Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sW6XL5_DPKVspkWRWVgQIQxqV4g.roa
File: sW6XL5_DPKVspkWRWVgQIQxqV4g.roa (raw, json)
Hash identifier: rt20CvJfdzyO1MGy9NVTPtLnKmw9ww45SjCy7LHmw9M=
Subject key identifier: B1:6E:97:2F:9F:C3:3C:A5:6C:A6:45:91:59:58:10:21:0C:6A:57:88
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E730CD5E092BE41DBD7B9366C8965B4D
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sW6XL5_DPKVspkWRWVgQIQxqV4g.roa
Signing time: Sun 30 Mar 2025 13:14:49 +0000
ROA not before: Sun 30 Mar 2025 13:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e7:30:cd:5e:09:2b:e4:1d:bd:7b:93:66:c8:96:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 13:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b16e972f9fc33ca56ca64591595810210c6a5788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:16:bc:9c:3e:d5:75:15:0c:5d:3d:09:bb:
54:35:7b:60:b1:70:94:05:be:b5:c2:93:b7:35:a3:
00:73:ab:f6:e0:a9:b2:da:07:65:a6:ab:5e:a0:52:
2c:0c:b5:f6:9a:ad:d5:17:f4:7c:b1:86:a9:ab:bd:
5a:fa:a1:55:a8:3d:64:b9:60:aa:81:63:03:6a:ce:
fb:84:b2:8c:82:86:1a:db:8b:1d:9d:0d:ee:6b:f0:
4a:9b:30:d2:eb:27:8c:3c:b4:9c:93:cc:ee:7b:b3:
a2:24:59:a3:e7:4c:09:29:54:f5:30:ad:d3:b0:b0:
48:ee:86:30:a5:08:a2:c4:ea:08:e4:66:ba:7c:6d:
74:5e:cc:bd:5a:33:42:c0:82:42:a9:2a:a3:fb:af:
4c:ae:ae:6d:99:ac:a6:ec:51:75:c1:3f:e5:82:6b:
9f:a6:ed:1b:ad:c9:9d:52:9e:44:84:50:b5:94:4c:
dd:51:73:4f:85:2d:b4:b0:5b:4b:33:a2:05:00:34:
74:89:c8:07:e8:ef:7b:4e:ce:c5:47:60:b4:18:7a:
35:17:f3:a7:d4:3a:f9:ed:a9:32:7e:c9:28:c4:89:
6e:59:da:09:0f:01:1c:66:e2:a9:13:bb:e2:09:a0:
85:19:48:ba:f2:77:16:a4:a8:c2:e5:6b:91:8e:90:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:97:2F:9F:C3:3C:A5:6C:A6:45:91:59:58:10:21:0C:6A:57:88
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sW6XL5_DPKVspkWRWVgQIQxqV4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
94:2a:4f:60:9d:cd:11:6e:99:65:f7:13:89:84:4f:41:5d:4e:
17:cc:b8:2d:5d:a4:74:5c:a1:06:91:ed:92:8c:5e:00:e7:48:
cf:41:68:83:62:8e:a4:99:65:a4:99:ad:3e:af:fb:f6:63:b4:
2b:a5:bd:08:12:c7:4a:84:6a:97:92:c3:a1:31:4d:ea:fb:a7:
7f:7d:0f:fa:09:9d:42:35:a5:18:71:8d:50:0c:5f:9d:7d:fd:
eb:68:a3:9a:23:04:1d:fb:3b:fd:e5:1c:d9:41:37:ca:57:23:
87:c8:da:c7:81:7d:76:8d:4a:84:4c:b0:d0:9c:29:6e:49:78:
bf:1e:7f:c8:cf:b9:b8:9a:e1:03:ba:fa:d1:ea:10:72:8c:ca:
cc:58:1f:4f:c0:db:5e:e4:3e:b4:ae:ec:87:d3:46:98:9f:3c:
cc:8d:88:f2:e1:f5:07:a1:bd:3f:97:5e:f6:09:96:64:1f:43:
72:ba:d3:1b:a1:5c:c5:00:0c:82:b3:9e:40:d2:9f:2f:29:4a:
c2:9f:d7:2c:b1:9e:28:5c:b3:9c:ac:0d:1e:e5:27:13:a7:63:
67:54:58:19:ae:c9:ce:05:8b:cd:fd:d8:6e:cf:46:30:38:a7:
a7:45:54:7f:bb:0e:0e:eb:d7:7b:22:a3:9d:e6:7f:96:77:6d:
a6:28:16:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:00 2025 by rpki-client