Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/fW0mZX2qVdA0eoUEboZhAE59bUE.roa
File: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (raw, json)
Hash identifier: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=
Subject key identifier: 7D:6D:26:65:7D:AA:55:D0:34:7A:85:04:6E:86:61:00:4E:7D:6D:41
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA0555BB6E0B6EB28D05D2834334FB
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/fW0mZX2qVdA0eoUEboZhAE59bUE.roa
Signing time: Thu 02 Jan 2025 11:50:09 +0000
ROA not before: Thu 02 Jan 2025 11:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196689
IP address blocks: 2a03:f85:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:05:55:bb:6e:0b:6e:b2:8d:05:d2:83:43:34:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d6d26657daa55d0347a85046e8661004e7d6d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:da:b9:7d:c2:0a:9e:ae:be:a9:86:35:43:
4a:a8:3c:53:0d:53:d9:a2:11:78:68:f0:76:34:6b:
1f:28:e7:a0:55:b1:0a:96:68:54:3c:69:cc:76:85:
75:c9:60:5b:27:76:d2:44:a6:3c:9d:d7:40:16:95:
35:10:b7:e9:d6:62:b3:d4:8c:61:1c:73:41:b7:7d:
87:c2:f4:60:b9:bb:f0:88:12:99:ba:e0:e9:e1:70:
89:20:56:6d:1d:1a:d7:17:88:8f:c6:12:96:8f:19:
65:9c:23:13:f7:ff:26:bf:46:df:2d:10:cc:79:34:
66:95:ec:fd:38:d0:a7:aa:ef:d7:a8:77:cf:45:bc:
c9:e1:ce:3f:a6:40:51:51:ba:da:0f:73:b9:01:7c:
78:cf:7d:6c:2c:38:20:1b:49:c5:61:aa:29:9e:e5:
36:60:b9:a8:89:41:e6:ec:ae:d6:3e:8c:68:f8:68:
59:2d:6d:a2:38:87:e4:99:45:4f:a1:33:ea:cb:ae:
a5:a5:31:72:44:b6:35:32:38:26:03:2b:7a:89:a8:
15:ba:3f:dd:b8:2b:d1:41:05:c6:8e:52:69:3e:7b:
46:c7:a4:e2:ae:1e:e1:fe:2c:2a:0a:01:11:84:d3:
06:3d:53:c8:8f:69:a9:40:38:7d:e8:cb:08:56:1b:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:26:65:7D:AA:55:D0:34:7A:85:04:6E:86:61:00:4E:7D:6D:41
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/fW0mZX2qVdA0eoUEboZhAE59bUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85:3::/48
Signature Algorithm: sha256WithRSAEncryption
63:74:e5:23:e1:a3:5b:ef:73:4f:ad:bd:b8:2c:d4:cf:ce:ea:
6a:11:2d:28:cf:ed:cf:ad:a5:23:ae:e7:c6:b8:10:47:1c:88:
b9:26:d0:ed:e1:53:54:05:2d:d8:a2:f1:63:ad:8a:d9:ec:1b:
99:1c:20:bf:9b:fa:d8:6c:62:d9:6f:73:6e:bd:62:6f:9a:f9:
9b:1a:46:71:76:db:41:cc:0a:b9:e0:2a:41:46:3d:22:cd:91:
bd:83:14:a8:5d:4f:34:67:6f:d0:00:37:f9:d4:1e:ce:d8:c4:
fb:e5:6c:42:71:51:3d:85:16:a1:6f:6f:fc:bd:00:e7:6b:bf:
a5:09:be:02:49:cc:22:60:76:19:24:ef:08:12:cf:d4:2f:ff:
f2:6c:c3:03:b1:65:58:81:a6:00:2c:f4:e0:a3:06:06:e3:cd:
ed:3e:1b:ac:d0:c5:0c:87:14:dd:f4:17:62:68:b8:38:54:03:
2c:c0:59:2c:06:2d:d6:2e:aa:f5:40:a0:34:e6:c4:b0:5b:95:
68:14:d5:74:02:c4:33:03:73:49:89:23:5b:d7:5a:a1:c0:b8:
d3:6c:91:f1:9d:7b:9a:eb:d6:c9:5b:09:2a:ff:57:16:d7:69:
3b:cd:cc:02:d8:fa:1c:d7:19:1c:bc:67:00:0d:da:b2:36:8a:
f5:94:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:40 2025 by rpki-client