Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/fdkJ1crdoZsVaQKYKpliE3h8Iic.roa
File: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (raw, json)
Hash identifier: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=
Subject key identifier: 7D:D9:09:D5:CA:DD:A1:9B:15:69:02:98:2A:99:62:13:78:7C:22:27
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 01941F8C00E3070D8F31E22C9608F40A0691
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/fdkJ1crdoZsVaQKYKpliE3h8Iic.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35277
IP address blocks: 2a04:bc40:1dc3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:00:e3:07:0d:8f:31:e2:2c:96:08:f4:0a:06:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dd909d5cadda19b156902982a996213787c2227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:00:58:92:99:9b:be:b7:ab:bd:60:3c:bf:
e1:d1:69:56:d8:78:7b:f6:57:04:d0:25:5c:98:6b:
cf:6f:92:aa:59:90:c3:ac:73:d4:b4:f1:e3:db:eb:
4c:31:98:03:28:bf:de:aa:5c:48:07:75:50:fe:02:
6d:be:f7:45:77:65:af:71:cc:87:f4:ec:5e:cd:2b:
ac:6a:df:02:66:f9:eb:b7:9a:15:29:20:a6:16:2f:
d3:05:28:82:53:6b:80:f7:c2:03:90:db:d1:47:34:
fd:36:d1:ee:4a:c3:47:bf:28:e3:4b:d5:76:02:61:
21:d6:e1:f6:a9:f6:83:de:d9:44:b4:53:4e:4c:fc:
d4:46:ec:3b:19:e2:03:59:5c:bf:bf:06:f3:9d:31:
ca:a6:60:b7:52:dd:77:54:1d:3a:03:e9:62:d0:67:
d7:6c:17:3a:5b:a1:de:ea:32:3c:24:a2:f8:c0:44:
53:26:0f:18:ca:79:98:0a:04:fc:37:72:28:34:ff:
9b:cc:a5:da:3f:7c:c7:46:e8:9d:62:69:4e:1a:2a:
65:96:69:e5:51:22:05:76:5a:a3:30:f9:fc:5f:ff:
11:0d:08:4f:18:05:4b:6a:99:62:31:91:d2:0a:3c:
94:8e:fc:95:81:86:7d:11:7d:85:0a:d8:ee:73:58:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D9:09:D5:CA:DD:A1:9B:15:69:02:98:2A:99:62:13:78:7C:22:27
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/fdkJ1crdoZsVaQKYKpliE3h8Iic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:bc40:1dc3::/48
Signature Algorithm: sha256WithRSAEncryption
82:6c:5a:9d:1f:fa:ea:15:67:62:bd:bb:58:41:18:d8:8c:b2:
44:18:f3:44:3c:ad:e7:ec:e0:8b:c9:1f:1b:e3:f3:87:78:4f:
ba:86:78:aa:c3:4f:3e:10:15:b9:55:a9:c4:c0:1d:28:0e:03:
94:e5:c1:28:f5:1b:05:3d:b2:fb:2b:a4:9e:12:ce:5a:2f:fd:
b8:89:85:f6:03:f2:4e:a9:11:a2:90:3a:5d:de:b6:50:c3:af:
70:21:e3:75:2d:63:c2:48:76:c1:b8:cb:8f:1c:fc:52:9a:61:
b5:50:67:f9:0a:cf:43:e0:3a:dd:ca:a3:6c:73:fe:10:02:9d:
6b:f8:23:42:73:67:70:28:35:4d:e8:2a:99:15:9c:b5:d4:89:
55:55:4b:61:fa:81:84:e6:95:1c:75:ce:61:d9:e6:f3:96:f8:
91:7a:77:4f:32:2a:27:e8:d8:7d:10:d3:bd:c0:44:a3:21:4f:
11:6b:d3:57:ec:c5:ca:f5:2f:20:cf:1f:31:80:e5:d4:17:36:
a0:8f:d5:fc:d6:48:ea:26:5b:b7:64:6a:0e:03:7c:41:f4:26:
bc:b9:32:3f:3a:95:18:8b:2a:bd:34:23:15:86:82:2d:1b:f9:
38:bf:7a:f1:37:71:30:7f:86:22:cc:1d:7e:26:e3:24:40:87:
e3:cd:72:6a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjADjBw2PMeIslgj0CgaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjUwMTAxMDE0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGQ5MDlkNWNhZGRhMTliMTU2OTAyOTgyYTk5NjIxMzc4N2MyMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwngAWJKZm763q71gPL/h0WlW2Hh7
9lcE0CVcmGvPb5KqWZDDrHPUtPHj2+tMMZgDKL/eqlxIB3VQ/gJtvvdFd2WvccyH
9OxezSusat8CZvnrt5oVKSCmFi/TBSiCU2uA98IDkNvRRzT9NtHuSsNHvyjjS9V2
AmEh1uH2qfaD3tlEtFNOTPzURuw7GeIDWVy/vwbznTHKpmC3Ut13VB06A+li0GfX
bBc6W6He6jI8JKL4wERTJg8YynmYCgT8N3IoNP+bzKXaP3zHRuidYmlOGipllmnl
USIFdlqjMPn8X/8RDQhPGAVLapliMZHSCjyUjvyVgYZ9EX2FCtjuc1jGBQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH3ZCdXK3aGbFWkCmCqZYhN4fCInMB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvZmRrSjFjcmRvWnNWYVFLWUtwbGlFM2g4SWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgS8QB3D
MA0GCSqGSIb3DQEBCwUAA4IBAQCCbFqdH/rqFWdivbtYQRjYjLJEGPNEPK3n7OCL
yR8b4/OHeE+6hniqw08+EBW5VanEwB0oDgOU5cEo9RsFPbL7K6SeEs5aL/24iYX2
A/JOqRGikDpd3rZQw69wIeN1LWPCSHbBuMuPHPxSmmG1UGf5Cs9D4DrdyqNsc/4Q
Ap1r+CNCc2dwKDVN6CqZFZy11IlVVUth+oGE5pUcdc5h2ebzlviRendPMion6Nh9
ENO9wESjIU8Ra9NX7MXK9S8gzx8xgOXUFzagj9X81kjqJlu3ZGoOA3xB9Ca8uTI/
OpUYiyq9NCMVhoItG/k4v3rxN3Ewf4YizB1+JuMkQIfjzXJq
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:49:51 2025 by rpki-client