Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/fpQDOceW0nAf0mI2PAXShTq2K8Q.roa
File: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (raw, json)
Hash identifier: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=
Subject key identifier: 7E:94:03:39:C7:96:D2:70:1F:D2:62:36:3C:05:D2:85:3A:B6:2B:C4
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01942521F726D188E3BC29872BEE2E7481C8
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/fpQDOceW0nAf0mI2PAXShTq2K8Q.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28952
IP address blocks: 2a03:6947:1800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f7:26:d1:88:e3:bc:29:87:2b:ee:2e:74:81:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e940339c796d2701fd262363c05d2853ab62bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7c:bc:fa:23:17:78:ff:c9:9d:e3:d9:57:55:
2b:4b:b5:da:19:c2:6f:7a:51:63:6d:17:57:2a:95:
95:16:f6:a1:3d:53:64:0c:d6:05:e5:fc:39:42:aa:
98:f5:76:8e:e6:1e:dc:2d:e5:56:5e:e5:f0:e7:75:
3c:c1:af:c5:10:82:18:1c:e4:f8:fe:9f:7a:50:a0:
d7:1e:3c:3c:73:21:b5:02:38:c3:b8:5c:98:e4:9c:
7b:49:a8:87:32:69:98:cb:60:86:d4:51:e4:9a:82:
85:d6:25:2e:8f:34:f3:7d:24:4d:e3:9f:73:34:f7:
d6:de:8d:b1:7f:d4:5f:14:d9:b5:53:ad:0d:88:ee:
95:3c:bf:b2:40:48:dd:27:88:30:dc:d5:da:cf:2a:
f6:74:bf:e4:f6:e0:76:d1:a8:b9:87:c7:5b:01:c8:
b3:06:3f:db:83:99:5b:c9:12:3c:d4:d8:eb:ce:96:
ab:dd:d4:37:8e:7d:f8:20:ad:8a:c8:3f:1a:97:11:
b8:00:9e:9f:69:45:de:8b:e5:6e:e1:2c:d0:b1:55:
c6:a1:3d:6b:82:c6:2f:8d:9d:61:9d:4f:81:7f:d7:
0b:4b:e3:f1:4d:35:eb:f1:48:68:61:fa:88:0b:f3:
3f:89:e6:8d:3f:74:7e:7f:8c:50:bd:f2:0b:2b:50:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:03:39:C7:96:D2:70:1F:D2:62:36:3C:05:D2:85:3A:B6:2B:C4
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/fpQDOceW0nAf0mI2PAXShTq2K8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:1800::/40
Signature Algorithm: sha256WithRSAEncryption
2b:b3:7d:99:ee:5b:e7:c4:c6:d0:35:5e:47:11:e6:42:f6:85:
2a:c0:be:74:af:cd:86:fd:6f:6b:48:b7:78:d1:eb:a1:65:aa:
5f:81:fe:61:35:27:d8:11:cc:a1:8e:02:61:40:7d:5f:c3:dd:
cd:30:9e:0f:ae:2e:24:86:f2:50:30:0c:6e:50:e8:f2:11:d0:
0a:6d:20:02:c0:d7:26:e3:11:1f:73:c9:4a:09:04:60:d1:73:
0e:af:d8:17:bd:80:a3:a2:2e:d3:df:ec:b8:25:6f:90:e7:e7:
a2:c7:d1:ed:5f:65:55:81:8f:3b:25:90:ec:33:c8:fc:48:bb:
a4:78:7c:cf:e2:1e:4c:22:bc:6b:ab:91:f9:7b:9c:eb:dd:81:
03:5d:dd:78:28:2b:a7:df:46:80:68:c3:dd:99:ac:34:a2:ee:
12:6b:02:0d:29:ec:5b:85:12:10:87:25:b6:c0:6f:97:d1:22:
eb:b7:7f:d8:13:8e:b2:a2:a5:e3:81:67:d2:2a:10:55:17:71:
2c:8f:54:f7:3a:ab:dc:b2:1f:87:50:69:98:7b:1c:34:cc:c3:
95:27:12:96:e6:7a:e9:1d:7b:44:f1:ae:2e:06:3e:41:5a:20:
f1:57:90:30:48:7e:f8:38:ba:56:12:8f:50:f2:52:00:65:89:
2a:93:c6:b3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlIfcm0YjjvCmHK+4udIHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjUwMTAyMDM0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTk0MDMzOWM3OTZkMjcwMWZkMjYyMzYzYzA1ZDI4NTNhYjYyYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93y8+iMXeP/JnePZV1UrS7XaGcJv
elFjbRdXKpWVFvahPVNkDNYF5fw5QqqY9XaO5h7cLeVWXuXw53U8wa/FEIIYHOT4
/p96UKDXHjw8cyG1AjjDuFyY5Jx7SaiHMmmYy2CG1FHkmoKF1iUujzTzfSRN459z
NPfW3o2xf9RfFNm1U60NiO6VPL+yQEjdJ4gw3NXazyr2dL/k9uB20ai5h8dbAciz
Bj/bg5lbyRI81Njrzpar3dQ3jn34IK2KyD8alxG4AJ6faUXei+Vu4SzQsVXGoT1r
gsYvjZ1hnU+Bf9cLS+PxTTXr8UhoYfqIC/M/ieaNP3R+f4xQvfILK1BBbQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH6UAznHltJwH9JiNjwF0oU6tivEMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvZnBRRE9jZVcwbkFmMG1JMlBBWFNoVHEySzhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgNpRxgw
DQYJKoZIhvcNAQELBQADggEBACuzfZnuW+fExtA1XkcR5kL2hSrAvnSvzYb9b2tI
t3jR66Flql+B/mE1J9gRzKGOAmFAfV/D3c0wng+uLiSG8lAwDG5Q6PIR0AptIALA
1ybjER9zyUoJBGDRcw6v2Be9gKOiLtPf7Lglb5Dn56LH0e1fZVWBjzslkOwzyPxI
u6R4fM/iHkwivGurkfl7nOvdgQNd3XgoK6ffRoBow92ZrDSi7hJrAg0p7FuFEhCH
JbbAb5fRIuu3f9gTjrKipeOBZ9IqEFUXcSyPVPc6q9yyH4dQaZh7HDTMw5UnEpbm
eukde0Txri4GPkFaIPFXkDBIfvg4ulYSj1DyUgBliSqTxrM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:52 2025 by rpki-client