Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fdVPYKdVa_4_AKiiqkus9uWKLk0.roa
File: fdVPYKdVa_4_AKiiqkus9uWKLk0.roa (raw, json)
Hash identifier: dUrwL8gICHWvpoMIvmyTvxmBT+a520WUDkfvnh0GvY8=
Subject key identifier: 7D:D5:4F:60:A7:55:6B:FE:3F:00:A8:A2:AA:4B:AC:F6:E5:8A:2E:4D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522143EAEF4FFDFEE1EE1E519D7DCCE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fdVPYKdVa_4_AKiiqkus9uWKLk0.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203899
IP address blocks: 2a0e:b107:1b20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:14:3e:ae:f4:ff:df:ee:1e:e1:e5:19:d7:dc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dd54f60a7556bfe3f00a8a2aa4bacf6e58a2e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:15:b0:59:f6:2b:23:41:9a:fe:65:d7:d5:
8f:bd:5e:05:50:8c:cf:d2:02:83:07:32:f2:bb:47:
4f:2b:fa:45:87:69:1c:fb:cd:ba:c7:e3:c9:c4:35:
4b:e2:95:57:37:33:b1:b3:25:82:25:60:eb:01:cd:
e9:8e:ed:37:46:14:47:4b:96:01:36:77:1f:be:7a:
b7:de:2b:64:e3:d9:2d:3e:4e:5c:cb:1f:11:14:8d:
3b:8c:d6:73:83:61:04:60:67:0a:21:d4:44:f9:49:
2f:20:a0:33:e4:de:09:4b:84:4f:4a:8b:a8:5b:3f:
70:f1:5a:67:95:d1:29:7b:7f:46:13:bd:00:21:af:
24:26:54:7d:34:82:90:b2:4c:05:05:04:6a:4d:e5:
4b:c9:45:da:d4:bf:8f:50:cd:28:e4:34:b0:aa:30:
c4:70:4c:93:d3:1b:e4:94:0d:80:6e:40:07:e7:25:
f7:98:d1:b9:19:9b:03:ef:ec:73:d2:0c:00:d2:9e:
1f:f3:c7:d1:e4:d6:a4:de:c9:c0:89:df:8a:3c:22:
6c:33:8f:83:b6:98:de:3e:e9:ed:48:4c:6e:dc:29:
08:27:49:f2:5b:86:78:f5:dc:f8:44:ac:84:17:b7:
c8:37:6b:b7:c5:8c:23:50:97:3b:14:e5:ee:32:b6:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:4F:60:A7:55:6B:FE:3F:00:A8:A2:AA:4B:AC:F6:E5:8A:2E:4D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fdVPYKdVa_4_AKiiqkus9uWKLk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1b20::/44
Signature Algorithm: sha256WithRSAEncryption
1d:9e:2f:76:11:2f:77:bb:3d:df:cd:34:14:2a:23:98:b3:33:
47:71:8c:d9:51:14:34:f7:8c:58:90:ad:45:9a:6e:09:78:d6:
83:1a:2a:5d:b5:cf:01:55:c8:80:c3:60:99:81:a6:e7:ff:96:
1d:e7:2a:39:1c:f9:b8:d6:2d:64:53:bb:25:80:d0:da:2e:8d:
6e:8a:d8:55:af:c2:36:36:c7:d4:20:7c:bd:66:31:4b:19:e7:
b4:40:cd:f4:71:2c:80:af:0f:80:f2:8a:54:cf:25:49:d5:bd:
57:e9:7b:21:74:f8:be:ff:5c:f9:5a:58:b9:2a:bb:87:43:b4:
2f:3b:59:4a:98:3c:84:e1:1e:62:57:41:2a:c4:0e:85:7b:cf:
03:48:a7:9a:a8:01:ca:c1:1e:a5:cd:f1:1a:16:a0:d9:a7:b6:
f1:35:fc:90:62:f2:86:1d:ca:5e:2b:d4:62:e3:ab:05:31:c8:
0b:c7:6e:4b:15:84:9d:2d:94:ff:ed:3c:5f:6a:14:02:38:2b:
9c:b7:a1:fb:4f:a4:69:24:79:58:21:ba:09:3d:38:fd:4a:54:
c6:1f:55:25:47:5e:c1:90:41:ec:0e:06:db:73:47:ee:70:f0:
76:0c:5b:a3:b8:ed:86:ce:55:60:3a:0f:4d:86:1e:a6:d9:0c:
e8:b6:09:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIhQ+rvT/3+4e4eUZ19zOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGQ1NGY2MGE3NTU2YmZlM2YwMGE4YTJhYTRiYWNmNmU1OGEyZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQMVsFn2KyNBmv5l19WPvV4FUIzP
0gKDBzLyu0dPK/pFh2kc+826x+PJxDVL4pVXNzOxsyWCJWDrAc3pju03RhRHS5YB
Nncfvnq33itk49ktPk5cyx8RFI07jNZzg2EEYGcKIdRE+UkvIKAz5N4JS4RPSouo
Wz9w8VpnldEpe39GE70AIa8kJlR9NIKQskwFBQRqTeVLyUXa1L+PUM0o5DSwqjDE
cEyT0xvklA2AbkAH5yX3mNG5GZsD7+xz0gwA0p4f88fR5Nak3snAid+KPCJsM4+D
tpjePuntSExu3CkIJ0nyW4Z49dz4RKyEF7fIN2u3xYwjUJc7FOXuMrY2+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH3VT2CnVWv+PwCooqpLrPblii5NMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZmRWUFlLZFZhXzRfQUtpaXFrdXM5dVdLTGswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxsg
MA0GCSqGSIb3DQEBCwUAA4IBAQAdni92ES93uz3fzTQUKiOYszNHcYzZURQ094xY
kK1Fmm4JeNaDGipdtc8BVciAw2CZgabn/5Yd5yo5HPm41i1kU7slgNDaLo1uithV
r8I2NsfUIHy9ZjFLGee0QM30cSyArw+A8opUzyVJ1b1X6XshdPi+/1z5Wli5KruH
Q7QvO1lKmDyE4R5iV0EqxA6Fe88DSKeaqAHKwR6lzfEaFqDZp7bxNfyQYvKGHcpe
K9Ri46sFMcgLx25LFYSdLZT/7TxfahQCOCuct6H7T6RpJHlYIboJPTj9SlTGH1Ul
R17BkEHsDgbbc0fucPB2DFujuO2GzlVgOg9Nhh6m2Qzotgmx
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:59 2025 by rpki-client