Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sCyhexuexWwNymd9d0vJhWlPyAQ.roa
File: sCyhexuexWwNymd9d0vJhWlPyAQ.roa (raw, json)
Hash identifier: 43O8wSVrjI6x6KF58Tf89oHJ+msjR6NCnObwOWokx9I=
Subject key identifier: B0:2C:A1:7B:1B:9E:C5:6C:0D:CA:67:7D:77:4B:C9:85:69:4F:C8:04
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F0A1CA62D42FC510A23E18626AD99DAE
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sCyhexuexWwNymd9d0vJhWlPyAQ.roa
Signing time: Tue 01 Apr 2025 09:14:49 +0000
ROA not before: Tue 01 Apr 2025 09:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:a1:ca:62:d4:2f:c5:10:a2:3e:18:62:6a:d9:9d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 09:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b02ca17b1b9ec56c0dca677d774bc985694fc804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:56:20:33:16:d9:ef:f3:21:57:1f:2b:24:
b0:c2:53:80:bf:48:d2:43:ba:22:11:a8:0d:93:29:
1a:be:77:57:ef:03:d7:4a:c8:d5:14:87:15:e8:8e:
d1:e3:bc:17:41:17:21:02:4e:03:2a:ce:87:77:86:
3b:e0:ef:45:a8:13:bc:e5:ae:1b:64:12:7f:43:07:
68:c5:c3:e0:ff:d3:d2:75:2f:33:ce:9e:99:0d:53:
93:a3:82:20:34:a5:16:db:2a:c3:a2:c0:f0:ca:2a:
1c:eb:90:24:e1:37:6e:df:51:e6:98:ed:01:e0:d0:
1c:af:4d:b2:90:b0:6c:63:02:ba:8a:fe:e6:29:09:
ff:1f:8b:46:f8:56:d7:74:c7:fc:7f:2a:9a:82:7e:
cd:d9:11:e9:79:bb:27:fb:b5:1a:1a:cd:d8:01:8f:
38:7b:ec:cc:ff:fe:61:e4:46:78:1d:a1:9f:2b:0a:
d5:53:dc:f3:17:e8:81:48:e8:49:13:ae:c4:17:77:
5a:0c:b9:e3:2e:01:50:69:9a:88:e6:bd:6c:c7:8d:
49:0d:9b:67:61:ca:0b:69:4f:d8:e8:da:8f:2f:3a:
79:ca:03:8b:c7:f8:18:d5:69:a2:1c:be:b1:93:10:
cb:9a:d7:9e:ff:e6:af:e6:ac:60:bf:af:bc:03:74:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:A1:7B:1B:9E:C5:6C:0D:CA:67:7D:77:4B:C9:85:69:4F:C8:04
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sCyhexuexWwNymd9d0vJhWlPyAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
46:31:a8:35:a7:56:df:10:b2:e7:dd:a4:0b:0a:f0:08:42:5c:
f9:ca:cd:25:85:15:e2:1a:f1:61:31:9e:52:80:b8:04:ac:00:
77:86:14:93:0e:19:7b:11:f8:ca:83:e1:49:d7:b6:52:9e:33:
ab:f9:5b:0e:af:e6:c2:1c:45:ba:1b:82:d7:d8:43:09:24:44:
15:9b:e8:67:7d:65:52:da:82:3a:0c:3e:37:ae:2a:93:58:34:
16:0a:ee:77:66:de:6c:60:bb:1e:b6:6c:63:a0:74:5e:e9:0d:
64:9e:8e:71:38:77:ee:0d:bb:e5:cb:d4:0b:a9:52:77:07:c1:
04:e9:e6:9f:8a:43:dd:44:11:48:9f:d1:1c:48:59:a9:ad:d8:
0a:f3:5f:b2:1e:12:a4:e0:d6:32:2d:5b:5c:e0:f5:1b:d1:b5:
ab:c0:4a:c4:85:13:58:da:47:9a:6d:21:f4:a0:85:4c:c7:5e:
a9:08:0e:b3:05:2b:e5:ea:68:b8:9d:20:53:0b:7d:8d:e6:8c:
92:85:f9:14:a0:5e:6b:fb:fc:f5:71:47:d3:a1:4b:e1:44:2d:
f1:a1:19:b1:f2:8e:0c:6c:7c:48:f4:e3:60:94:38:d5:66:8b:
3b:86:40:a3:34:9e:1d:9a:90:70:1b:d5:06:ba:03:e6:ad:df:
ce:9a:08:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:23 2025 by rpki-client