Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/FPmq8OSSYsiBNxdtDkQisxJHjxs.roa
File: FPmq8OSSYsiBNxdtDkQisxJHjxs.roa (raw, json)
Hash identifier: PJik5WcbwyhTjxUtey7B6XMGaoKOhhQG65dztoRnpyg=
Subject key identifier: 14:F9:AA:F0:E4:92:62:C8:81:37:17:6D:0E:44:22:B3:12:47:8F:1B
Certificate issuer: /CN=2aa1c6ccd085ee10fabf991e262b0b9432f6a6f9
Certificate serial: 07AD4E45
Authority key identifier: 2A:A1:C6:CC:D0:85:EE:10:FA:BF:99:1E:26:2B:0B:94:32:F6:A6:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqHGzNCF7hD6v5keJisLlDL2pvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/FPmq8OSSYsiBNxdtDkQisxJHjxs.roa
Signing time: Sat 01 Jan 2022 13:01:04 +0000
ROA not before: Sat 01 Jan 2022 13:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208437
IP address blocks: 2001:67c:1848::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128798277 (0x7ad4e45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa1c6ccd085ee10fabf991e262b0b9432f6a6f9
Validity
Not Before: Jan 1 13:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14f9aaf0e49262c88137176d0e4422b312478f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:77:86:4b:df:0b:3f:26:51:08:e1:2c:8a:
f4:75:58:8e:a2:a9:62:2d:e0:77:b8:cd:c8:0b:90:
08:c4:ac:6f:1f:84:f1:98:4a:a0:56:6a:78:a6:c4:
62:20:f4:86:ba:ff:b8:e9:8a:b2:43:94:2f:18:25:
4b:89:ec:98:7e:62:da:af:f7:5b:21:7a:15:58:75:
dd:37:c1:e5:c9:1a:39:3b:b6:f0:27:b0:35:10:1d:
68:57:51:eb:d3:af:b3:cc:88:01:08:e1:ed:90:73:
24:7e:6c:e2:11:25:f3:fe:6d:e1:02:c6:84:f1:f8:
ed:33:9c:a0:74:26:6f:ad:85:ae:ba:e6:c8:b9:f3:
fd:34:b9:5d:34:0a:3e:eb:f5:fe:62:42:9b:f2:50:
74:a8:c0:6b:76:85:d7:18:55:7f:65:7d:6b:5a:c2:
f0:8f:ae:c0:e7:34:f8:35:bd:e6:d3:ec:3a:fa:2b:
53:59:16:a7:42:d3:d5:f9:ea:ac:a3:c3:94:c2:0e:
a5:99:d9:93:ac:58:4f:24:ed:bb:04:01:09:1c:4f:
d5:82:bb:6f:c9:aa:4d:95:d8:d6:a9:19:dd:57:88:
87:29:6a:80:f8:0d:a1:1d:96:2b:2d:d6:90:16:dc:
b0:1e:6b:89:ee:cb:e1:dc:98:cf:b7:5a:e7:b3:11:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:AA:F0:E4:92:62:C8:81:37:17:6D:0E:44:22:B3:12:47:8F:1B
X509v3 Authority Key Identifier:
keyid:2A:A1:C6:CC:D0:85:EE:10:FA:BF:99:1E:26:2B:0B:94:32:F6:A6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqHGzNCF7hD6v5keJisLlDL2pvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/FPmq8OSSYsiBNxdtDkQisxJHjxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/KqHGzNCF7hD6v5keJisLlDL2pvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1848::/48
Signature Algorithm: sha256WithRSAEncryption
20:f8:9c:07:b9:21:56:ec:9a:da:dc:5b:2a:28:aa:86:33:f7:
0c:80:c1:c7:b5:15:5c:4c:cc:c7:0a:83:7c:fd:52:2f:a9:21:
ee:a7:33:4f:03:a3:a3:74:ef:ab:21:68:f4:7a:5b:af:54:d8:
e5:98:e6:f7:16:5d:91:d6:1b:c2:f5:93:8e:66:b3:aa:1b:b8:
e8:22:07:1b:88:e3:8a:fd:11:d3:a7:9c:0b:1f:d7:86:91:ce:
82:f1:cf:6e:5f:e5:0f:2b:1c:c3:f8:02:99:e4:32:1b:60:4e:
30:11:dd:5e:9a:62:ca:52:37:51:2b:19:6d:a1:50:4c:cc:8e:
46:99:26:c2:ee:97:52:01:7f:28:b4:8c:63:a5:dd:69:81:d9:
79:6f:ff:1e:d6:bf:88:d0:0e:77:5b:c6:22:f4:01:74:1b:fb:
a7:40:63:e8:75:a6:8c:57:04:84:03:ba:0f:13:37:43:44:a3:
ab:c2:25:a5:39:71:b5:1b:ed:58:18:6d:0b:b0:a6:2c:db:f2:
38:94:d1:b2:75:b6:14:0d:0c:58:6d:df:4a:3c:a7:86:dc:1f:
ed:ba:9a:c3:1c:e2:91:e9:15:91:14:84:88:ba:54:3c:e2:5a:
d1:27:d7:86:09:fe:0a:04:f6:66:fe:6e:74:78:50:9e:ed:72:
d9:7a:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:20 2025 by rpki-client