Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/oljNq-WU01FH2nULj4TiKcLIr_s.roa
File: oljNq-WU01FH2nULj4TiKcLIr_s.roa (raw, json)
Hash identifier: WYYynSM9PqG0bine/rpxpRHgSjwrRnUfAdRz5+xPHuo=
Subject key identifier: A2:58:CD:AB:E5:94:D3:51:47:DA:75:0B:8F:84:E2:29:C2:C8:AF:FB
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195C0510423ED115FBBA625EE513CD36FB1
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/oljNq-WU01FH2nULj4TiKcLIr_s.roa
Signing time: Sun 23 Mar 2025 00:04:49 +0000
ROA not before: Sun 23 Mar 2025 00:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:c050:4856/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c0:51:04:23:ed:11:5f:bb:a6:25:ee:51:3c:d3:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 23 00:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a258cdabe594d35147da750b8f84e229c2c8affb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:79:a8:13:6b:fe:90:07:7a:34:d4:2a:6e:
54:7f:4f:b6:6e:8f:e1:33:25:30:61:a2:3d:eb:8e:
7e:6f:92:62:51:03:bf:75:0e:4c:89:e5:ee:ce:2a:
f9:8e:d3:b8:15:cf:a5:74:d1:a6:9c:03:2c:8a:08:
2d:12:bc:36:3e:5a:13:44:ce:0c:98:04:e2:74:45:
df:6e:bc:34:57:fe:21:f8:50:28:5b:a6:85:4b:9d:
3b:6c:9b:79:84:53:8e:80:83:02:47:29:40:c8:af:
55:ed:be:bb:30:24:26:6a:75:20:89:02:b5:43:b3:
c5:bf:9d:4a:c3:0c:27:af:5a:30:0e:e0:16:a8:91:
8f:eb:df:dc:ad:2a:cf:dd:93:12:26:27:95:61:cc:
82:55:11:33:07:fc:2b:19:02:dc:1f:7c:4f:8c:84:
92:34:f6:ae:b6:20:b8:52:6b:23:71:d7:40:66:a6:
28:fa:6d:ab:96:bc:d2:99:c6:b2:fd:eb:ab:e5:9c:
d6:b7:a8:8c:7e:88:80:13:ac:18:29:6b:0a:c8:d5:
4c:e0:90:30:22:ff:ad:0b:de:df:b3:b7:3f:e2:fa:
d1:37:ea:1b:61:04:e1:4f:1c:1d:9b:4f:36:8b:7f:
d6:bc:05:58:08:d3:fd:9f:b4:7d:97:3a:0a:9b:2e:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:CD:AB:E5:94:D3:51:47:DA:75:0B:8F:84:E2:29:C2:C8:AF:FB
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/oljNq-WU01FH2nULj4TiKcLIr_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:c050:4856/128
Signature Algorithm: sha256WithRSAEncryption
21:c4:6c:86:a7:ff:0a:53:16:58:cf:d8:74:91:61:78:cf:0d:
8d:43:a9:c0:08:29:08:a5:e1:1e:c2:90:66:90:b9:83:5c:1a:
0a:90:fa:25:f1:5c:60:76:67:6d:44:4c:7c:5e:40:38:a9:38:
5c:a3:e6:e7:e4:ea:f5:5a:db:b5:dd:9b:39:40:3b:57:99:8c:
bf:a7:5b:fb:24:ef:08:6b:3a:2d:ad:f3:c6:2d:20:24:21:df:
39:4e:0c:80:24:f4:97:b4:c7:83:22:9b:93:93:72:f8:fb:05:
6c:42:31:af:50:4e:66:8f:81:3d:55:4d:20:30:80:f5:1d:e1:
5d:b4:3d:11:db:64:88:72:c7:cd:86:a0:c1:fc:0f:21:8d:2a:
6a:06:57:a1:3c:89:2e:99:a3:7a:19:48:1f:55:fa:fd:40:5a:
da:25:36:96:95:e7:2c:60:04:28:27:3c:0a:d1:b1:78:94:c8:
d5:c3:0e:4e:a9:dc:3b:cb:68:20:76:b4:55:72:e1:90:c5:96:
f4:8a:fa:69:41:2a:7e:92:87:d3:16:aa:e7:7b:8b:d3:e7:71:
16:0a:23:92:c3:de:33:e4:f3:db:35:55:10:f6:9e:1e:bb:52:
8e:ff:b6:8a:c1:f3:0c:41:cf:eb:8b:0e:74:66:c2:81:65:bb:
0b:d4:6d:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:38 2025 by rpki-client