Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FdMl1Jjtraz55AZ_rf87ABBigto.roa
File: FdMl1Jjtraz55AZ_rf87ABBigto.roa (raw, json)
Hash identifier: D4Y2eff84cTBcX+VZWEGnVD4M4D3gNTATMxqqGuRsKY=
Subject key identifier: 15:D3:25:D4:98:ED:AD:AC:F9:E4:06:7F:AD:FF:3B:00:10:62:82:DA
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747E31C4995839D6913AD7B21CCDD15
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FdMl1Jjtraz55AZ_rf87ABBigto.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208088
IP address blocks: 2a0b:b87:ffb3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e3:1c:49:95:83:9d:69:13:ad:7b:21:cc:dd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15d325d498edadacf9e4067fadff3b00106282da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:af:67:f4:10:0f:af:26:90:ee:b5:81:31:
16:d7:64:c1:d1:d4:42:e4:5c:8f:95:91:c2:e2:3b:
f7:e3:2f:20:77:46:ea:12:10:a2:74:ae:d3:d1:9c:
2a:71:35:ef:3c:13:f2:0e:7c:f1:f4:d4:04:d7:a0:
83:95:4a:f3:29:4f:17:0b:ed:b2:85:5b:9c:15:b3:
65:90:d1:fc:eb:fe:d7:c9:d0:60:ae:6c:5d:60:d7:
43:1a:63:f1:64:1d:c9:c9:3e:f0:34:8b:51:06:64:
07:28:97:85:c2:fa:6a:d7:9e:be:82:7c:db:10:e9:
28:4f:84:70:4f:9b:f4:43:03:b3:9a:e5:6f:65:be:
00:a2:52:28:ca:fb:86:d1:72:6c:13:ad:97:87:b9:
f6:ea:1b:68:7e:4c:33:66:57:d5:c8:46:cd:a6:26:
1a:80:39:38:ab:77:2b:a1:94:41:cd:e0:3c:1d:2b:
96:1e:d9:b4:a1:76:09:68:fd:6b:9a:3f:2e:e9:e5:
79:eb:cc:a5:b7:04:3a:32:9c:af:9e:ff:66:4a:ad:
44:0c:f0:43:9d:d4:b6:85:6c:3c:2b:04:db:64:df:
b3:db:b2:82:49:8e:65:bb:27:2f:b2:d7:67:f1:1e:
ec:c3:fd:09:e3:2d:7d:50:71:76:19:8c:f3:51:35:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:25:D4:98:ED:AD:AC:F9:E4:06:7F:AD:FF:3B:00:10:62:82:DA
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FdMl1Jjtraz55AZ_rf87ABBigto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb3::/48
Signature Algorithm: sha256WithRSAEncryption
75:14:f6:f5:5e:95:52:b6:79:d4:8d:70:75:3b:98:c0:3d:26:
b7:65:d5:82:3e:04:b9:f9:f2:d6:69:43:20:1c:8c:b9:80:a8:
c8:da:f1:79:0a:2c:76:f6:26:f4:11:84:e3:56:59:3b:46:a6:
f0:3e:c0:e6:65:87:fd:b4:51:98:4b:8a:34:e9:28:cc:08:69:
76:2c:99:d7:69:0d:bb:7e:0d:28:d8:15:83:1d:23:62:6f:70:
d6:e8:99:ce:0c:73:aa:cd:1e:0d:f5:56:e2:a8:73:97:80:58:
08:37:64:02:16:f7:f2:da:40:e0:c0:9c:14:bd:9b:8e:09:c4:
21:45:fd:2e:d9:eb:28:1c:39:42:e1:33:7d:79:31:45:88:47:
57:5d:e7:75:eb:ea:a6:cb:bd:f8:7d:e2:c1:02:ed:25:63:98:
1e:7b:e4:2c:da:e8:1a:54:e7:43:c9:de:7f:a1:73:65:bc:23:
de:eb:c5:30:c1:f6:91:2a:0b:5c:6c:59:43:9b:29:0b:4b:e9:
64:3c:6a:d7:9a:6a:8c:46:aa:33:4a:9d:fd:8d:b6:11:1f:b4:
6a:23:74:b1:d9:6e:99:70:db:04:7d:fd:0b:43:bc:7d:21:f1:
ee:e7:f7:84:7a:33:00:71:ce:3d:4c:e8:6f:e9:07:ad:cc:4b:
f9:b8:65:f3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnR+McSZWDnWkTrXshzN0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWQzMjVkNDk4ZWRhZGFjZjllNDA2N2ZhZGZmM2IwMDEwNjI4MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaCvZ/QQD68mkO61gTEW12TB0dRC
5FyPlZHC4jv34y8gd0bqEhCidK7T0ZwqcTXvPBPyDnzx9NQE16CDlUrzKU8XC+2y
hVucFbNlkNH86/7XydBgrmxdYNdDGmPxZB3JyT7wNItRBmQHKJeFwvpq156+gnzb
EOkoT4RwT5v0QwOzmuVvZb4AolIoyvuG0XJsE62Xh7n26htofkwzZlfVyEbNpiYa
gDk4q3croZRBzeA8HSuWHtm0oXYJaP1rmj8u6eV568yltwQ6Mpyvnv9mSq1EDPBD
ndS2hWw8KwTbZN+z27KCSY5luycvstdn8R7sw/0J4y19UHF2GYzzUTUF8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBXTJdSY7a2s+eQGf63/OwAQYoLaMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvRmRNbDFKanRyYXo1NUFaX3JmODdBQkJpZ3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+z
MA0GCSqGSIb3DQEBCwUAA4IBAQB1FPb1XpVStnnUjXB1O5jAPSa3ZdWCPgS5+fLW
aUMgHIy5gKjI2vF5Cix29ib0EYTjVlk7RqbwPsDmZYf9tFGYS4o06SjMCGl2LJnX
aQ27fg0o2BWDHSNib3DW6JnODHOqzR4N9VbiqHOXgFgIN2QCFvfy2kDgwJwUvZuO
CcQhRf0u2esoHDlC4TN9eTFFiEdXXed16+qmy734feLBAu0lY5gee+Qs2ugaVOdD
yd5/oXNlvCPe68UwwfaRKgtcbFlDmykLS+lkPGrXmmqMRqozSp39jbYRH7RqI3Sx
2W6ZcNsEff0LQ7x9IfHu5/eEejMAcc49TOhv6QetzEv5uGXz
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:37 2025 by rpki-client