Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_FsE4dD-LElAnN9eMiBIFQLKtZw.roa
File: _FsE4dD-LElAnN9eMiBIFQLKtZw.roa (raw, json)
Hash identifier: kuONxkUaDTZhcnYMNV7MIAahHWmXUBkUQ/ir6nHv9SM=
Subject key identifier: FC:5B:04:E1:D0:FE:2C:49:40:9C:DF:5E:32:20:48:15:02:CA:B5:9C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0194180A0C009E7B993181FAD4E368A2351A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_FsE4dD-LElAnN9eMiBIFQLKtZw.roa
Signing time: Mon 30 Dec 2024 14:48:19 +0000
ROA not before: Mon 30 Dec 2024 14:48:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213660
IP address blocks: 2a0c:b641:160::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:0a:0c:00:9e:7b:99:31:81:fa:d4:e3:68:a2:35:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Dec 30 14:48:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc5b04e1d0fe2c49409cdf5e3220481502cab59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:25:93:7a:ad:b5:4d:b3:e4:b0:c0:4d:7c:
ed:e2:ba:9a:5a:fb:c9:e7:9a:5c:a0:b4:d1:45:b2:
56:4e:34:54:3a:21:c1:e6:8c:81:42:ab:63:d7:75:
b5:c4:2c:b6:fb:8e:77:4c:1b:e7:2b:b7:8b:0f:4c:
b2:eb:df:4e:93:3d:91:d3:ef:ab:4b:50:15:ca:46:
56:eb:b6:0b:f9:a0:9a:b1:6b:66:e9:f2:5f:8b:35:
05:44:1e:cb:00:d7:e7:52:2a:b7:07:75:5c:96:cc:
c2:73:96:68:26:36:e8:65:6d:8c:40:cb:64:48:60:
90:63:62:90:95:1c:b8:03:d1:19:28:89:5a:e2:24:
bf:0c:ce:7f:11:62:a3:46:1c:98:94:bc:32:94:79:
9d:15:70:19:1b:41:52:09:18:fa:7f:73:7f:89:23:
9b:0f:bc:eb:53:78:04:75:e0:f7:cf:2f:37:16:e4:
0b:f6:6c:aa:96:9c:de:eb:44:41:ba:3f:b3:56:ba:
76:a2:f8:6e:2f:55:c2:4a:65:f9:d6:12:c0:cb:36:
70:68:9f:2b:d0:2e:49:73:15:69:2d:f8:50:cd:54:
e0:ef:8e:f1:f8:e1:bd:c3:37:f9:3e:f8:3d:d7:b0:
ab:a6:81:3c:1b:34:aa:a2:84:73:94:4c:c3:c9:ae:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:04:E1:D0:FE:2C:49:40:9C:DF:5E:32:20:48:15:02:CA:B5:9C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_FsE4dD-LElAnN9eMiBIFQLKtZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:160::/44
Signature Algorithm: sha256WithRSAEncryption
51:a2:78:bd:67:72:f6:32:28:84:0a:e5:94:7f:c4:4a:ba:38:
17:33:9f:7d:ad:d3:c0:4d:b5:25:96:dc:c5:be:44:ff:b8:2d:
03:5b:73:12:8e:a4:fe:4a:43:f0:43:e2:d4:05:1b:98:5d:d5:
36:97:dd:35:b0:91:00:64:6e:26:e7:25:ed:b6:2f:e6:c4:f5:
94:8f:59:17:e6:85:ff:b5:94:a4:0a:7f:37:3f:02:e6:1d:d8:
2a:57:ce:92:c5:d6:8b:e2:a1:94:f6:d1:19:df:12:2a:85:cb:
7e:42:c1:de:26:8c:99:6b:45:0e:9a:c8:b9:f8:61:c3:27:71:
21:e8:df:38:27:7a:0a:3b:d5:c7:2f:a8:90:c7:ff:42:3f:eb:
76:23:ae:8e:7f:05:c8:9f:5d:11:82:79:63:1b:7d:63:b2:dc:
40:9d:f8:82:2b:ff:d6:17:62:5f:ff:16:f9:1b:92:5e:be:1c:
8b:44:f4:63:98:39:0e:83:87:f7:eb:dc:64:d5:64:70:3b:2b:
e1:c8:b7:b3:f7:f5:a7:c7:9c:f3:b8:8f:eb:e4:85:a9:39:55:
c4:49:d1:d8:89:d3:ec:fc:1e:1f:b0:30:e4:8d:1e:6c:12:6f:
6f:8e:f1:75:2c:ae:0c:8d:6d:29:94:97:3d:38:2b:5c:e3:c1:
b5:af:1a:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQYCgwAnnuZMYH61ONoojUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQxMjMwMTQ0ODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzViMDRlMWQwZmUyYzQ5NDA5Y2RmNWUzMjIwNDgxNTAyY2FiNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEwlk3qttU2z5LDATXzt4rqaWvvJ
55pcoLTRRbJWTjRUOiHB5oyBQqtj13W1xCy2+453TBvnK7eLD0yy699Okz2R0++r
S1AVykZW67YL+aCasWtm6fJfizUFRB7LANfnUiq3B3VclszCc5ZoJjboZW2MQMtk
SGCQY2KQlRy4A9EZKIla4iS/DM5/EWKjRhyYlLwylHmdFXAZG0FSCRj6f3N/iSOb
D7zrU3gEdeD3zy83FuQL9myqlpze60RBuj+zVrp2ovhuL1XCSmX51hLAyzZwaJ8r
0C5JcxVpLfhQzVTg747x+OG9wzf5Pvg917CrpoE8GzSqooRzlEzDya6b7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPxbBOHQ/ixJQJzfXjIgSBUCyrWcMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvX0ZzRTRkRC1MRWxBbk45ZU1pQklGUUxLdFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQFg
MA0GCSqGSIb3DQEBCwUAA4IBAQBRoni9Z3L2MiiECuWUf8RKujgXM599rdPATbUl
ltzFvkT/uC0DW3MSjqT+SkPwQ+LUBRuYXdU2l901sJEAZG4m5yXtti/mxPWUj1kX
5oX/tZSkCn83PwLmHdgqV86SxdaL4qGU9tEZ3xIqhct+QsHeJoyZa0UOmsi5+GHD
J3Eh6N84J3oKO9XHL6iQx/9CP+t2I66OfwXIn10RgnljG31jstxAnfiCK//WF2Jf
/xb5G5JevhyLRPRjmDkOg4f369xk1WRwOyvhyLez9/Wnx5zzuI/r5IWpOVXESdHY
idPs/B4fsDDkjR5sEm9vjvF1LK4MjW0plJc9OCtc48G1rxpe
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:03:58 2025 by rpki-client