Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FFJdRc8fpUxJnHmKUpDHgc22OCA.roa
File: FFJdRc8fpUxJnHmKUpDHgc22OCA.roa (raw, json)
Hash identifier: FixNY9Uq0FZeF4l5238fOBFsESlF8gv1pJx4f4QYpmA=
Subject key identifier: 14:52:5D:45:CF:1F:A5:4C:49:9C:79:8A:52:90:C7:81:CD:B6:38:20
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEDFD986910C82ECEC881FF15BB13
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FFJdRc8fpUxJnHmKUpDHgc22OCA.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214613
IP address blocks: 2a0e:aa06:540::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ed:fd:98:69:10:c8:2e:ce:c8:81:ff:15:bb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14525d45cf1fa54c499c798a5290c781cdb63820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:65:ce:6c:fa:08:c7:d7:a4:cd:d5:f1:6a:
3a:e3:97:b2:62:2d:52:6a:12:60:c5:ff:b1:ff:9f:
e4:00:02:02:de:69:a4:de:de:82:bd:a6:bf:e7:74:
83:98:da:a2:e5:25:f2:99:bf:9e:2e:00:e8:e4:0e:
c0:5a:d5:76:d5:2f:4a:4d:40:f4:a2:ba:02:29:89:
33:fe:6a:3a:30:06:93:4f:44:26:37:34:42:10:89:
67:44:a9:64:29:2b:6f:cf:2a:85:08:d6:2d:9f:3b:
a2:fb:f5:15:5e:a0:1c:25:f6:48:be:47:2b:ce:31:
54:19:4d:81:81:7a:2d:e5:38:24:98:d1:18:38:da:
8a:79:96:fa:80:73:96:f3:29:c3:d5:08:66:b7:f3:
63:d3:7f:0b:52:6c:3a:a3:94:47:f5:ab:8e:b1:74:
21:4e:49:c5:57:98:f9:72:02:64:83:0b:8d:4f:71:
b0:ff:77:b7:65:d9:ba:6c:98:77:23:54:24:d5:33:
80:f0:6b:45:fe:40:07:8a:d5:d9:dc:a4:bf:b9:05:
c0:92:3b:19:85:11:d2:66:60:c2:fa:c9:9a:4e:91:
32:40:67:49:7a:8e:fc:22:de:10:18:38:ae:53:8a:
61:d1:78:0c:85:81:32:e1:3c:80:6b:60:b6:65:3e:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:5D:45:CF:1F:A5:4C:49:9C:79:8A:52:90:C7:81:CD:B6:38:20
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FFJdRc8fpUxJnHmKUpDHgc22OCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:540::/44
Signature Algorithm: sha256WithRSAEncryption
bd:cd:3d:ee:28:2a:f9:20:98:b4:6f:02:78:bb:53:10:5a:7b:
21:a7:b7:c9:f5:71:be:6c:a2:5b:db:79:22:d0:1f:44:49:66:
29:0f:76:33:05:33:aa:29:24:a2:e6:49:99:af:21:48:32:62:
80:21:cf:4e:6d:44:06:82:07:36:3c:21:b2:30:e5:1f:89:b5:
55:3f:55:9d:7f:45:17:24:17:61:fd:ba:bf:98:9c:85:47:02:
32:5a:14:f0:4e:c4:06:91:b2:d2:d0:b6:05:7c:9e:7e:a8:e6:
9e:07:b8:91:3a:df:d7:f5:e8:3e:c7:f8:14:55:58:ef:97:e0:
54:08:b2:bb:03:13:bf:a7:f3:c3:1f:f2:d9:af:85:03:d8:61:
5e:22:f2:c7:88:ff:46:81:5f:35:97:00:8a:25:d8:89:a1:2d:
aa:e5:6c:63:86:d0:00:2f:3e:ef:40:cd:7f:2c:2b:d0:6f:41:
52:bf:61:2b:56:64:09:9f:6d:00:99:0f:e1:89:d8:e3:d5:8a:
d8:c5:62:07:87:d0:05:48:50:2c:d0:76:68:7f:d5:6d:ab:00:
6f:59:7b:7b:d4:56:fe:1c:31:11:89:ee:e4:83:ae:a3:10:ef:
5b:86:ea:7a:76:ae:96:4a:34:e6:62:1e:68:35:a8:a6:7b:43:
b5:2d:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:48 2025 by rpki-client