Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/F4hvDZQGL_CaGunooLtvQNNR8YE.roa
File: F4hvDZQGL_CaGunooLtvQNNR8YE.roa (raw, json)
Hash identifier: sGcdsCYe33hU1jgtZCtWFCvefkLQ3ppc1cRqyvluC20=
Subject key identifier: 17:88:6F:0D:94:06:2F:F0:9A:1A:E9:E8:A0:BB:6F:40:D3:51:F1:81
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01941D3A795A84157FF8EB8BD2CE4EC62383
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/F4hvDZQGL_CaGunooLtvQNNR8YE.roa
Signing time: Tue 31 Dec 2024 14:59:18 +0000
ROA not before: Tue 31 Dec 2024 14:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213663
IP address blocks: 2a13:a5c3:f100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1d:3a:79:5a:84:15:7f:f8:eb:8b:d2:ce:4e:c6:23:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Dec 31 14:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17886f0d94062ff09a1ae9e8a0bb6f40d351f181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:2a:d5:b8:40:d3:c9:47:75:84:ce:a4:69:
40:39:40:47:82:a5:fe:dc:c5:d7:6d:66:ad:3c:76:
8e:47:0b:8e:40:68:26:ba:c9:d2:af:a0:c9:c1:20:
1e:47:85:ae:19:27:9c:24:6b:e7:b7:50:82:53:31:
2f:1b:de:a4:b1:65:a5:27:cd:8e:80:b6:a1:b2:21:
73:bd:41:32:cd:c8:4b:d7:8f:ac:c6:49:1a:f0:fb:
6f:f4:98:b8:46:90:e5:09:fb:43:6e:8c:cc:af:75:
09:78:cc:88:a4:e4:35:e4:1c:69:1e:46:ba:3f:80:
60:95:3e:3c:7b:42:4d:41:87:0a:2c:00:fd:11:05:
01:6c:86:86:e5:d1:46:7a:2f:90:a8:7d:54:d4:84:
ee:9c:f6:ae:5b:cf:c3:15:1d:ec:08:b8:d6:31:be:
35:08:46:94:f3:a0:82:06:73:dd:0a:97:97:51:21:
cb:cb:a7:48:85:55:74:ec:76:db:f4:91:8b:34:d0:
8e:8e:78:bc:50:1c:aa:87:29:43:14:a5:89:e9:05:
d4:16:c5:b3:d0:63:87:b2:51:ac:bf:6c:55:4c:4f:
14:ee:bf:11:2d:f6:a1:b7:f3:ea:08:00:b7:9c:f4:
ba:30:03:b8:6f:15:aa:1c:73:08:6f:81:3d:fb:3b:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:88:6F:0D:94:06:2F:F0:9A:1A:E9:E8:A0:BB:6F:40:D3:51:F1:81
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/F4hvDZQGL_CaGunooLtvQNNR8YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:f100::/40
Signature Algorithm: sha256WithRSAEncryption
0f:f6:1c:03:95:94:45:d9:2a:cc:94:7c:88:f6:b9:b0:ad:86:
fa:5d:0d:97:1c:d7:e1:c9:16:aa:a7:82:bb:36:4a:9b:36:d1:
1a:db:3c:57:6f:29:dc:68:10:96:3d:87:56:49:b4:ee:30:2d:
6e:a9:5c:a0:0d:cd:8d:94:48:b0:74:2b:f2:b7:99:bd:ea:31:
51:e7:45:bc:57:b7:45:7d:c7:56:01:f4:2a:9b:16:68:2b:a2:
d4:1f:ef:ff:db:f2:f0:a4:52:5c:3b:af:34:70:2b:f1:99:0a:
4c:18:55:43:15:88:21:7e:ea:09:23:b0:7a:0c:46:87:50:35:
a9:da:b5:38:a7:07:58:4c:f8:c7:19:4d:57:7d:a5:9c:64:ab:
d1:67:84:c9:ca:6b:7f:50:dd:90:97:b6:03:85:5d:55:ed:e4:
3e:e0:dd:77:bd:07:d3:58:e7:cf:b8:b9:43:17:b1:f1:70:db:
13:20:b1:21:3e:f3:19:14:ec:23:93:d1:e5:fa:eb:35:a6:9f:
62:f4:10:91:a1:0e:f4:d8:66:3f:fb:f2:c4:96:d8:9f:a8:65:
82:54:f6:4d:a0:12:4e:ad:73:86:bb:65:67:f1:fb:44:12:91:
d7:fa:61:80:31:20:c0:4b:69:4a:b1:8f:aa:7f:8a:d9:00:ac:
1a:86:c7:7a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQdOnlahBV/+OuL0s5OxiODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjQxMjMxMTQ1OTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzg4NmYwZDk0MDYyZmYwOWExYWU5ZThhMGJiNmY0MGQzNTFmMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrQq1bhA08lHdYTOpGlAOUBHgqX+
3MXXbWatPHaORwuOQGgmusnSr6DJwSAeR4WuGSecJGvnt1CCUzEvG96ksWWlJ82O
gLahsiFzvUEyzchL14+sxkka8Ptv9Ji4RpDlCftDbozMr3UJeMyIpOQ15BxpHka6
P4BglT48e0JNQYcKLAD9EQUBbIaG5dFGei+QqH1U1ITunPauW8/DFR3sCLjWMb41
CEaU86CCBnPdCpeXUSHLy6dIhVV07Hbb9JGLNNCOjni8UByqhylDFKWJ6QXUFsWz
0GOHslGsv2xVTE8U7r8RLfaht/PqCAC3nPS6MAO4bxWqHHMIb4E9+zsS3wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBeIbw2UBi/wmhrp6KC7b0DTUfGBMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvRjRodkRaUUdMX0NhR3Vub29MdHZRTk5SOFlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlw/Ew
DQYJKoZIhvcNAQELBQADggEBAA/2HAOVlEXZKsyUfIj2ubCthvpdDZcc1+HJFqqn
grs2Sps20RrbPFdvKdxoEJY9h1ZJtO4wLW6pXKANzY2USLB0K/K3mb3qMVHnRbxX
t0V9x1YB9CqbFmgrotQf7//b8vCkUlw7rzRwK/GZCkwYVUMViCF+6gkjsHoMRodQ
NanatTinB1hM+McZTVd9pZxkq9FnhMnKa39Q3ZCXtgOFXVXt5D7g3Xe9B9NY58+4
uUMXsfFw2xMgsSE+8xkU7COT0eX66zWmn2L0EJGhDvTYZj/78sSW2J+oZYJU9k2g
Ek6tc4a7ZWfx+0QSkdf6YYAxIMBLaUqxj6p/itkArBqGx3o=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:46:36 2025 by rpki-client