Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/fBOsaQO42-QiebTHFbXEEXmnIW4.roa
File: fBOsaQO42-QiebTHFbXEEXmnIW4.roa (raw, json)
Hash identifier: iz/9K9MbjxBc0AD0hYZOqfDyl27PE9MSlnxy6OIs99M=
Subject key identifier: 7C:13:AC:69:03:B8:DB:E4:22:79:B4:C7:15:B5:C4:11:79:A7:21:6E
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E2B026938AE914F1385F0DE41C2875C8
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/fBOsaQO42-QiebTHFbXEEXmnIW4.roa
Signing time: Sat 29 Mar 2025 16:15:49 +0000
ROA not before: Sat 29 Mar 2025 16:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e2:b0:26:93:8a:e9:14:f1:38:5f:0d:e4:1c:28:75:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 16:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c13ac6903b8dbe42279b4c715b5c41179a7216e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:f6:cd:48:45:ff:18:9b:0f:1a:60:e3:3c:
d4:95:de:eb:12:d0:10:c5:03:ca:21:aa:f9:01:1a:
da:7e:d7:19:09:d5:79:2c:9b:d9:86:1b:03:f5:53:
bb:7a:b0:ae:3b:c4:43:49:d1:49:73:67:62:77:a3:
18:39:b3:9e:df:8c:89:65:a8:0f:b1:9b:40:1d:11:
48:ee:65:00:17:8e:3d:2c:c7:ff:0c:17:79:13:54:
e2:2f:da:4b:a0:fa:bd:ad:39:71:48:35:e0:fe:a0:
03:6c:19:61:47:9f:97:23:ef:aa:4b:1d:12:e8:89:
91:ad:8f:66:bd:0e:23:ba:be:96:af:88:1b:b3:d5:
04:41:fb:2d:b2:16:8a:11:c3:15:8b:09:77:f2:d0:
0c:5b:06:ae:21:09:8e:d9:ef:f5:a3:fa:38:a2:dc:
51:5a:49:f0:ee:bd:d2:02:1e:53:cf:2a:a4:09:84:
8b:65:e0:e8:7b:93:94:ec:2b:13:00:02:b8:ba:6b:
ec:84:43:a2:40:4b:42:7e:1f:ea:28:48:d6:ed:bf:
4c:5e:d5:5f:b7:26:ba:43:1c:98:0d:3f:0f:35:7d:
45:4f:16:72:bb:7d:5b:7b:64:06:7e:83:1e:ff:1d:
6e:94:99:73:7b:32:cd:0e:dd:af:23:4c:63:33:b7:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:AC:69:03:B8:DB:E4:22:79:B4:C7:15:B5:C4:11:79:A7:21:6E
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/fBOsaQO42-QiebTHFbXEEXmnIW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
0c:e5:54:aa:ef:4f:42:86:d2:af:a3:b9:9d:bb:4e:ba:0d:c4:
9b:24:e4:85:c1:5a:c0:b1:e0:a3:74:dd:f3:9b:f9:61:86:50:
d1:1f:c8:06:3e:18:80:a5:10:6d:7e:dc:fc:7b:13:0f:aa:48:
99:34:ff:83:d0:7a:a1:96:5e:7c:2a:7c:45:33:69:84:45:61:
f9:21:db:b6:d6:4b:00:fd:65:48:e7:29:29:c1:f5:93:fc:5f:
fe:40:f8:90:57:b8:44:33:0d:6b:b1:46:7d:e3:5a:be:ae:b1:
9b:e6:a1:98:da:92:16:dc:72:ea:89:cf:d0:4b:ad:59:37:09:
41:ff:fa:e0:0f:a8:a3:47:e0:0e:98:1a:ae:6a:fe:21:ce:ff:
01:67:3a:b3:c2:f3:ac:c3:5a:1b:11:50:3b:f5:d5:b7:94:a7:
30:8e:d6:8c:36:10:cd:9f:4f:70:cf:36:bf:99:5d:1b:77:3a:
3f:6c:e3:b4:6d:e3:81:a7:5e:f9:9d:51:07:81:03:07:60:6d:
7f:14:c4:95:48:02:f7:9e:4b:be:22:25:99:f3:a4:e3:46:14:
4a:d7:a8:97:87:a3:25:3c:79:cd:3a:d2:2a:e7:c8:17:fd:6a:
bb:cb:c2:a1:fd:86:d5:80:4d:c0:dc:1a:75:b7:e9:8d:56:1f:
06:90:9a:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:07 2025 by rpki-client