Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/fzIooMteuwVIr67R1wjr82KU7Ng.roa
File: fzIooMteuwVIr67R1wjr82KU7Ng.roa (raw, json)
Hash identifier: 5UjbNUcVpz6hdIx4cv3M2Xi55wHsGc2R44CezEHwXts=
Subject key identifier: 7F:32:28:A0:CB:5E:BB:05:48:AF:AE:D1:D7:08:EB:F3:62:94:EC:D8
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018570B069362BC7B6950AD9870172DB1438
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/fzIooMteuwVIr67R1wjr82KU7Ng.roa
Signing time: Mon 02 Jan 2023 04:14:47 +0000
ROA not before: Mon 02 Jan 2023 04:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211358
IP address blocks: 2a05:b0c6:5001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:69:36:2b:c7:b6:95:0a:d9:87:01:72:db:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 04:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f3228a0cb5ebb0548afaed1d708ebf36294ecd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:d2:44:7d:09:0b:d8:fd:fa:ae:2c:4a:36:
e3:3c:98:c9:da:31:ee:44:d6:da:37:b3:25:2a:5b:
86:b2:82:b8:17:20:27:2f:57:e9:21:51:55:f1:11:
4f:df:f2:3c:f0:e7:b0:ad:fd:d2:f0:fb:3e:95:e8:
0a:4f:de:2b:39:27:78:c4:ed:98:d5:7e:43:48:f9:
6c:3f:56:32:0b:e7:d1:db:7a:37:f7:25:ea:69:a3:
d6:d9:4d:4e:c6:d7:bf:57:f5:89:ab:a4:91:34:27:
42:a5:66:8b:d2:ab:b7:24:fe:0a:c6:db:67:35:84:
9d:81:9a:bc:2a:f1:7f:88:07:45:0d:59:90:02:ea:
55:c1:0a:71:8c:30:ae:fd:5e:d8:ae:34:d0:57:dc:
25:f5:8e:9f:f2:56:ef:9d:ad:f8:f4:11:01:bd:e3:
c1:b6:65:5f:ee:fa:04:a6:36:a7:3e:c2:f8:1b:8d:
3d:04:21:3d:fa:ba:18:9c:46:71:aa:ff:c1:16:0c:
ac:4b:1e:a5:79:a0:d1:28:31:c8:08:c4:fa:33:7c:
a0:d3:ae:03:d1:6d:60:ff:d0:4e:26:9d:85:19:84:
19:e6:92:63:6b:6b:2c:87:51:66:8b:f2:a8:37:2d:
e9:44:ce:1c:8c:2a:96:79:6c:c2:32:09:48:dd:48:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:28:A0:CB:5E:BB:05:48:AF:AE:D1:D7:08:EB:F3:62:94:EC:D8
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/fzIooMteuwVIr67R1wjr82KU7Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:5001::/48
Signature Algorithm: sha256WithRSAEncryption
0b:d4:1b:8d:03:34:f5:5e:36:92:7a:18:43:f7:6b:2e:61:04:
e6:ab:87:15:81:7e:b4:0e:79:89:eb:c2:ad:02:60:1d:ed:d6:
08:89:5c:18:de:41:f2:96:c5:55:6c:e7:06:f4:11:f4:f0:09:
6a:fc:99:b0:e7:4d:9c:4f:68:df:f2:9e:16:35:5d:8f:24:45:
55:a3:b1:07:63:38:ee:d9:44:70:29:44:a6:29:b0:82:90:4c:
e9:5d:a5:6d:1c:83:30:9b:cb:84:13:52:8b:ae:4e:9a:63:e3:
27:25:5e:b6:d9:e0:d5:d0:d0:c8:d1:f6:50:6e:c9:98:e3:9b:
ed:7e:5c:8c:a7:ff:26:89:05:92:46:f6:cd:58:27:c5:e8:f2:
bc:e2:26:a1:56:6a:6a:f3:91:fa:52:e2:f1:b2:59:ab:99:1c:
cd:eb:c0:92:04:b9:5a:2d:6e:12:00:69:cd:bb:46:4c:3d:85:
45:4a:a6:a6:e6:9f:ca:b7:cc:d2:5f:51:8d:b2:88:e6:fb:9b:
40:c6:1b:0e:03:b0:69:cc:c4:09:a4:fb:71:9a:58:58:a6:70:
9b:50:2d:59:b1:8c:78:5e:e5:eb:13:67:0e:8e:53:ce:48:e7:
e2:27:4b:b8:78:7e:43:b8:5c:93:8c:17:1a:17:d1:c0:ce:1c:
00:e8:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:56 2025 by rpki-client