Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/l5AVGd3xAVmaVlI3NG4l5_HvahI.roa
File: l5AVGd3xAVmaVlI3NG4l5_HvahI.roa (raw, json)
Hash identifier: /gO8syLahT++Tl+GyM+ZOJynurnzSy2jWlDyY5omlBs=
Subject key identifier: 97:90:15:19:DD:F1:01:59:9A:56:52:37:34:6E:25:E7:F1:EF:6A:12
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DE9A9E1B3D53F5D9FC48929EDB517C32
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/l5AVGd3xAVmaVlI3NG4l5_HvahI.roa
Signing time: Fri 28 Mar 2025 21:13:49 +0000
ROA not before: Fri 28 Mar 2025 21:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:de:9a:9e:1b:3d:53:f5:d9:fc:48:92:9e:db:51:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 28 21:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97901519ddf101599a565237346e25e7f1ef6a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:53:f3:62:c0:20:37:61:1a:8a:6b:2e:5b:
74:5d:2a:cf:0c:3a:cb:8e:a3:4e:75:67:f5:98:6b:
2f:e9:b7:b5:b7:2a:8b:ff:ba:79:ae:38:69:22:05:
2e:36:52:90:fb:b0:64:28:95:89:b0:a5:3e:1d:c4:
13:bd:56:41:bd:b0:38:83:59:49:78:1e:70:03:bd:
19:5d:4e:c8:02:8d:ec:9b:26:eb:cd:d1:64:5a:07:
a3:dc:4d:47:70:62:b3:36:42:17:ac:57:ea:40:e5:
0d:f9:1d:9a:4a:61:19:10:2d:22:87:6f:8d:88:2a:
52:b7:df:ae:8b:6a:a5:a1:66:3c:c5:31:28:df:d5:
6c:7d:b3:1d:bc:a4:14:c8:60:bf:e1:cd:a4:ef:f5:
99:89:0c:9e:7a:bb:4d:3b:a5:bd:75:04:c9:2c:c1:
1c:fd:ce:4a:73:26:95:5c:df:a6:73:c1:70:ed:b3:
f2:3e:bd:f5:e3:39:94:92:cf:f1:73:d0:ff:a8:07:
e7:df:5d:6b:79:b9:99:c9:4a:c5:76:95:45:5a:08:
df:31:a8:8c:d3:c3:19:0b:36:17:5d:b9:63:b6:31:
c1:a2:d9:2c:6f:cd:de:87:6f:a3:68:91:36:b1:1f:
be:ae:df:2a:e0:4d:31:83:3e:7e:47:eb:1f:2e:d6:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:15:19:DD:F1:01:59:9A:56:52:37:34:6E:25:E7:F1:EF:6A:12
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/l5AVGd3xAVmaVlI3NG4l5_HvahI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
96:57:06:de:f4:d1:5b:90:e5:53:a1:ad:09:7a:9d:9f:f4:b9:
f6:72:17:d8:dd:c7:f7:ae:6b:18:df:79:1c:ae:df:71:5e:7d:
90:7c:d8:e3:16:0a:29:0e:3c:30:92:45:18:58:b6:99:61:12:
66:51:21:4e:81:19:4d:51:c1:de:28:52:96:2c:0f:51:ba:93:
eb:c2:8c:d5:c4:00:82:43:43:c1:0d:68:d3:29:7a:66:5b:39:
bf:38:09:3e:db:8b:b4:3d:c2:1b:ab:e7:85:4b:32:b8:5e:56:
b3:67:33:ad:88:1e:17:6f:f4:b3:ce:e1:fa:d2:5d:f3:17:b0:
ee:ac:6b:05:26:1d:0b:c9:eb:90:bf:f5:55:be:46:46:5f:a6:
cb:a3:a7:42:f7:cb:2d:2f:b2:1a:f2:95:bb:46:b5:54:8c:f1:
6d:92:47:14:b1:6b:26:56:1d:b2:da:f0:d3:98:4d:2b:44:ff:
55:d5:cd:39:a2:2c:f3:35:f2:72:eb:da:33:82:73:2d:0d:77:
28:aa:80:f3:98:47:75:f5:ea:be:d2:cd:cb:4f:3e:67:69:90:
9e:0e:ee:ab:53:2c:59:72:4c:2e:95:9e:f1:41:da:62:0c:ea:
c6:6d:b2:b5:3b:4a:c1:21:3f:ac:26:1c:32:64:91:50:6e:4c:
fd:55:c3:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:11:15 2025 by rpki-client