Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/in2giyh4PFInOb1XosbS-WbGNlM.roa
File: in2giyh4PFInOb1XosbS-WbGNlM.roa (raw, json)
Hash identifier: 5e7gDJBQnwB4XMNFlZxC/jSHrN+s+/lzeuOJ2ZQ7ZQw=
Subject key identifier: 8A:7D:A0:8B:28:78:3C:52:27:39:BD:57:A2:C6:D2:F9:66:C6:36:53
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DCE32BB5843D1CA716339C459E61AF98
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/in2giyh4PFInOb1XosbS-WbGNlM.roa
Signing time: Fri 28 Mar 2025 13:13:50 +0000
ROA not before: Fri 28 Mar 2025 13:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:e3:2b:b5:84:3d:1c:a7:16:33:9c:45:9e:61:af:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 28 13:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a7da08b28783c522739bd57a2c6d2f966c63653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:c0:6c:e5:37:d0:8a:1a:86:b0:dd:c8:ed:
01:79:ea:16:4f:1f:ec:d3:ba:96:46:8c:06:71:e6:
e8:1c:a4:12:3a:19:42:81:73:cd:a2:e8:28:6c:d7:
ca:1a:ef:08:2a:76:57:47:05:8a:68:e8:5f:44:52:
df:b7:af:9d:e0:60:83:bd:c5:c9:c8:12:d4:01:0e:
6f:59:f5:6d:83:91:93:9c:58:1d:00:7c:9a:54:80:
69:e3:7d:b7:76:7d:ec:55:17:d5:4f:d1:e3:77:10:
2e:85:7b:36:e4:e6:61:4f:c5:af:c2:a3:c1:69:38:
55:9a:27:f6:01:da:d7:db:c5:6a:12:e2:9e:b6:a5:
ad:bb:df:15:e7:de:24:98:9e:8c:56:79:e6:fa:c2:
15:f6:28:a6:04:b7:69:fd:33:dc:b8:62:bd:ce:37:
40:16:12:dd:e5:40:6c:e7:c4:21:57:6e:7e:ce:62:
e3:fd:09:d5:b1:a6:b5:f9:fa:2a:fe:65:1e:14:20:
c0:78:2f:1b:5d:5d:6c:dd:59:f8:22:af:48:86:fb:
12:aa:84:bc:dd:2a:bb:0a:30:55:7e:78:87:2d:c5:
44:9b:64:8e:bb:5c:83:02:fd:a8:07:c3:d8:83:49:
35:79:c7:a8:74:c7:86:88:a5:82:b8:0f:d6:ff:95:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:A0:8B:28:78:3C:52:27:39:BD:57:A2:C6:D2:F9:66:C6:36:53
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/in2giyh4PFInOb1XosbS-WbGNlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
5e:0a:56:2a:88:2c:f7:19:3a:af:b9:0d:88:86:3b:7f:f3:3a:
ea:50:86:2a:91:f1:75:60:54:9f:74:ce:ac:03:ef:96:af:79:
fa:f0:71:7a:28:d7:9b:f3:fe:6c:4f:24:cc:ee:92:78:11:d0:
ea:d8:18:c5:bc:9e:4f:a8:2d:fa:dc:23:a7:0d:dd:d3:f9:16:
b7:cd:40:ff:f1:65:70:9c:f6:5a:ce:42:a9:48:9f:40:0d:91:
a4:ec:da:11:e0:f3:3c:a6:b5:d4:a0:47:f4:ba:1e:b4:ad:7f:
fc:3a:4f:34:5f:eb:76:2c:07:b2:bf:5c:f3:d3:f8:d9:b4:65:
4d:60:5e:39:66:0f:15:09:ba:ff:f2:ca:af:5a:a7:49:9f:50:
d8:9a:b6:b5:30:36:93:ba:36:3e:c0:16:a6:e9:81:36:90:39:
ab:14:3e:0c:bb:37:37:0b:bc:54:89:21:83:f8:98:1c:73:e0:
5f:25:29:77:8a:a0:e8:09:aa:2d:dc:68:bf:f6:78:38:f6:db:
61:91:33:9e:f7:a3:22:78:38:81:c1:8e:1e:2e:bf:c6:f5:d4:
46:e9:1d:c7:72:e0:bb:8f:39:3f:30:4f:9a:52:d1:d9:f6:82:
33:88:91:82:6a:1b:10:1c:84:80:84:5a:70:ea:49:f1:ee:09:
79:ed:c3:b0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXc4yu1hD0cpxYznEWeYa+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzI4MTMxMzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTdkYTA4YjI4NzgzYzUyMjczOWJkNTdhMmM2ZDJmOTY2YzYzNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v3AbOU30IoahrDdyO0BeeoWTx/s
07qWRowGceboHKQSOhlCgXPNougobNfKGu8IKnZXRwWKaOhfRFLft6+d4GCDvcXJ
yBLUAQ5vWfVtg5GTnFgdAHyaVIBp4323dn3sVRfVT9HjdxAuhXs25OZhT8WvwqPB
aThVmif2AdrX28VqEuKetqWtu98V594kmJ6MVnnm+sIV9iimBLdp/TPcuGK9zjdA
FhLd5UBs58QhV25+zmLj/QnVsaa1+foq/mUeFCDAeC8bXV1s3Vn4Iq9IhvsSqoS8
3Sq7CjBVfniHLcVEm2SOu1yDAv2oB8PYg0k1eceodMeGiKWCuA/W/5X/HwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFIp9oIsoeDxSJzm9V6LG0vlmxjZTMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvaW4yZ2l5aDRQRkluT2IxWG9zYlMtV2JHTmxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAXgpWKogs9xk6r7kNiIY7f/M6
6lCGKpHxdWBUn3TOrAPvlq95+vBxeijXm/P+bE8kzO6SeBHQ6tgYxbyeT6gt+twj
pw3d0/kWt81A//FlcJz2Ws5CqUifQA2RpOzaEeDzPKa11KBH9LoetK1//DpPNF/r
diwHsr9c89P42bRlTWBeOWYPFQm6//LKr1qnSZ9Q2Jq2tTA2k7o2PsAWpumBNpA5
qxQ+DLs3Nwu8VIkhg/iYHHPgXyUpd4qg6AmqLdxov/Z4OPbbYZEznvejIng4gcGO
Hi6/xvXURukdx3Lgu485PzBPmlLR2faCM4iRgmobEByEgIRacOpJ8e4Jee3DsA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:02 2025 by rpki-client