Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/JpoCGUNCz7qVphj4bIf-RckNokE.roa
File: JpoCGUNCz7qVphj4bIf-RckNokE.roa (raw, json)
Hash identifier: AbS0PrZTFX3CuHaQDDT+J/LHOGSSh9zm6/sI/fl4iv4=
Subject key identifier: 26:9A:02:19:43:42:CF:BA:95:A6:18:F8:6C:87:FE:45:C9:0D:A2:41
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EE0574960563E8A501EC909B4FA36325
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/JpoCGUNCz7qVphj4bIf-RckNokE.roa
Signing time: Mon 31 Mar 2025 21:04:49 +0000
ROA not before: Mon 31 Mar 2025 21:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:ee04:b0e5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ee:05:74:96:05:63:e8:a5:01:ec:90:9b:4f:a3:63:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 31 21:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=269a02194342cfba95a618f86c87fe45c90da241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:6f:20:11:52:7e:27:c5:9a:f1:8f:57:68:
4e:49:84:e8:d6:48:af:ab:b0:3c:16:68:5d:75:4d:
03:f7:6f:c4:63:b3:02:d3:0b:da:f0:5d:fb:ec:cc:
82:39:e7:c6:d3:73:39:dc:02:b7:1f:2b:ec:25:1f:
af:e5:a0:3b:fa:ee:d6:e9:0d:21:d9:47:97:99:eb:
ff:ee:ab:44:3c:ad:26:a9:32:ee:6b:7e:a3:00:4b:
41:ec:bd:15:f4:20:d5:6b:7e:79:42:1f:fe:3d:42:
95:6c:c4:f0:c3:fa:10:ec:e5:00:fa:91:53:1e:21:
c4:d0:6d:74:67:bf:c1:bc:87:a6:41:2f:0f:08:f1:
4c:d6:f2:c1:63:7e:51:c5:7f:ff:b9:b0:1e:19:7c:
a8:b3:3a:69:c4:31:8e:99:f4:eb:8d:c1:f0:b7:4a:
f9:33:e1:0e:2d:12:e3:d5:14:62:50:ff:38:7a:23:
0f:90:d8:ab:bd:fa:0c:ad:12:0b:df:e9:ab:e9:82:
8a:1e:d6:f7:1a:cf:de:c5:de:3f:4a:2c:26:db:62:
64:4f:fa:4c:98:1b:ea:25:0a:30:aa:d4:24:14:f0:
3e:7f:82:b9:7f:e1:3e:ca:7f:24:0f:4c:cc:80:9f:
f5:78:3c:f2:f5:3f:1b:02:76:2d:19:47:22:06:fc:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:02:19:43:42:CF:BA:95:A6:18:F8:6C:87:FE:45:C9:0D:A2:41
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/JpoCGUNCz7qVphj4bIf-RckNokE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:ee04:b0e5/128
Signature Algorithm: sha256WithRSAEncryption
81:02:34:16:d4:72:16:89:bb:2d:ea:3b:ef:a3:3e:29:a9:6a:
9d:f2:d0:11:95:d8:35:3e:7c:74:a6:71:16:ca:f0:c6:9e:6f:
dd:44:c3:5a:ad:e0:62:ab:71:05:cf:ee:33:e2:90:49:13:66:
96:6d:22:fc:68:df:b9:25:89:2e:bf:6d:cd:f5:26:7a:bb:8b:
12:b5:20:bf:1a:c4:d2:77:fa:3e:0d:ed:76:09:09:55:32:03:
d8:c9:39:42:c4:13:bf:3a:41:12:1c:6e:16:8e:00:a2:0a:2a:
ec:a4:4e:a2:59:32:21:21:e1:aa:41:88:24:b4:5f:81:13:40:
e9:07:f1:26:c4:91:3a:10:25:a3:0c:72:f9:28:08:a7:16:b5:
21:48:68:52:b3:dd:15:f5:42:7f:35:9d:b0:76:bb:14:98:6f:
92:dc:6e:af:bb:78:b4:77:07:8d:6f:1b:26:9e:33:59:d7:3f:
ba:66:98:6f:8f:c2:38:5f:22:4b:4a:5e:1f:5b:31:a4:72:33:
9c:69:48:76:8f:78:b7:0b:b5:ee:01:c8:ab:ed:48:22:60:2b:
1d:03:28:6c:d2:cd:73:a9:19:1e:97:f7:08:11:0e:82:19:8e:
89:cc:b8:6b:e9:d0:fb:c4:06:c1:aa:a0:97:e0:9b:1f:90:64:
79:26:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:49:13 2025 by rpki-client on console.sobornost.net