Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/FA9CBbnU7PsW22o-C1xzDm46xxM.roa
File: FA9CBbnU7PsW22o-C1xzDm46xxM.roa (raw, json)
Hash identifier: wkYa6YDtl1BC0W4pE9u0cKuCpXE+S8HAcKyHBLB3CWI=
Subject key identifier: 14:0F:42:05:B9:D4:EC:FB:16:DB:6A:3E:0B:5C:73:0E:6E:3A:C7:13
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 0195991A423E2706DD1A6109EBCCAA862A56
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/FA9CBbnU7PsW22o-C1xzDm46xxM.roa
Signing time: Sat 15 Mar 2025 09:19:49 +0000
ROA not before: Sat 15 Mar 2025 09:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209782
IP address blocks: 2a09:2b80:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:99:1a:42:3e:27:06:dd:1a:61:09:eb:cc:aa:86:2a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 15 09:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140f4205b9d4ecfb16db6a3e0b5c730e6e3ac713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:24:62:49:f7:25:30:a5:42:e6:72:f1:41:
58:30:bb:ca:a1:7d:1f:2d:6f:71:83:42:6a:bb:d7:
2a:33:dc:ef:12:da:19:62:35:e8:40:14:31:f0:1c:
80:02:5e:f0:67:3e:bd:4e:67:9c:9e:af:86:5d:27:
7a:d2:4c:82:7b:a3:b6:53:89:d0:c8:e8:1d:5e:5e:
43:7c:25:dc:a7:68:7d:8f:a8:81:b7:35:2f:68:b8:
bf:af:63:70:bd:4a:80:54:3d:c4:9f:ca:80:8f:fb:
9f:cb:29:19:a7:cd:3f:93:08:b6:a4:86:d0:c0:78:
00:93:8c:6e:f7:75:98:4c:d0:72:29:3a:40:cc:fd:
1d:9f:19:49:14:e1:f2:56:e9:8a:12:b3:ec:8b:4c:
8e:7c:17:20:9d:da:6d:0c:24:dc:a6:a8:7d:d5:c8:
4b:e7:ce:96:4b:f1:14:44:88:6d:b1:5f:10:68:49:
d0:bc:78:04:86:7f:76:d5:c6:8d:6e:96:58:48:92:
0d:19:27:d2:6a:e5:bc:44:82:cf:bf:75:1e:0c:40:
7b:c6:78:56:cc:a6:67:4d:94:68:cc:f7:44:6b:36:
d9:24:0f:76:9f:c0:84:a6:f5:9d:49:b3:21:99:cf:
cc:8c:58:ed:0b:a4:9f:bb:58:1c:d4:a8:8d:c2:a7:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:42:05:B9:D4:EC:FB:16:DB:6A:3E:0B:5C:73:0E:6E:3A:C7:13
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/FA9CBbnU7PsW22o-C1xzDm46xxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:15::/48
Signature Algorithm: sha256WithRSAEncryption
03:7b:4b:6c:f7:ca:c2:ae:b1:80:b5:fd:c6:35:d0:73:a2:75:
d6:7e:41:b4:94:5a:2d:3e:0a:c7:48:21:e8:ed:5c:91:99:3c:
a3:4e:7f:01:1b:35:a4:04:94:ba:bd:37:3a:bb:16:71:2f:ad:
1d:5a:6f:a6:d2:6d:cf:af:dc:32:d9:b9:da:c7:18:79:bc:23:
ab:a1:c7:6e:0f:f2:7e:8f:ea:00:33:1b:53:12:a1:44:8f:ea:
2a:24:fb:98:1f:cd:a4:20:f7:9c:fd:6f:ed:be:f4:f0:7d:1c:
e7:74:b1:ab:8f:ba:59:0b:b2:71:3e:a0:7f:07:c6:10:a4:fe:
eb:62:5e:5b:5f:e9:5b:66:23:87:97:ef:c1:f7:b5:50:52:69:
a0:d6:5b:27:bf:13:e4:04:3b:9e:8a:c9:16:9b:0a:25:a8:e4:
66:ee:e8:aa:9d:b4:42:b1:7b:f9:e3:77:0e:23:3a:74:1a:26:
19:9a:0a:13:6b:d6:32:7b:e5:e4:79:17:33:56:ce:f0:f0:5a:
5c:0f:55:f1:43:01:4f:5e:d1:44:26:0f:63:60:a9:f0:5e:3b:
8a:1b:f3:fc:ad:68:32:3e:7f:ec:8e:75:af:80:9e:ca:29:25:
36:36:00:56:aa:57:83:f9:2b:af:69:18:7b:e2:08:90:bd:16:
bc:57:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:03:37 2025 by rpki-client