Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/qDtOGpQ_RgxV2tdCwTOD4wDLNnY.roa
File: qDtOGpQ_RgxV2tdCwTOD4wDLNnY.roa (raw, json)
Hash identifier: Q/jGa+Pj5WOj9NOf9+giLQQx+w0+52Kd5kZ+890Ccs8=
Subject key identifier: A8:3B:4E:1A:94:3F:46:0C:55:DA:D7:42:C1:33:83:E3:00:CB:36:76
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E8035E5B0FC28B31C61DAE1620A9A401
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/qDtOGpQ_RgxV2tdCwTOD4wDLNnY.roa
Signing time: Sun 30 Mar 2025 17:04:49 +0000
ROA not before: Sun 30 Mar 2025 17:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:e802:b438/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e8:03:5e:5b:0f:c2:8b:31:c6:1d:ae:16:20:a9:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 17:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83b4e1a943f460c55dad742c13383e300cb3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:50:23:5e:99:69:ad:c7:0a:2c:d4:f7:a4:
27:f6:0a:ea:85:70:a7:0d:3a:61:97:56:32:89:42:
a7:13:ad:52:f7:0a:dd:c1:2a:47:32:1d:05:4b:36:
d7:fa:c2:03:27:75:9b:af:44:f4:e5:f5:02:4e:3b:
81:b2:9d:5f:70:90:97:c8:1e:54:44:d6:b1:94:cb:
e2:95:72:e8:22:1a:fc:d3:b8:5e:59:ce:98:92:af:
77:19:54:54:48:4e:28:5a:61:df:ec:bc:d3:85:1a:
2a:cc:46:4e:99:01:e3:37:67:c0:59:fb:fc:ce:6d:
eb:95:5e:74:23:1d:6f:07:4f:69:a9:1c:bf:13:2c:
7e:97:05:a2:7f:d7:e4:a1:8e:f8:32:13:18:6f:a8:
5f:e2:4d:4f:1c:56:4b:52:af:86:0c:65:07:3e:ac:
6c:49:e3:33:7f:e9:73:0b:06:da:fa:68:eb:fe:07:
84:f7:eb:20:2d:e8:10:34:c8:0e:79:9a:60:4b:3f:
92:75:da:50:e2:ed:14:7e:45:66:51:7d:dc:13:93:
a2:b3:7c:df:f3:9c:e3:3b:04:27:f2:7d:9f:bc:31:
60:23:bb:51:b5:1d:ba:54:ee:11:e6:88:e8:69:44:
05:3c:a5:82:97:1b:5d:ef:e0:42:04:dc:15:53:d8:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:4E:1A:94:3F:46:0C:55:DA:D7:42:C1:33:83:E3:00:CB:36:76
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/qDtOGpQ_RgxV2tdCwTOD4wDLNnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:e802:b438/128
Signature Algorithm: sha256WithRSAEncryption
3d:48:40:b9:9d:fb:f5:89:04:e8:0d:d9:92:69:67:4f:08:73:
d9:ed:7a:8f:3e:c0:2c:80:0a:f7:26:0f:8c:d8:c2:2a:15:58:
41:0e:8e:48:af:dd:c0:60:89:dd:c6:3f:b2:86:f9:e6:2b:e0:
e1:2d:03:ed:7e:8e:c3:58:2a:f4:bc:02:3e:fb:77:95:90:94:
f7:b3:18:61:c2:80:1a:03:51:b5:c6:31:67:fb:41:ea:be:cb:
f4:36:3d:d1:25:eb:57:82:be:79:d6:7c:29:a5:dc:a7:0f:f2:
d1:b3:29:65:49:b0:c9:7c:fc:30:f4:8a:d0:bd:76:22:c3:82:
30:c8:f7:ff:47:81:5f:f5:af:d1:e3:e9:5a:68:fd:da:d1:1a:
b8:a2:26:f4:e3:ad:9a:fe:b3:c0:98:52:52:07:4b:33:ab:c3:
9f:b4:25:b6:34:ed:8a:a7:55:a3:4e:48:1f:ad:b8:42:8c:39:
9b:cd:2e:6b:65:40:7a:18:2b:eb:29:e1:e5:9f:c7:a0:91:4b:
24:45:16:b5:90:52:7d:73:c0:d5:84:96:b2:b1:72:c6:7b:24:
d0:88:c3:f9:b0:d2:9c:48:aa:b8:d2:54:ee:c9:b3:7b:83:ec:
8f:04:69:26:da:4b:f6:f7:c7:ca:a0:d6:6f:f4:ae:17:d4:11:
7c:d8:7f:ff
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZXoA15bD8KLMcYdrhYgqaQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzMwMTcwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODNiNGUxYTk0M2Y0NjBjNTVkYWQ3NDJjMTMzODNlMzAwY2IzNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PhQI16Zaa3HCizU96Qn9grqhXCn
DTphl1YyiUKnE61S9wrdwSpHMh0FSzbX+sIDJ3Wbr0T05fUCTjuBsp1fcJCXyB5U
RNaxlMvilXLoIhr807heWc6Ykq93GVRUSE4oWmHf7LzThRoqzEZOmQHjN2fAWfv8
zm3rlV50Ix1vB09pqRy/Eyx+lwWif9fkoY74MhMYb6hf4k1PHFZLUq+GDGUHPqxs
SeMzf+lzCwba+mjr/geE9+sgLegQNMgOeZpgSz+SddpQ4u0UfkVmUX3cE5Ois3zf
85zjOwQn8n2fvDFgI7tRtR26VO4R5ojoaUQFPKWClxtd7+BCBNwVU9go6QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFKg7ThqUP0YMVdrXQsEzg+MAyzZ2MB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvcUR0T0dwUV9SZ3hWMnRkQ3dUT0Q0d0RMTm5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGV3GzZ3wMRACABBnwAZP//AAABlegCtDgwDQYJKoZIhvcNAQELBQADggEB
AD1IQLmd+/WJBOgN2ZJpZ08Ic9nteo8+wCyACvcmD4zYwioVWEEOjkiv3cBgid3G
P7KG+eYr4OEtA+1+jsNYKvS8Aj77d5WQlPezGGHCgBoDUbXGMWf7Qeq+y/Q2PdEl
61eCvnnWfCml3KcP8tGzKWVJsMl8/DD0itC9diLDgjDI9/9HgV/1r9Hj6Vpo/drR
GriiJvTjrZr+s8CYUlIHSzOrw5+0JbY07YqnVaNOSB+tuEKMOZvNLmtlQHoYK+sp
4eWfx6CRSyRFFrWQUn1zwNWElrKxcsZ7JNCIw/mw0pxIqrjSVO7Js3uD7I8EaSba
S/b3x8qg1m/0rhfUEXzYf/8=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:40 2025 by rpki-client