Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/N0iE3wV3pgiWPBt-VNDjJFaSA0E.roa
File: N0iE3wV3pgiWPBt-VNDjJFaSA0E.roa (raw, json)
Hash identifier: +HRsKlmJMlvftxyjF/TfZRh03m9PQ9gwhxn0ywfZrxk=
Subject key identifier: 37:48:84:DF:05:77:A6:08:96:3C:1B:7E:54:D0:E3:24:56:92:03:41
Certificate issuer: /CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Certificate serial: 09950D88
Authority key identifier: FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/N0iE3wV3pgiWPBt-VNDjJFaSA0E.roa
Signing time: Thu 19 May 2022 10:51:03 +0000
ROA not before: Thu 19 May 2022 10:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a04:5b80:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160763272 (0x9950d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Validity
Not Before: May 19 10:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=374884df0577a608963c1b7e54d0e32456920341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:7c:92:cf:bc:3a:29:b1:3a:5a:17:10:eb:
23:4a:65:3f:cf:af:38:7d:65:8c:fe:ff:f5:fa:32:
65:c2:ee:da:f5:d7:c9:31:1a:dc:07:f8:ae:b8:7d:
7c:2a:d2:e8:fd:77:6f:83:48:1d:f5:da:72:12:6f:
5c:31:66:1a:67:29:af:cc:d4:d1:59:b1:61:8d:43:
40:3a:c4:35:93:3c:65:27:f5:d9:41:a2:d1:3d:23:
24:bb:63:ea:68:83:7d:fe:f8:ad:9b:04:e3:0a:ad:
52:2c:85:20:ff:e6:44:4e:0a:18:05:53:7f:1c:57:
3e:7f:5f:42:4b:bb:ae:9c:ff:8e:18:f9:4e:7d:50:
90:cc:34:96:30:4a:ce:ed:d3:c0:55:53:dc:7d:03:
05:02:69:a7:48:58:1f:3a:ee:78:a6:6e:06:21:0f:
59:5f:75:96:75:8a:83:ff:03:22:11:af:bc:8d:a3:
0d:57:e8:b2:c0:2a:c2:be:ee:ba:3c:c5:fd:b6:7b:
f2:a2:85:4f:36:b2:d8:82:b4:6b:ba:99:af:ab:cb:
0f:40:13:29:75:1d:b7:7f:ca:25:fa:8e:fd:da:2c:
e8:1b:4e:06:33:36:cc:68:1d:ae:cc:2d:ed:1a:61:
48:2b:70:45:d6:f4:b7:50:04:5a:8d:57:f3:07:09:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:84:DF:05:77:A6:08:96:3C:1B:7E:54:D0:E3:24:56:92:03:41
X509v3 Authority Key Identifier:
keyid:FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/N0iE3wV3pgiWPBt-VNDjJFaSA0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b80:100::/48
Signature Algorithm: sha256WithRSAEncryption
29:82:6d:59:35:5d:fb:07:ce:ca:7e:60:57:7b:1e:b7:c5:85:
56:65:f1:07:a4:7b:e8:3d:3d:0e:00:ef:7f:0c:09:c5:54:e3:
18:b6:5b:df:a0:d4:ef:a7:10:7e:f8:0f:94:ef:36:cb:3a:7f:
01:d3:b2:ee:39:11:03:7d:7b:65:02:51:44:b6:58:07:9c:bb:
2f:86:9c:50:c2:55:da:c6:6e:80:a4:a7:4d:8f:11:86:b8:12:
e4:48:c3:cd:d3:20:13:48:56:6d:9a:b4:35:fd:9e:87:ee:79:
c1:34:9e:2c:cf:1e:bf:93:f0:8f:df:b5:55:8f:a3:6b:3e:75:
af:cb:4a:73:9b:28:fb:7c:03:78:f4:85:f3:a1:4b:05:15:42:
c5:6d:a6:31:84:a9:fc:c5:92:1b:1f:4c:bf:b2:c8:10:b9:68:
59:a6:9f:0b:ee:36:69:20:ae:51:bb:58:b4:d9:9d:18:e1:cd:
0e:bd:2a:22:4b:3a:29:88:0d:41:00:a7:80:08:54:3d:15:80:
39:d3:09:f1:bb:3c:9b:52:1a:82:85:eb:d5:65:f1:e3:52:c8:
46:14:5e:b8:08:e2:98:44:85:d6:cf:11:f6:02:27:33:6a:b8:
25:f1:85:b8:7c:9a:e8:8a:71:9b:95:29:b7:de:7a:fe:d9:f5:
43:6b:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:05 2025 by rpki-client