000
ROA not before: Thu 03 Apr 2025 12:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:fb8a:4891/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:8b:10:f5:b9:8e:fe:b7:0a:88:09:79:29:23:02:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 3 12:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=738d83bc2159962c90e68320bedf5e6665a17bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:cd:5b:fe:21:fd:de:9a:89:09:75:c8:81:
54:32:0c:fd:dd:16:2e:5e:81:fb:c9:13:ab:8d:c4:
9b:34:56:4f:82:1d:d8:1d:19:54:9b:bf:22:09:3a:
24:3a:68:c9:d3:e8:6d:34:38:d2:43:fa:7c:85:35:
4b:21:ee:09:ef:7b:51:1d:53:4a:a9:0c:c9:62:68:
38:da:b5:3e:1c:23:e6:30:15:3a:21:f7:11:64:cf:
01:7f:0a:16:15:25:43:7d:1f:2a:e3:5d:82:6b:2d:
34:05:09:31:14:99:de:47:26:ee:df:af:5a:f3:1e:
7e:f9:e4:85:ed:71:3c:c4:3b:73:5c:9d:71:13:b1:
70:4f:79:aa:6e:e9:12:41:9e:25:af:94:d0:25:be:
d4:f5:2a:10:a4:e4:61:33:3b:ce:ab:65:ad:b2:70:
37:ce:63:e3:fd:f9:13:48:11:fb:5b:6f:05:42:a5:
15:18:1a:08:14:c5:20:f4:96:ba:c3:62:d0:29:7b:
8a:35:fe:81:23:45:e7:97:d3:8c:26:d6:71:ce:86:
3e:0f:1c:45:65:e7:be:b4:1f:01:cd:bd:b7:65:a5:
c2:f7:39:cc:d6:a4:43:5e:e2:3d:cc:74:12:f4:a9:
7d:33:4d:2f:69:1e:fe:69:93:af:77:37:4f:30:b9:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:83:BC:21:59:96:2C:90:E6:83:20:BE:DF:5E:66:65:A1:7B:D0
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/c42DvCFZliyQ5oMgvt9eZmWhe9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:fb8a:4891/128
Signature Algorithm: sha256WithRSAEncryption
48:13:9b:45:16:f4:5b:57:78:e5:15:24:6d:68:69:2a:9d:f0:
3f:d5:14:83:18:40:b3:3a:99:63:5c:f6:49:4f:c0:32:2e:20:
92:b5:fd:78:d5:62:4b:13:18:01:fe:37:2c:7a:f6:ba:13:b2:
fb:90:fe:ee:5e:d3:2c:e7:22:6e:61:ed:2c:c8:c5:e1:9f:75:
2a:f1:04:db:0f:b4:c8:26:b1:0a:7b:ee:76:ba:70:47:f8:a1:
8d:02:0c:00:cf:ec:50:58:fc:4d:78:20:a0:bc:26:da:a0:26:
9d:de:ca:ec:e8:ca:e8:a8:df:2f:c4:d2:3c:f2:9d:01:19:60:
3a:36:36:bb:c9:25:a5:9d:de:c6:e2:24:d9:85:8f:75:cf:bc:
68:e3:48:d4:7e:7f:9e:b3:ab:27:39:c6:2f:82:70:bd:af:8f:
18:cc:5f:28:88:3d:c0:26:71:2c:f1:93:d4:57:dc:17:8a:8d:
b5:0e:8b:cf:8c:c2:af:55:23:d2:4f:65:95:09:90:df:2f:69:
31:81:51:ca:71:f0:50:67:91:5a:7b:ad:7c:e7:e0:d8:a6:72:
5a:ee:0c:f5:60:ec:04:1c:d6:73:0a:e9:3e:cc:f5:cf:be:af:
98:a2:f5:41:fe:0c:d3:f4:da:ed:76:9a:d3:e9:cd:ab:c5:96:
fa:16:80:57
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZX7ixD1uY7+twqICXkpIwIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAzMTIwNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzhkODNiYzIxNTk5NjJjOTBlNjgzMjBiZWRmNWU2NjY1YTE3YmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtHNW/4h/d6aiQl1yIFUMgz93RYu
XoH7yROrjcSbNFZPgh3YHRlUm78iCTokOmjJ0+htNDjSQ/p8hTVLIe4J73tRHVNK
qQzJYmg42rU+HCPmMBU6IfcRZM8BfwoWFSVDfR8q412Cay00BQkxFJneRybu369a
8x5++eSF7XE8xDtzXJ1xE7FwT3mqbukSQZ4lr5TQJb7U9SoQpORhMzvOq2WtsnA3
zmPj/fkTSBH7W28FQqUVGBoIFMUg9Ja6w2LQKXuKNf6BI0Xnl9OMJtZxzoY+DxxF
Zee+tB8Bzb23ZaXC9znM1qRDXuI9zHQS9Kl9M00vaR7+aZOvdzdPMLmnWQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFHONg7whWZYskOaDIL7fXmZloXvQMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvYzQyRHZDRlpsaXlRNW9NZ3Z0OWVabVdoZTlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGV3GzZ3wMRACABBnwAZP//AAABlfuKSJEwDQYJKoZIhvcNAQELBQADggEB
AEgTm0UW9FtXeOUVJG1oaSqd8D/VFIMYQLM6mWNc9klPwDIuIJK1/XjVYksTGAH+
Nyx69roTsvuQ/u5e0yznIm5h7SzIxeGfdSrxBNsPtMgmsQp77na6cEf4oY0CDADP
7FBY/E14IKC8JtqgJp3eyuzoyuio3y/E0jzynQEZYDo2NrvJJaWd3sbiJNmFj3XP
vGjjSNR+f56zqyc5xi+CcL2vjxjMXyiIPcAmcSzxk9RX3BeKjbUOi8+Mwq9VI9JP
ZZUJkN8vaTGBUcpx8FBnkVp7rXzn4NimclruDPVg7AQc1nMK6T7M9c++r5ii9UH+
DNP02u12mtPpzavFlvoWgFc=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:38 2025 by rpki-client