Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/t_3bIZPsbLGdyF78IIooAefb6Rw.roa
File: t_3bIZPsbLGdyF78IIooAefb6Rw.roa (raw, json)
Hash identifier: +qEL5eaxxjytb5us/QUoeGh7D97jaVTOJZ7AfRKRIpY=
Subject key identifier: B7:FD:DB:21:93:EC:6C:B1:9D:C8:5E:FC:20:8A:28:01:E7:DB:E9:1C
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FCA50C72DAB34C6E417FA52CDC0161DD
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/t_3bIZPsbLGdyF78IIooAefb6Rw.roa
Signing time: Thu 03 Apr 2025 17:13:49 +0000
ROA not before: Thu 03 Apr 2025 17:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:a5:0c:72:da:b3:4c:6e:41:7f:a5:2c:dc:01:61:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 3 17:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7fddb2193ec6cb19dc85efc208a2801e7dbe91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:6b:1b:87:2e:5c:45:38:0b:e7:39:23:60:
87:39:47:aa:71:2c:62:5f:28:b2:41:63:d3:e6:59:
fb:9a:dc:06:da:3f:bc:ab:44:56:41:75:16:a1:ce:
05:72:8e:db:d3:f9:c6:a3:0f:88:28:77:7f:16:13:
31:09:4c:f9:cf:74:d7:b8:30:3c:3e:f5:62:98:54:
74:92:eb:85:42:ed:6d:4b:18:a8:d7:cd:fe:88:83:
a6:04:92:44:75:49:9b:ae:67:ba:d6:ee:03:56:4e:
ec:c4:5f:1d:de:3b:26:ae:45:06:7e:f4:78:26:34:
96:79:44:cd:12:a3:bf:f1:87:99:3a:d8:75:f5:65:
39:b0:46:bb:52:74:a3:e1:bd:10:bb:f1:f0:73:db:
ae:81:56:95:da:81:bd:f6:84:d7:3a:e7:2e:41:95:
e0:d1:75:c8:0a:ef:32:45:d1:30:dc:57:68:b4:62:
89:89:76:12:2e:3e:09:43:96:0f:86:37:6c:68:9d:
26:aa:dc:1c:c0:6d:fb:55:46:48:e6:11:e6:f0:c2:
3b:bb:90:2f:56:35:e3:81:b7:c0:fa:22:d6:14:e4:
f3:81:5f:1c:0f:b2:86:0e:5e:91:c1:1e:49:1b:87:
32:85:bf:8f:f1:3d:53:42:62:f4:f7:01:e6:09:41:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FD:DB:21:93:EC:6C:B1:9D:C8:5E:FC:20:8A:28:01:E7:DB:E9:1C
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/t_3bIZPsbLGdyF78IIooAefb6Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
3e:1a:ba:ec:59:dc:a7:35:2c:54:e8:65:98:01:6e:82:f3:ee:
af:bb:19:8f:77:12:b1:f7:9c:6a:d9:2b:3d:ae:0b:75:f9:d5:
0a:18:03:de:7a:8d:4f:6d:fc:36:c6:b6:76:c7:aa:92:96:6a:
0c:8d:ec:88:0a:0a:3a:ba:b5:b7:7a:6f:62:b2:76:09:7a:c5:
82:42:00:d1:1e:1b:5d:65:41:e2:9a:25:6e:d3:a3:9b:ad:4f:
dc:2f:ac:09:ef:61:0e:aa:43:d2:1d:c7:db:36:06:c5:c6:9d:
63:23:4a:9f:71:c0:f7:15:28:2a:60:99:d2:a8:56:65:3c:8a:
75:de:55:09:79:92:76:6d:c5:3c:39:e6:39:5f:cd:a4:35:55:
d8:e8:76:37:17:db:62:50:99:b5:fc:df:54:a4:3c:d6:dc:15:
51:7b:db:4c:4f:5d:06:79:9d:42:5e:cb:a0:88:8d:19:1f:e5:
99:b0:c0:7f:73:e9:b3:d0:25:ed:59:4b:c6:16:97:1e:d3:7b:
80:af:05:99:b1:96:4e:9e:25:f5:03:90:bd:f2:ad:b7:98:03:
29:07:94:73:44:17:91:ec:77:11:93:7f:f2:4e:21:f9:7e:1b:
0f:51:37:f3:02:f4:df:71:c3:8b:5b:61:91:5d:e3:48:22:0c:
a1:d1:72:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:39:29 2025 by rpki-client