Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/frFl5PEco117BiG0RMbT0skUi48.roa
File: frFl5PEco117BiG0RMbT0skUi48.roa (raw, json)
Hash identifier: V92ApdI2e5srzkWUrc2kmK0BfIfoZaj3XEnIXQbreF0=
Subject key identifier: 7E:B1:65:E4:F1:1C:A3:5D:7B:06:21:B4:44:C6:D3:D2:C9:14:8B:8F
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 026891D4
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/frFl5PEco117BiG0RMbT0skUi48.roa
Signing time: Thu 02 Jun 2022 10:04:20 +0000
ROA not before: Thu 02 Jun 2022 10:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204828
IP address blocks: 2a11:29c0:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40407508 (0x26891d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jun 2 10:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eb165e4f11ca35d7b0621b444c6d3d2c9148b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:cc:65:be:58:63:cb:d4:59:a2:3f:35:fd:
b3:04:91:3c:91:dc:07:85:c2:2f:ca:8c:06:0e:25:
d3:27:52:9d:e2:8d:13:27:07:6a:e2:ab:b5:45:1d:
ac:df:51:60:7b:2e:c8:6a:db:b1:77:20:f2:4f:27:
19:49:c3:07:05:1c:2a:e9:29:f0:37:0d:0b:6a:9b:
4e:59:dd:48:df:6d:f3:e3:60:a3:d4:5c:07:78:8c:
75:c8:d6:8a:40:fb:cb:98:d6:ee:88:36:9a:35:0b:
73:16:50:62:ff:4c:c5:f7:d1:20:d6:5b:09:3d:fa:
3b:4e:d4:38:49:e2:72:26:40:a7:68:c0:f1:a5:41:
42:cc:4b:d0:c2:6c:1f:23:f9:92:03:0e:31:a9:79:
ee:09:1a:43:a5:21:5d:fb:30:cc:98:b3:95:fc:0a:
7f:fd:d2:33:ae:9a:d8:54:c1:33:68:4d:d2:57:a0:
75:84:1f:d0:6b:fb:d7:49:cb:62:6c:91:9a:92:ba:
32:58:11:37:a8:af:9b:15:39:61:83:56:e3:be:f7:
fe:1b:a0:8c:ac:8a:4c:4f:f4:0a:a5:25:47:4e:83:
af:31:77:42:7c:37:53:e3:5a:85:b1:fc:0c:d9:e8:
5b:d1:53:4b:81:88:81:11:48:0c:83:8a:ad:f5:c5:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:65:E4:F1:1C:A3:5D:7B:06:21:B4:44:C6:D3:D2:C9:14:8B:8F
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/frFl5PEco117BiG0RMbT0skUi48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:12::/48
Signature Algorithm: sha256WithRSAEncryption
30:c0:e8:8d:a6:2c:6d:93:d2:f5:a1:99:d7:a7:2d:a0:a5:6a:
2b:7e:6c:e2:3b:a8:fd:42:1a:53:4d:35:2c:77:35:d9:37:07:
0a:21:33:20:a7:ec:21:c3:f4:f4:7b:06:34:9d:89:03:fd:e6:
f5:44:4d:54:18:e4:97:08:dd:61:1b:31:ec:ff:52:f4:32:eb:
89:1c:2f:ea:56:45:f4:75:29:a5:7b:34:d0:6a:3a:a3:57:cf:
ca:98:00:72:af:ed:7a:8b:5b:9a:d9:7e:00:51:06:09:35:a9:
71:fe:ee:36:35:9a:c2:07:2b:3e:bc:16:26:31:03:d5:40:7e:
f2:8c:91:ee:14:87:86:ee:4e:fb:d3:4d:f8:a0:14:18:6d:35:
a6:9d:51:f8:61:07:f5:ee:5a:3a:9f:f2:1b:48:52:e6:66:36:
1f:8c:50:ba:34:40:15:00:fc:e4:7e:5a:fd:0d:e9:6e:37:0e:
ad:8e:26:14:d2:18:b5:b3:bf:7f:a0:5f:dc:c7:9f:bf:cd:93:
7b:83:e1:4f:16:0b:c3:81:8e:91:5e:f2:51:a9:d0:c5:71:18:
10:84:27:9e:0f:54:74:75:b3:31:cb:80:c3:49:ee:ed:6b:4f:
63:d6:b2:9b:72:10:f9:82:46:c5:c2:fa:b1:7f:a1:cd:37:59:
7d:cc:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:40 2025 by rpki-client