Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa
File: FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa (raw, json)
Hash identifier: V2QfXGuoABf0nSRm/Oq1C+rnj29jR40BHTTOPTu5Dlw=
Subject key identifier: 16:4B:82:FF:AF:51:75:62:F1:D5:8D:2C:AD:13:B6:95:3B:76:42:7F
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 019422FC4E2327FB33E8195F58C37113D3E0
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210805
IP address blocks: 2a0a:2786::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4e:23:27:fb:33:e8:19:5f:58:c3:71:13:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164b82ffaf517562f1d58d2cad13b6953b76427f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:bf:f5:9b:9b:4e:1b:52:31:ab:a9:31:17:
da:95:95:d2:98:e1:05:ce:4f:3c:02:65:f8:f5:d0:
7e:e8:23:82:4b:3a:a7:d3:37:ae:0c:8a:f6:c8:8c:
58:b7:90:30:db:3f:57:56:9f:0c:be:cb:07:ed:2a:
f1:c5:ac:c8:ce:1d:c8:52:c4:3c:1b:27:90:0c:27:
63:4e:6e:e7:bf:51:5d:2f:ce:00:ad:94:45:64:7e:
bb:95:16:da:28:80:c2:0a:4a:12:5a:b1:7c:cd:65:
34:01:d7:01:83:2a:48:5c:ea:45:3f:02:5f:b1:0a:
f9:29:50:cf:d5:43:71:da:b3:93:c7:18:97:a3:84:
1e:43:e6:60:2a:cc:8f:52:4c:93:a3:6a:a8:d0:f9:
af:14:53:96:f8:34:e9:50:82:39:a0:5d:f6:f1:c8:
d0:29:3f:1c:5d:72:24:d5:91:1e:53:95:a1:d0:cc:
a0:0e:53:1f:26:f7:fc:4b:00:ac:2e:d0:b3:95:59:
17:3c:ff:42:dc:a7:bd:d9:57:10:8e:cc:6c:2f:49:
f6:cc:04:77:8c:4d:4e:ad:94:89:02:22:22:e1:74:
ff:ea:73:f9:2b:ab:64:43:24:b0:c5:75:07:26:68:
a6:f7:cb:62:0b:24:54:67:f1:68:d5:e3:de:5a:14:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:82:FF:AF:51:75:62:F1:D5:8D:2C:AD:13:B6:95:3B:76:42:7F
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2786::/32
Signature Algorithm: sha256WithRSAEncryption
1f:76:7b:fd:44:70:9a:c0:d1:45:d1:1d:5b:46:bc:72:95:dd:
29:37:35:35:74:d7:73:d3:43:3d:d2:f1:51:e4:8e:e1:65:0f:
52:6e:c2:e9:24:f1:e0:94:c9:1b:3f:0b:63:fd:e3:b9:d5:0f:
9c:ec:a3:75:a7:2f:fd:c4:a0:49:ad:37:35:59:7e:a3:8a:c7:
5d:d1:4a:a4:9e:ab:32:a7:0d:da:0a:8a:db:18:70:62:f4:f2:
58:0b:46:ea:b1:25:7d:b6:5d:2d:6c:08:27:e5:73:dc:e5:a5:
bf:b7:86:27:8a:38:36:aa:84:85:d7:e5:54:7c:7a:93:71:8b:
54:c1:31:3c:03:3d:be:dc:c6:b5:94:6d:33:85:6b:bd:43:fb:
30:50:0f:a5:a4:ed:db:1b:8f:9e:f7:74:e6:30:c4:4d:16:75:
60:b3:b8:28:de:58:a5:7b:00:4f:bb:60:39:00:7b:57:59:9e:
32:c4:92:32:d8:ca:74:36:89:dd:1a:82:b5:a9:ce:73:04:b4:
0c:3c:b3:6d:c4:88:5f:77:f0:0b:af:9e:55:21:32:fe:a3:4c:
eb:73:26:51:11:47:42:b9:0e:70:60:76:5f:bd:e2:a5:94:9e:
57:e4:08:c9:30:53:26:fa:b3:bc:e4:fe:e0:88:f9:89:ce:1d:
bc:0d:1b:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQi/E4jJ/sz6BlfWMNxE9PgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz
NGI0MTMwHhcNMjUwMTAxMTc0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRiODJmZmFmNTE3NTYyZjFkNThkMmNhZDEzYjY5NTNiNzY0MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLu/9ZubThtSMaupMRfalZXSmOEF
zk88AmX49dB+6COCSzqn0zeuDIr2yIxYt5Aw2z9XVp8MvssH7SrxxazIzh3IUsQ8
GyeQDCdjTm7nv1FdL84ArZRFZH67lRbaKIDCCkoSWrF8zWU0AdcBgypIXOpFPwJf
sQr5KVDP1UNx2rOTxxiXo4QeQ+ZgKsyPUkyTo2qo0PmvFFOW+DTpUII5oF328cjQ
KT8cXXIk1ZEeU5Wh0MygDlMfJvf8SwCsLtCzlVkXPP9C3Ke92VcQjsxsL0n2zAR3
jE1OrZSJAiIi4XT/6nP5K6tkQySwxXUHJmim98tiCyRUZ/Fo1ePeWhQtdQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBZLgv+vUXVi8dWNLK0TtpU7dkJ/MB8GA1UdIwQY
MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt
MzY2NTA2N2RiMjU2LzEvRmt1Q182OVJkV0x4MVkwc3JSTzJsVHQyUW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2
LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgonhjAN
BgkqhkiG9w0BAQsFAAOCAQEAH3Z7/URwmsDRRdEdW0a8cpXdKTc1NXTXc9NDPdLx
UeSO4WUPUm7C6STx4JTJGz8LY/3judUPnOyjdacv/cSgSa03NVl+o4rHXdFKpJ6r
MqcN2gqK2xhwYvTyWAtG6rElfbZdLWwIJ+Vz3OWlv7eGJ4o4NqqEhdflVHx6k3GL
VMExPAM9vtzGtZRtM4VrvUP7MFAPpaTt2xuPnvd05jDETRZ1YLO4KN5YpXsAT7tg
OQB7V1meMsSSMtjKdDaJ3RqCtanOcwS0DDyzbcSIX3fwC6+eVSEy/qNM63MmURFH
QrkOcGB2X73ipZSeV+QIyTBTJvqzvOT+4Ij5ic4dvA0bYg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:54:03 2025 by rpki-client