Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FCC7c_-pQwPB61CRbXAk_yxqySA.roa
File: FCC7c_-pQwPB61CRbXAk_yxqySA.roa (raw, json)
Hash identifier: 8VLg0zlB5/+iyTCLaoKHhW3dGzWc9dUIqBAEgM7rDlg=
Subject key identifier: 14:20:BB:73:FF:A9:43:03:C1:EB:50:91:6D:70:24:FF:2C:6A:C9:20
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF70D1CFB0D9BD951CC9FD25D7B5B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FCC7c_-pQwPB61CRbXAk_yxqySA.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215362
IP address blocks: 2a0c:9a40:8610::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f7:0d:1c:fb:0d:9b:d9:51:cc:9f:d2:5d:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1420bb73ffa94303c1eb50916d7024ff2c6ac920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:09:80:3e:f4:6b:07:42:59:61:9a:00:de:
b7:75:fc:ca:d8:32:a8:9e:9c:1a:02:44:37:db:d0:
ac:06:38:8a:64:58:9a:0f:53:b1:b6:21:a7:87:d0:
2b:45:b3:9a:f8:26:78:26:4e:8a:e4:32:ec:f2:f1:
85:8e:a3:65:2f:8d:a2:ba:ae:54:59:cf:f2:b5:80:
6b:51:16:00:3b:5c:21:3c:c0:bb:bd:a8:47:6b:6d:
a7:09:e1:eb:c1:34:32:e5:4d:1c:65:88:5a:24:a8:
60:85:d7:51:d3:e9:86:21:5b:5c:3c:21:06:38:72:
38:a3:4a:ab:4d:80:0c:db:1a:6f:83:27:41:d9:f9:
5e:79:8c:da:7d:46:e5:07:e8:b4:34:5d:8b:d4:e6:
d6:1b:fc:55:89:1f:f1:57:40:d9:f1:e7:8f:52:4b:
10:d2:10:3b:e0:d8:00:55:81:ab:6c:88:80:62:84:
14:58:58:3b:6c:70:4f:8a:9a:95:4c:61:ec:8e:5f:
08:f5:86:4a:ba:40:3a:85:fe:b2:b5:8a:62:ad:dd:
19:7a:bc:0d:45:0b:0c:85:09:97:57:6f:b6:4c:65:
6f:4b:04:88:f5:8d:03:ad:8c:81:82:52:c0:32:07:
01:19:c6:d2:bd:62:3d:89:a9:a7:0c:62:2c:6a:bb:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:BB:73:FF:A9:43:03:C1:EB:50:91:6D:70:24:FF:2C:6A:C9:20
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FCC7c_-pQwPB61CRbXAk_yxqySA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8610::/44
Signature Algorithm: sha256WithRSAEncryption
0d:61:dc:c6:95:a5:5c:b7:8f:62:7c:5a:c3:b3:9b:64:69:8e:
41:38:61:df:7a:58:fb:70:a7:30:e4:28:1e:b1:8b:0c:0f:65:
4d:5c:cf:4e:2f:bb:98:05:23:d6:96:d5:c3:95:45:fc:1d:f3:
1b:f4:25:2c:53:f6:0b:3b:1d:41:86:80:61:3c:57:74:6c:9e:
d7:ed:dd:85:e8:a2:c1:56:d2:d7:8a:3b:ac:53:41:f4:da:f9:
74:13:78:1e:c4:b4:59:50:89:94:9e:6a:a2:61:cc:bb:51:b8:
96:f5:53:b7:bf:80:28:41:e8:fa:93:fd:b3:b0:76:92:cf:f5:
62:01:76:e7:87:b6:81:60:f5:6b:42:bd:9b:99:39:77:d8:25:
78:91:bc:09:34:5d:3c:82:f6:33:86:1d:08:fb:19:39:1b:64:
77:51:e9:fd:9c:52:c4:7a:57:41:61:97:1f:62:ce:5e:89:8d:
f4:fc:2c:9a:ed:95:7e:6f:83:be:5e:f4:bb:17:2d:dc:f6:c9:
25:d9:7d:61:5a:a1:24:84:40:92:be:21:de:f2:3f:8e:e8:78:
ab:ff:9f:13:3c:f5:72:1f:62:eb:35:8d:7a:64:6d:20:43:de:
51:24:db:46:bc:fe:1a:5a:1b:95:a1:c2:e6:5d:32:10:c6:62:
26:32:7a:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+/cNHPsNm9lRzJ/SXXtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDIwYmI3M2ZmYTk0MzAzYzFlYjUwOTE2ZDcwMjRmZjJjNmFjOTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YkJgD70awdCWWGaAN63dfzK2DKo
npwaAkQ329CsBjiKZFiaD1OxtiGnh9ArRbOa+CZ4Jk6K5DLs8vGFjqNlL42iuq5U
Wc/ytYBrURYAO1whPMC7vahHa22nCeHrwTQy5U0cZYhaJKhghddR0+mGIVtcPCEG
OHI4o0qrTYAM2xpvgydB2fleeYzafUblB+i0NF2L1ObWG/xViR/xV0DZ8eePUksQ
0hA74NgAVYGrbIiAYoQUWFg7bHBPipqVTGHsjl8I9YZKukA6hf6ytYpird0ZerwN
RQsMhQmXV2+2TGVvSwSI9Y0DrYyBglLAMgcBGcbSvWI9iamnDGIsarvlXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBQgu3P/qUMDwetQkW1wJP8saskgMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvRkNDN2NfLXBRd1BCNjFDUmJYQWtfeXhxeVNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIYQ
MA0GCSqGSIb3DQEBCwUAA4IBAQANYdzGlaVct49ifFrDs5tkaY5BOGHfelj7cKcw
5CgesYsMD2VNXM9OL7uYBSPWltXDlUX8HfMb9CUsU/YLOx1BhoBhPFd0bJ7X7d2F
6KLBVtLXijusU0H02vl0E3gexLRZUImUnmqiYcy7UbiW9VO3v4AoQej6k/2zsHaS
z/ViAXbnh7aBYPVrQr2bmTl32CV4kbwJNF08gvYzhh0I+xk5G2R3Uen9nFLEeldB
YZcfYs5eiY30/Cya7ZV+b4O+XvS7Fy3c9skl2X1hWqEkhECSviHe8j+O6Hir/58T
PPVyH2LrNY16ZG0gQ95RJNtGvP4aWhuVocLmXTIQxmImMno6
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:02 2025 by rpki-client