Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FRSiRmjdbXfXIm6Se7o6ur4JZq0.roa
File: FRSiRmjdbXfXIm6Se7o6ur4JZq0.roa (raw, json)
Hash identifier: DhzCCwTZJchopUT6SGja+aak85zaS67UlEptx3unRpo=
Subject key identifier: 15:14:A2:46:68:DD:6D:77:D7:22:6E:92:7B:BA:3A:BA:BE:09:66:AD
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F75BF9CBB9DA21F0E40AD16A7D36
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FRSiRmjdbXfXIm6Se7o6ur4JZq0.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398355
IP address blocks: 2a0b:b87:ffbd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f7:5b:f9:cb:b9:da:21:f0:e4:0a:d1:6a:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1514a24668dd6d77d7226e927bba3ababe0966ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:48:a0:1e:ab:da:38:b7:51:c3:b7:d9:81:
e0:31:f6:0a:80:bd:0a:4a:13:4e:ed:a3:c2:95:c1:
d6:21:5a:e2:18:f1:8a:e5:8a:50:80:b0:ca:2e:58:
7a:ec:75:8a:5b:91:af:30:8b:63:e3:05:4b:e0:4c:
f1:95:cb:94:35:e8:1e:7c:9f:3b:1a:34:d6:43:bb:
25:31:d3:cb:00:b2:2f:06:f0:a2:ce:98:5b:6c:c1:
ed:6d:b1:3a:a6:9c:31:03:98:34:14:90:4d:5f:9a:
66:5f:0a:53:2c:6d:49:ca:62:1e:0c:90:ba:43:d4:
10:b8:a4:c5:ab:e6:ac:b9:18:f3:40:6a:1c:70:cb:
b3:cc:d5:4a:b2:47:b3:ef:b9:7c:74:05:28:4a:c1:
4a:dd:d2:cf:b5:1f:17:a5:2e:95:83:97:57:7f:5a:
f7:87:14:e3:25:97:d6:c8:a0:ee:35:0b:4f:8e:13:
40:69:91:17:d8:56:49:04:2a:89:d3:61:b5:00:5a:
10:7f:2d:be:1f:eb:d9:e9:39:a0:c3:fa:1f:65:3c:
ce:16:23:b7:92:e1:69:fa:68:29:29:7c:10:d1:0a:
23:c7:ac:cc:75:e6:4b:2b:f4:03:b1:ef:f9:27:13:
85:0e:05:63:bf:9b:7e:20:10:3c:c8:78:fb:12:c9:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:14:A2:46:68:DD:6D:77:D7:22:6E:92:7B:BA:3A:BA:BE:09:66:AD
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FRSiRmjdbXfXIm6Se7o6ur4JZq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffbd::/48
Signature Algorithm: sha256WithRSAEncryption
72:9d:4a:b0:9c:63:30:5f:2f:99:11:7b:95:8e:d0:42:2c:48:
a2:df:fa:01:cf:59:40:f0:ad:32:96:2d:d1:64:52:79:d0:87:
a9:c9:48:1a:d0:67:73:d5:0e:ba:36:d1:35:b3:4f:a2:3f:4c:
7b:05:8b:0e:f7:11:05:f6:09:c8:13:4b:49:11:0d:88:bc:ae:
31:fa:6c:93:ee:7e:6c:20:3e:24:b2:ff:c2:4c:ca:88:c8:29:
73:14:42:a8:2b:4c:de:ef:da:42:ff:5b:78:22:09:61:11:c9:
d3:1c:dd:d6:8d:35:c2:0c:8a:87:48:c3:9d:a3:dc:14:d8:42:
92:fc:96:9a:a1:4a:9d:2f:74:cb:5b:2e:8b:42:76:35:73:58:
b8:60:3f:9c:45:9d:53:80:9f:28:bd:92:5d:80:ce:37:97:01:
fe:cd:c3:b0:80:c4:43:b0:c6:43:91:be:92:bd:12:99:79:73:
0e:f5:56:3a:6b:ec:0e:4c:3b:ec:9c:12:35:7c:5a:58:21:be:
5f:bf:06:bd:23:74:e1:6d:15:5d:87:15:1f:f1:13:5e:d9:64:
fa:91:88:88:81:6a:7b:4b:fe:1a:2e:fd:f3:8f:cc:a6:77:7b:
15:e6:64:9a:99:98:f8:00:42:a9:40:24:aa:d7:e2:03:84:ba:
56:13:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:45 2025 by rpki-client