Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/8_fakKxo1IWGgqQO4LSuBNgbX1A.roa
File: 8_fakKxo1IWGgqQO4LSuBNgbX1A.roa (raw, json)
Hash identifier: mKTIf5Vhn/rPPi27Si4S/aAUjmxjU05O8m3X6BZqHi4=
Subject key identifier: F3:F7:DA:90:AC:68:D4:85:86:82:A4:0E:E0:B4:AE:04:D8:1B:5F:50
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01955AE5206456EF25B849D2882E5E83E2C5
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/8_fakKxo1IWGgqQO4LSuBNgbX1A.roa
Signing time: Mon 03 Mar 2025 07:25:20 +0000
ROA not before: Mon 03 Mar 2025 07:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2a13:a5c7:1703::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:e5:20:64:56:ef:25:b8:49:d2:88:2e:5e:83:e2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Mar 3 07:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3f7da90ac68d4858682a40ee0b4ae04d81b5f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:e7:ee:c5:8f:58:b3:71:18:80:73:78:24:
c5:6c:b1:9f:15:91:69:63:c3:1d:5f:f5:31:ea:2d:
46:e7:b9:01:41:ea:c6:e0:75:06:b9:c2:a2:69:37:
2e:d1:16:7f:46:15:8b:f2:c2:16:68:56:68:ab:be:
ed:6d:e7:b1:6f:5c:b8:fd:40:8a:c2:b9:fd:8a:a3:
7a:25:23:22:32:e0:f7:68:69:c6:f9:30:6c:51:9b:
d4:fd:e3:d9:fa:d5:e8:87:15:d5:5f:50:cb:f3:d6:
92:12:fe:8c:24:3d:66:12:77:ca:7e:37:bc:1e:ff:
22:3e:5d:ff:95:19:50:54:e0:67:db:e3:05:2f:7c:
f7:2f:4c:8c:d7:7c:5c:68:ac:f9:ed:82:1d:c6:f4:
2b:dd:06:39:5b:3f:ec:9f:f3:ae:3c:df:c4:81:cb:
df:ae:0c:c5:78:86:90:59:15:3b:a4:5f:2a:61:cd:
62:5f:30:27:f3:f4:96:b4:f0:46:78:20:b4:5b:ee:
b0:d2:72:b5:25:93:b3:95:82:4e:21:a5:7b:06:28:
92:b5:8b:7d:b5:ea:28:70:47:73:44:49:de:4f:67:
01:73:0a:bc:65:2d:0d:32:01:b5:85:a6:2c:a7:3f:
35:cd:7f:87:98:81:88:1e:63:1a:ff:bc:43:89:63:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:DA:90:AC:68:D4:85:86:82:A4:0E:E0:B4:AE:04:D8:1B:5F:50
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/8_fakKxo1IWGgqQO4LSuBNgbX1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1703::/48
Signature Algorithm: sha256WithRSAEncryption
4a:83:2e:37:af:98:0a:ae:02:f0:d2:09:3c:1f:92:d0:b2:d9:
55:3e:9b:31:d5:fe:00:fb:c3:38:0a:31:34:cf:8f:c1:be:28:
c6:44:b3:33:90:5b:68:c6:74:2f:50:05:ba:2d:2a:12:67:35:
66:64:69:5a:81:7f:04:a8:01:eb:db:e3:1b:8b:4c:75:cf:16:
59:3f:6c:bd:fc:70:a5:c3:37:be:95:88:70:87:bb:57:56:d0:
c1:78:97:e5:9a:6e:20:f8:36:40:92:18:58:b6:87:54:0f:ae:
66:a8:7a:ed:73:8f:be:e4:7a:86:bd:bd:3d:b9:91:4a:a0:04:
8c:6c:fa:6c:5c:a8:8d:0c:eb:25:72:33:6f:f4:b5:cf:45:2c:
c8:9c:3f:9c:31:bd:bb:ff:d8:87:c7:7d:cf:fb:34:fb:4e:b1:
d0:96:cc:48:8e:fe:07:ad:74:8b:4b:73:5b:c8:50:39:86:7b:
e6:03:84:4a:60:80:f6:ec:24:5a:2b:d8:2b:32:cd:29:ca:f7:
4f:dc:63:4a:c1:ed:2b:2c:15:45:b6:01:8b:a2:f9:db:71:e2:
0e:ef:13:e0:b1:7d:22:ba:67:6d:61:ce:54:42:83:d7:60:cc:
4e:02:46:d7:ee:8a:c6:e4:fd:5c:5f:be:bf:94:14:30:f5:6a:
92:3d:eb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:28 2025 by rpki-client