Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FgyACCfgHuImNG8T7Vxgz3XV5FY.roa
File: FgyACCfgHuImNG8T7Vxgz3XV5FY.roa (raw, json)
Hash identifier: fdZ+CL1NQZUgWs205eveGHfJOVJP8n062/wtYf/5y9M=
Subject key identifier: 16:0C:80:08:27:E0:1E:E2:26:34:6F:13:ED:5C:60:CF:75:D5:E4:56
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A510B2EFC20F7E6816ED3F3620FB4178
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FgyACCfgHuImNG8T7Vxgz3XV5FY.roa
Signing time: Mon 17 Mar 2025 17:04:49 +0000
ROA not before: Mon 17 Mar 2025 17:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:a510:50f8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:10:b2:ef:c2:0f:7e:68:16:ed:3f:36:20:fb:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 17:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=160c800827e01ee226346f13ed5c60cf75d5e456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:97:2a:28:27:77:b3:d9:4b:77:9d:51:ed:
b4:32:04:08:f5:6d:0d:7d:68:59:71:b5:d8:d4:6f:
ff:fe:35:62:03:bc:c6:09:98:24:9c:2e:db:c3:7d:
20:40:15:3b:a2:b1:15:92:0c:37:51:fb:de:d6:af:
87:23:60:b6:95:5b:32:e9:de:93:4b:69:bf:21:18:
37:c2:fc:36:88:b1:d6:a1:df:74:9f:7a:36:fe:1d:
32:50:2a:72:82:cb:de:48:dc:60:e1:a6:a9:9f:f0:
0f:32:07:ce:bc:fb:36:d1:3b:f9:8a:52:70:6c:ba:
60:e7:e8:0a:24:af:26:29:49:0c:e8:de:2e:b4:93:
62:fb:f1:17:c8:46:ca:fb:a9:fa:ea:44:78:b3:05:
87:c9:6a:fe:3f:84:36:4e:c6:d7:81:77:75:b1:5d:
12:94:cf:f1:65:75:29:84:7d:8e:58:eb:69:23:76:
b5:ab:3a:d3:1d:fe:55:3d:80:2b:f8:7f:7a:fa:99:
47:e8:1e:5a:3b:73:60:d2:65:e2:a8:ea:4f:de:ae:
76:8b:45:32:59:b0:57:d8:f7:96:28:04:7e:d8:e2:
c0:89:90:1d:b0:c6:d6:0c:d3:ad:7f:be:f1:4a:ed:
5a:fd:27:9c:d0:7b:66:42:2c:cb:7f:5f:fc:d6:91:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:80:08:27:E0:1E:E2:26:34:6F:13:ED:5C:60:CF:75:D5:E4:56
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FgyACCfgHuImNG8T7Vxgz3XV5FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:a510:50f8/128
Signature Algorithm: sha256WithRSAEncryption
97:7c:6b:f6:c4:fd:e3:3e:2d:b4:08:bd:92:73:37:a0:f4:9e:
53:34:2b:0d:3f:c0:9d:da:6f:28:cc:79:c8:ae:aa:ee:66:7f:
32:1d:34:6f:8b:0d:61:6a:e6:17:8f:af:72:4d:1c:10:15:73:
db:ba:45:78:d4:51:9f:e1:20:a0:a4:55:d4:d7:07:7a:ae:a8:
36:31:a2:92:47:45:b5:37:0b:56:33:08:dd:db:3a:3f:d5:5f:
ed:f7:e4:f7:4a:76:d5:fa:d2:25:47:87:06:ef:f7:de:60:28:
24:82:ef:c9:3a:9a:ad:fa:6b:5b:bf:82:48:42:d1:26:38:7c:
eb:c7:7b:e1:9f:9d:b7:f6:bb:99:3a:53:9d:7e:89:8b:5c:e1:
e0:aa:61:1e:c9:32:d0:85:47:71:81:16:1c:f7:3d:63:7d:4a:
16:94:64:52:14:a6:b6:dd:87:b1:3f:63:bd:a9:d9:e1:cc:14:
4a:0d:33:56:32:33:59:d9:10:92:9f:68:cf:4c:d7:be:7f:e9:
28:0a:00:7a:57:ca:f8:b1:cf:10:1b:2c:8c:c6:b8:7f:d2:c7:
d3:7e:fa:16:4c:53:b7:6b:68:f1:c1:ec:f9:4a:be:e8:85:28:
20:ca:e8:9b:18:89:b7:d0:8d:36:3a:3f:40:2a:15:8b:17:54:
c3:a6:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:34 2025 by rpki-client