Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/jtUTjsXyqciQ4nTWtVwlyQjusEo.roa
File: jtUTjsXyqciQ4nTWtVwlyQjusEo.roa (raw, json)
Hash identifier: 4OoymdSJfznTa4T0iejBvTd78F7YIWq6rpR4Zkx0I3g=
Subject key identifier: 8E:D5:13:8E:C5:F2:A9:C8:90:E2:74:D6:B5:5C:25:C9:08:EE:B0:4A
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F6D8FA7FE1BB805F265DD4E66FA34704
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/jtUTjsXyqciQ4nTWtVwlyQjusEo.roa
Signing time: Wed 02 Apr 2025 14:12:49 +0000
ROA not before: Wed 02 Apr 2025 14:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:d8:fa:7f:e1:bb:80:5f:26:5d:d4:e6:6f:a3:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 14:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ed5138ec5f2a9c890e274d6b55c25c908eeb04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:77:d6:33:bf:c7:85:46:25:dd:2a:0a:6a:
3f:43:d2:a2:7a:a7:e9:e4:0a:28:a4:73:c1:bf:d7:
0a:2b:a3:38:8f:68:30:fe:21:bb:02:5e:b5:5c:92:
fc:de:a7:1c:cd:8d:37:16:08:16:74:c2:c3:fc:02:
a4:4e:d7:89:c8:eb:d0:22:c3:9c:9e:22:46:eb:af:
23:64:c9:61:54:aa:e0:f0:00:2c:2f:76:f5:86:a7:
96:70:53:42:ec:ea:c4:3a:c0:5c:a7:af:56:35:4b:
e4:e2:5e:ae:95:f7:80:ef:9a:42:c9:c3:fa:34:fc:
30:7f:75:dd:6b:5c:52:ac:cc:2a:d2:cc:89:5c:08:
0a:13:01:56:91:95:29:70:9c:b7:49:f3:27:e7:2a:
1c:8c:fb:ce:c3:4f:82:e8:4b:9f:e7:e2:3b:c9:2c:
68:37:1b:94:fb:6e:c5:e5:eb:53:b9:d6:2a:04:c0:
73:51:d5:06:8d:70:ac:94:11:2e:12:e3:58:6e:1d:
5f:87:b1:bb:47:28:1d:f6:4f:85:aa:f2:3a:ee:4a:
be:87:e5:02:b0:de:27:f0:2b:ef:e5:40:2b:a7:d5:
f9:ad:de:81:43:0a:e5:63:96:72:f0:d3:fc:aa:81:
eb:e8:ce:3f:bd:c5:49:1f:d3:54:b6:da:89:06:35:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:13:8E:C5:F2:A9:C8:90:E2:74:D6:B5:5C:25:C9:08:EE:B0:4A
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/jtUTjsXyqciQ4nTWtVwlyQjusEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
41:e0:4d:22:6f:89:08:6f:a5:8c:d1:b1:0c:45:a3:fd:48:24:
ff:23:38:3b:22:10:2f:7f:9d:fb:66:bf:ec:31:d3:bb:28:cb:
f1:71:19:9c:dc:ec:d7:72:45:8a:bf:81:57:8d:af:a7:75:11:
8c:86:3e:b2:0e:91:77:aa:94:76:a2:07:2e:6d:6a:9c:fb:57:
c3:7a:48:6d:50:9b:1b:dc:36:f0:ca:5f:0f:da:9c:e4:69:1a:
6e:28:a4:3c:e2:79:5f:6a:40:33:44:c6:0e:c4:0f:36:5b:dc:
18:77:ed:f9:a2:cd:4c:2f:db:d5:bc:c7:1d:4d:87:24:16:7b:
2d:ce:26:21:56:bf:cb:e9:1a:85:d2:19:94:9a:05:6a:4f:e5:
b8:a0:8a:cb:59:dd:80:23:3f:75:07:99:47:4c:b6:2c:94:f3:
3c:63:db:cc:74:2d:c9:98:4f:55:60:75:59:d3:87:d1:eb:34:
35:db:70:3a:00:d9:3e:71:4d:e6:e0:b7:7a:b3:89:a0:62:b7:
e0:52:db:47:ae:ce:b3:be:69:2e:31:83:42:93:02:2f:94:7d:
e1:80:ae:4c:7e:52:32:84:dc:58:00:91:30:80:f7:54:ea:14:
6f:e8:2e:69:de:c1:eb:75:7a:88:22:f1:e1:ee:da:4f:4c:bf:
2e:3f:66:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:42:35 2025 by rpki-client