Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/S_FCvdfbH_ZK63a0stUMhU8oaw8.roa
File: S_FCvdfbH_ZK63a0stUMhU8oaw8.roa (raw, json)
Hash identifier: eXZV7SJ3ck6L3XgOeiX3iX+u0/ekcILrG+TMmUo1bYY=
Subject key identifier: 4B:F1:42:BD:D7:DB:1F:F6:4A:EB:76:B4:B2:D5:0C:85:4F:28:6B:0F
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 019427B68DCB1C7E64F89E98CE1A62FCAF22
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/S_FCvdfbH_ZK63a0stUMhU8oaw8.roa
Signing time: Thu 02 Jan 2025 15:51:02 +0000
ROA not before: Thu 02 Jan 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215502
IP address blocks: 2a13:aac4:f000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8d:cb:1c:7e:64:f8:9e:98:ce:1a:62:fc:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Jan 2 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bf142bdd7db1ff64aeb76b4b2d50c854f286b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:80:a0:89:64:99:cf:3d:b9:34:ba:98:5e:
fc:b4:c8:7e:d9:da:18:e8:10:da:4e:51:8d:7a:0a:
16:07:54:08:f8:a9:af:e4:59:d9:ae:1e:02:f5:87:
e0:09:9c:27:51:e2:e1:1f:5b:14:ee:a9:4c:14:00:
11:2c:6c:99:67:85:46:6d:3c:12:4f:ad:0b:42:f1:
75:e1:cb:42:a5:85:51:c6:54:4e:22:8a:23:29:42:
d9:3e:18:ff:18:9b:85:bb:dc:4e:62:86:7c:44:d5:
10:04:bb:21:3a:8a:ff:b4:f3:57:7a:ef:db:bf:e7:
c7:c5:75:a8:e3:77:84:ac:d0:74:74:13:9f:2b:7d:
15:11:f9:12:d2:50:4c:ed:3e:25:72:16:bd:96:12:
9a:cb:77:a4:bd:34:0c:c0:42:d2:31:84:b4:68:53:
f5:96:50:08:a3:ae:20:9d:a4:84:cf:79:ac:da:86:
d3:3c:27:c8:cf:23:51:ee:cc:7b:11:3e:25:b4:d5:
87:da:e5:fb:02:17:22:73:93:9d:81:8d:c8:f5:4c:
57:b0:b0:f5:54:df:96:a6:c1:7c:9a:40:6d:f5:1d:
55:6d:54:64:5f:d7:7e:7a:e8:3c:f1:84:24:7c:25:
fe:c0:6d:6c:2f:81:90:d5:af:95:de:4c:14:42:4f:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:42:BD:D7:DB:1F:F6:4A:EB:76:B4:B2:D5:0C:85:4F:28:6B:0F
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/S_FCvdfbH_ZK63a0stUMhU8oaw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:aac4:f000::/44
Signature Algorithm: sha256WithRSAEncryption
1e:b3:54:16:1d:42:84:d2:45:8d:aa:be:a1:1a:52:d5:16:8d:
18:02:af:e7:5b:b8:b3:24:2e:23:d5:fe:24:1d:70:dc:38:a9:
cd:2e:a5:d1:47:ce:3c:a7:80:2a:b8:c8:5d:83:41:e6:4d:b3:
ec:1a:cd:28:e5:77:8e:55:e3:94:8b:b6:a2:d3:33:7a:94:7f:
16:65:ec:d9:a4:c2:9e:25:9f:8e:4f:39:7c:81:10:4b:95:cb:
64:46:86:2e:fa:3d:d4:76:61:d0:82:76:f3:04:6a:ca:f7:9e:
8b:bd:3a:fc:5e:d3:58:4a:20:9d:33:ef:16:a8:a4:16:af:60:
53:95:e6:f5:94:5f:72:3c:a5:c8:93:3c:e6:a5:8e:57:bc:46:
a6:70:fb:4b:54:bf:87:8d:e0:3a:a6:67:2f:c7:e6:64:47:03:
4d:a4:e0:b1:fb:fd:3c:72:80:81:da:c1:00:a7:d4:10:d6:e0:
7d:34:af:e2:c1:1c:d4:c5:ed:40:d2:eb:a6:f0:bc:98:66:c6:
4f:00:8d:07:46:41:be:78:14:a6:76:f7:dd:4c:ad:55:88:a9:
19:fb:2e:41:59:91:3e:39:91:4f:f8:06:08:f8:f8:8d:c0:ec:
9c:46:94:ed:64:a0:19:72:4c:ce:16:5f:99:81:83:9c:25:02:
98:0e:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:00 2025 by rpki-client