Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/mV7xrx9iZxy2m6-Oe1vPRcqasJM.roa
File: mV7xrx9iZxy2m6-Oe1vPRcqasJM.roa (raw, json)
Hash identifier: Rv35lhBhaGJRdFsBfgQuhNYxbgxOgEBs9Ls5lr/0e48=
Subject key identifier: 99:5E:F1:AF:1F:62:67:1C:B6:9B:AF:8E:7B:5B:CF:45:CA:9A:B0:93
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FAB87E46F89657CFC085DBF1BFB3B3F2
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/mV7xrx9iZxy2m6-Oe1vPRcqasJM.roa
Signing time: Thu 03 Apr 2025 08:15:49 +0000
ROA not before: Thu 03 Apr 2025 08:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:b8:7e:46:f8:96:57:cf:c0:85:db:f1:bf:b3:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 3 08:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=995ef1af1f62671cb69baf8e7b5bcf45ca9ab093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:90:c5:3d:b0:4b:f8:d5:2d:5a:d2:d5:07:
b1:7c:9e:b1:ac:d1:ba:65:94:81:3e:ce:b6:c5:60:
33:eb:4e:bb:3a:4e:0a:d3:ff:7d:f4:76:63:ec:85:
9b:9a:d9:64:c5:c6:f5:f1:4a:93:49:49:29:63:e8:
19:6f:5a:d2:f8:9f:5e:dc:32:6a:24:ec:35:65:2e:
3b:8d:6d:de:5e:ff:ec:5b:2d:c8:d1:c7:62:b3:9d:
c4:85:36:f6:ce:9b:58:e5:29:6e:72:a2:39:5d:27:
ef:1e:bb:d4:68:23:62:41:c8:12:7d:af:c1:e9:7a:
cc:e3:f0:e3:ec:98:58:ee:53:45:db:04:48:77:ab:
2d:7b:4b:de:7b:fb:37:bf:3c:99:e7:e2:ff:9d:68:
42:f3:cc:39:87:49:f8:db:48:c9:ab:70:0a:65:e3:
50:62:c5:3e:a2:29:74:0b:3d:e0:1e:23:d9:39:8f:
9d:90:1d:36:dc:3a:70:8e:5a:d6:96:4b:5d:cb:91:
0a:62:37:8e:81:80:45:c1:3c:0e:42:0c:d5:c4:ff:
61:94:fb:c9:87:df:a8:86:0d:61:f6:48:58:43:74:
64:51:b0:81:82:cf:a3:ba:45:8f:1a:db:77:d9:de:
94:d9:40:21:88:ca:ee:a6:5d:c0:70:a6:2e:07:29:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:F1:AF:1F:62:67:1C:B6:9B:AF:8E:7B:5B:CF:45:CA:9A:B0:93
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/mV7xrx9iZxy2m6-Oe1vPRcqasJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
6a:59:5f:67:0b:01:a7:fc:3c:f0:7b:30:53:c6:b5:0e:04:7b:
e5:92:c6:c1:01:17:ac:dd:2d:f4:99:0c:2c:05:4f:38:65:c4:
31:c7:fb:56:f1:11:a4:f9:02:d1:74:31:ca:2f:17:e2:ef:d6:
b5:9a:9f:fa:a8:db:9f:31:bc:75:e0:a3:e7:de:4a:c9:44:2e:
0a:18:6d:e7:b8:e0:df:0c:51:df:fd:30:67:1b:bc:f6:d1:e0:
0c:e6:46:75:2a:4b:3c:fb:5b:70:0a:fa:54:4e:8c:f9:dc:a3:
3c:42:1a:a6:04:42:19:5c:7b:68:ef:fc:3e:ea:c1:f3:82:c3:
79:49:0e:74:4f:3b:54:05:2d:2f:f7:ef:65:89:6b:ca:00:98:
99:10:f5:99:0f:7b:b5:c3:11:6d:03:e5:dc:00:60:7e:5a:02:
57:71:3b:42:ef:4c:ca:37:4b:1f:26:13:c9:b5:69:0b:38:28:
ff:a1:18:5d:a7:39:0f:27:e6:c0:e1:cb:74:bb:88:09:f5:99:
85:ff:0c:33:d0:a1:73:87:a7:75:75:90:f9:a6:f4:b4:eb:03:
db:22:6e:4c:58:6e:7d:a8:a5:15:41:f9:5e:21:a4:a5:36:f4:
95:f3:95:37:21:98:9a:c8:e6:2a:14:ed:46:29:07:87:da:2e:
46:f1:34:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:25 2025 by rpki-client