Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/uPekRlm_t-Nv-hXbV9liZDe5lJ4.roa
File: uPekRlm_t-Nv-hXbV9liZDe5lJ4.roa (raw, json)
Hash identifier: edsN8SxHExL2XJBIbNXfoZdvq5Sqnf70opGzqf4ANmI=
Subject key identifier: B8:F7:A4:46:59:BF:B7:E3:6F:FA:15:DB:57:D9:62:64:37:B9:94:9E
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DCAD268A163B45FA8F7B6ADE7246A909
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/uPekRlm_t-Nv-hXbV9liZDe5lJ4.roa
Signing time: Fri 28 Mar 2025 12:14:49 +0000
ROA not before: Fri 28 Mar 2025 12:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:ad:26:8a:16:3b:45:fa:8f:7b:6a:de:72:46:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 28 12:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f7a44659bfb7e36ffa15db57d9626437b9949e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:7e:df:59:b8:d0:62:3b:a5:63:57:ad:79:
8c:57:4e:cf:d3:08:8b:4d:22:1a:aa:24:0f:de:9b:
b8:9c:9d:2e:57:4b:10:38:dc:ee:58:a0:37:00:46:
00:cb:2f:51:54:22:17:a3:c5:d7:97:64:7b:28:7f:
33:8d:a1:ba:8d:08:da:c6:cc:62:27:fb:b1:0f:cf:
cc:78:fb:5d:3e:ff:f7:e2:19:72:8d:0d:3a:92:00:
77:9d:a8:9a:99:22:92:ad:d8:b5:9d:fd:12:55:7a:
86:d4:0e:f7:76:e6:22:24:13:7e:73:a3:9e:1d:e4:
63:62:e3:e5:ea:7a:2f:7e:4e:30:fd:94:bd:3b:4b:
5d:33:9d:6b:6d:6e:6d:9a:f0:e6:69:69:2f:6e:79:
56:89:09:bd:e9:95:97:4c:c1:91:66:d4:3d:14:e8:
11:30:65:27:33:b3:83:18:e5:10:d7:2c:73:96:45:
dc:3c:30:bc:85:ad:3d:a4:78:1e:c6:1b:87:ef:8e:
4b:a0:c5:f5:bd:86:99:cb:43:91:29:6e:c2:ad:bc:
53:83:97:c5:4f:ee:44:26:ec:00:92:08:46:df:8a:
a2:f3:36:2c:18:8b:11:76:88:b4:86:91:2b:fe:c2:
f5:cd:84:60:23:08:d3:54:82:b0:81:d3:60:e9:03:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:A4:46:59:BF:B7:E3:6F:FA:15:DB:57:D9:62:64:37:B9:94:9E
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/uPekRlm_t-Nv-hXbV9liZDe5lJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
29:d5:52:62:fb:c9:3e:73:b0:2a:c2:b6:f2:f8:32:14:b3:e4:
43:f6:28:c0:ad:0d:8c:35:fe:a1:92:02:a8:72:ef:8b:4b:cf:
98:df:84:42:2f:b9:d7:5d:84:f0:f2:39:8d:f6:81:1e:e7:c7:
e2:b1:94:54:a4:28:04:de:21:7a:4f:48:20:ab:cb:42:5c:7d:
19:32:c5:27:27:eb:8b:58:a2:a0:ad:65:89:b6:86:83:33:c4:
12:1b:50:44:ce:39:21:b7:02:67:54:b3:3e:2a:3e:20:07:80:
f1:33:f1:a0:e4:b9:5d:95:d4:1c:3e:46:63:25:1c:63:74:1a:
74:42:9f:0f:27:2d:7a:69:a5:37:68:f1:02:2f:5d:77:43:61:
78:bc:53:88:d1:34:01:c6:22:14:6b:0a:9c:32:a8:f6:4b:a6:
e3:f0:32:a6:1a:10:0e:4d:12:7a:42:21:28:61:1b:57:91:02:
db:c6:b2:8e:48:9b:29:48:5d:80:24:f8:fd:fc:ab:f0:cf:cd:
08:72:24:4f:cf:23:cc:ac:e2:f7:62:30:97:09:28:44:b6:c9:
f6:4a:bc:13:54:5f:7c:05:26:ea:35:d2:2e:ab:59:d4:2a:83:
fb:65:32:46:0b:f7:cc:8e:60:15:5c:9a:87:b9:7b:2e:91:8b:
5d:27:75:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:15 2025 by rpki-client