Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/d2OgE40v9yHaa2Dh4SimxsIFQ4E.roa
File: d2OgE40v9yHaa2Dh4SimxsIFQ4E.roa (raw, json)
Hash identifier: vl9hYNGkqOIvTdXYc93cEbBjnRFN6CK/MzR+Hom3sgU=
Subject key identifier: 77:63:A0:13:8D:2F:F7:21:DA:6B:60:E1:E1:28:A6:C6:C2:05:43:81
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F7ED774C07D2BB5B56C0321CA5394FC7
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/d2OgE40v9yHaa2Dh4SimxsIFQ4E.roa
Signing time: Wed 02 Apr 2025 19:14:49 +0000
ROA not before: Wed 02 Apr 2025 19:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:ed:77:4c:07:d2:bb:5b:56:c0:32:1c:a5:39:4f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 19:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7763a0138d2ff721da6b60e1e128a6c6c2054381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:c7:3e:7f:b1:64:27:1c:d9:f5:46:8a:db:
73:f3:47:40:16:03:d8:63:f9:28:32:3b:bd:f6:a0:
d0:ee:6d:96:95:9c:ae:19:2f:eb:39:23:50:90:93:
02:ef:3c:77:ce:ff:9c:03:6a:a8:a3:d3:05:ce:82:
57:30:2f:2f:ce:65:cd:93:b1:49:3a:4d:a4:81:db:
05:f0:ab:05:10:12:ae:e7:53:53:dc:7b:9b:79:76:
3c:b0:5f:ad:bc:d0:9e:32:1d:e4:b1:2b:aa:e0:78:
3d:87:ed:0a:14:f2:25:df:3a:32:58:d3:17:25:96:
e2:56:fa:71:51:94:f0:94:30:53:f4:f9:b0:fb:09:
4f:09:02:89:fe:a2:4b:54:73:a9:dd:49:d6:66:bb:
58:14:22:a9:46:90:97:a6:8d:f7:ab:03:1b:87:8c:
d1:59:46:8c:14:c6:95:6f:18:52:dd:23:99:ea:d8:
2d:b1:9e:26:62:9c:93:40:46:e1:e3:dc:18:44:90:
41:bb:f8:21:51:b4:ad:53:ca:fe:fd:6d:93:5f:3b:
ef:0c:6b:ba:d8:f8:df:f8:15:8d:f4:cd:8c:7e:b2:
e4:96:13:66:26:04:82:c0:48:5d:5a:fb:1b:e5:11:
50:2a:2a:d1:28:15:74:28:b0:a3:1b:89:31:7e:e0:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:A0:13:8D:2F:F7:21:DA:6B:60:E1:E1:28:A6:C6:C2:05:43:81
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/d2OgE40v9yHaa2Dh4SimxsIFQ4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
14:cd:26:d6:76:5b:d2:62:16:42:9c:b4:ba:be:2f:10:a8:f7:
f0:d8:38:ab:a0:6a:14:ef:99:ab:eb:a8:56:e8:16:ad:9f:3c:
bc:66:89:d5:20:87:78:60:f8:d6:17:8a:39:cf:56:06:ea:fb:
a3:c1:d2:29:8b:c2:05:aa:25:c7:0e:98:41:52:86:2a:e2:08:
ed:04:8e:f5:d5:0d:7a:57:3c:51:fe:79:3e:2b:87:08:d2:24:
48:c2:f8:02:40:27:09:b7:ba:79:f8:5e:76:7f:e0:cb:75:05:
c4:2a:a4:b9:95:66:50:66:79:2b:c0:04:62:63:29:d2:79:c0:
00:91:21:8a:e8:4f:d5:f4:0f:03:02:91:e0:9c:2a:8e:54:f7:
0d:22:64:84:46:db:36:22:14:16:65:31:70:3f:4a:10:ef:75:
ef:29:7e:fe:73:f5:bd:17:7d:b1:ce:26:8b:2b:7c:06:74:fc:
2a:b0:81:d2:af:28:e5:f2:af:e3:03:9f:f6:2b:9c:87:83:ae:
ca:c4:72:92:3d:08:53:ac:90:92:f0:f6:02:90:2b:f0:ef:e9:
1c:e4:63:7e:62:6e:d4:7b:2c:1b:4f:68:6c:ad:1e:88:1a:f2:
0e:78:0f:9f:ad:55:23:49:88:44:c3:8d:bf:61:79:71:88:fa:
1e:42:3a:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:28:19 2025 by rpki-client