Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/FngdYb-SxhpNDMTWEzQeP1qmwh4.roa
File: FngdYb-SxhpNDMTWEzQeP1qmwh4.roa (raw, json)
Hash identifier: PFnz6YjIec/Nduo0DIJiGXPJQGNnbtAC1bfmQ/ThbMk=
Subject key identifier: 16:78:1D:61:BF:92:C6:1A:4D:0C:C4:D6:13:34:1E:3F:5A:A6:C2:1E
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01856E38AC34C3C22D02D8396B5C168304CF
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/FngdYb-SxhpNDMTWEzQeP1qmwh4.roa
Signing time: Sun 01 Jan 2023 16:44:45 +0000
ROA not before: Sun 01 Jan 2023 16:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64492
IP address blocks: 2a06:1301:4110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:ac:34:c3:c2:2d:02:d8:39:6b:5c:16:83:04:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 16:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16781d61bf92c61a4d0cc4d613341e3f5aa6c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:e8:1e:46:24:10:6b:3a:3a:d8:9f:8a:b4:
d0:37:a2:49:68:c7:30:07:95:be:73:3d:12:26:fd:
9c:ad:66:04:1f:08:2e:c8:39:82:e0:be:2f:f2:86:
89:61:4b:4c:2f:7b:1d:18:f8:82:a7:40:64:b0:2f:
9a:30:bb:58:a2:1a:3b:48:61:7d:23:bb:6c:09:50:
04:57:be:b7:27:57:72:8f:89:c0:02:80:d9:9d:24:
13:eb:b2:56:97:11:b0:48:6c:77:43:fd:a4:11:1f:
47:81:17:6c:79:8b:df:0e:c4:68:fc:63:21:3f:09:
d1:6e:2c:dd:19:a8:33:a9:5c:51:c2:63:8b:fb:67:
20:5b:6c:8b:47:02:81:69:97:38:e6:9f:4f:07:3c:
87:cd:66:d4:34:91:31:63:92:b0:36:5e:9d:f0:9b:
a1:77:1b:38:f9:7a:35:36:74:a2:68:71:8c:fc:2f:
cd:ed:97:0a:1e:32:a5:c3:ee:e5:f6:95:b4:5e:5b:
a6:2c:67:d8:22:b9:bf:aa:d5:09:8d:72:1a:73:e1:
c9:b5:ba:b5:ea:59:28:d7:dd:c6:19:fe:86:53:c7:
81:a5:c1:f0:8a:71:d0:07:62:d4:3a:5b:bc:a6:cf:
98:2a:c4:05:ae:88:3a:05:88:17:01:21:d0:f2:44:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:1D:61:BF:92:C6:1A:4D:0C:C4:D6:13:34:1E:3F:5A:A6:C2:1E
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/FngdYb-SxhpNDMTWEzQeP1qmwh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4110::/48
Signature Algorithm: sha256WithRSAEncryption
99:98:ea:a1:5d:ef:60:f5:d8:29:81:2f:63:d9:b5:3e:8f:a5:
41:bd:8a:a3:6f:09:71:b8:a2:b2:cf:0c:4f:5a:67:e9:79:64:
93:2e:f6:e5:42:6a:b0:3e:93:44:26:e6:ec:b4:d6:ef:ce:a3:
b9:18:03:98:ad:37:c2:79:f1:ce:25:09:b3:6d:69:f0:8b:3d:
85:7a:2f:e7:7a:ed:66:f1:e0:23:ae:ea:b9:03:79:5a:42:3d:
36:53:91:85:54:58:b0:da:a7:5e:04:c9:05:bf:38:0a:77:99:
93:6e:24:b8:ad:ed:92:4b:2d:26:cb:0d:72:2f:46:43:41:2c:
da:60:eb:24:c2:9a:ea:ec:a6:6c:31:fc:73:b8:b4:a6:d8:97:
08:c8:0b:62:a5:70:af:5e:51:1d:7f:d2:96:a5:96:f5:fc:54:
e0:e5:54:9e:36:88:31:aa:42:ac:88:46:d4:a7:5a:b9:f0:53:
74:08:cc:1c:8d:9d:49:a3:9c:2a:19:a6:a8:49:22:08:8a:ce:
cb:b9:e7:cd:71:ac:44:21:ee:47:30:63:be:0e:0d:30:19:7b:
93:bb:3e:f8:93:17:99:59:e4:ee:60:9c:23:06:a5:b0:13:c4:
92:b2:c1:ec:b4:54:c8:51:50:36:bd:d2:c3:3a:05:b6:eb:fb:
46:45:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:54:01 2025 by rpki-client