Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/FZ5EZpDq-K0XA4SjrzGHyd153to.roa
File: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (raw, json)
Hash identifier: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=
Subject key identifier: 15:9E:44:66:90:EA:F8:AD:17:03:84:A3:AF:31:87:C9:DD:79:DE:DA
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0194228E42E7CFD6CDB9E9D87420BB2AF73A
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/FZ5EZpDq-K0XA4SjrzGHyd153to.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8315
IP address blocks: 2001:678:76c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:42:e7:cf:d6:cd:b9:e9:d8:74:20:bb:2a:f7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=159e446690eaf8ad170384a3af3187c9dd79deda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:fc:79:74:45:f4:4c:7a:b8:19:7e:1c:48:
d9:71:88:ab:c8:f8:99:28:e5:33:42:f8:53:6b:88:
03:9f:2d:9c:23:45:6f:da:84:98:0e:b8:58:41:cd:
ab:05:60:7c:fb:83:0a:b5:61:ae:55:fd:0d:75:9b:
a6:6c:26:ac:5f:1f:10:91:bd:d8:fc:e5:ad:8b:21:
f1:97:57:a9:a5:6c:90:e3:53:d5:5c:27:87:b5:cc:
3e:62:6d:13:ea:45:95:01:17:a4:50:d1:53:b2:8b:
b7:f1:8c:7b:fd:7a:3d:c6:ec:67:0f:39:bc:7a:bd:
e0:8b:72:62:c3:31:55:3b:b8:57:cb:c7:5e:46:28:
7b:a7:b8:fc:3e:36:b9:f3:f5:e4:cb:3d:2f:5d:7c:
1b:7a:c4:35:64:43:12:6d:2f:60:a9:fd:44:53:45:
64:b1:03:85:86:3c:6e:25:09:91:97:1e:43:8e:bd:
52:be:ad:2c:a2:5a:4f:7f:78:97:ff:3f:b7:4e:e1:
a3:76:2d:12:02:58:b9:23:81:f8:c6:71:32:63:af:
37:ec:15:f7:7a:38:c9:29:e5:a3:20:ee:38:fc:cb:
b1:b4:09:e2:4a:9e:32:7f:dc:99:e3:e7:93:26:63:
85:64:8f:7a:8b:37:c3:04:23:85:e1:c1:5b:32:6e:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9E:44:66:90:EA:F8:AD:17:03:84:A3:AF:31:87:C9:DD:79:DE:DA
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/FZ5EZpDq-K0XA4SjrzGHyd153to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:76c::/48
Signature Algorithm: sha256WithRSAEncryption
10:e8:f0:12:ab:99:be:77:a4:63:6c:a7:34:43:88:79:0b:0f:
30:23:c8:b0:8d:bf:66:c8:80:96:b8:99:48:3c:ea:3d:35:87:
4e:48:38:6d:90:33:8d:f2:6b:5c:ff:88:c3:42:54:69:98:44:
e9:e5:2a:53:81:ec:02:b5:c0:19:18:0a:3f:b8:59:24:69:de:
cc:00:7f:7f:a3:10:75:75:54:d7:8c:b2:d0:8b:66:21:ad:1a:
42:ac:76:5a:89:29:a6:16:d7:ed:15:99:d9:08:69:63:72:a2:
cf:a6:df:08:98:17:e2:7b:2d:ac:af:ad:ce:fc:25:4b:74:78:
32:35:fc:60:0e:6a:d0:08:96:61:34:97:7f:e8:bc:14:43:88:
84:2b:06:39:e1:37:f9:b8:14:8a:b4:81:c7:2c:7e:72:68:25:
f3:5c:46:e8:b9:06:14:ab:2f:fd:93:7a:7f:69:0c:15:4e:bd:
60:be:0b:bc:25:42:1d:28:3d:9b:2d:c1:2b:9a:4d:f1:2c:0c:
65:0c:fd:42:a1:ea:ea:76:93:4a:13:d5:ef:da:e7:e8:a4:e9:
5a:51:9c:9e:9b:1d:3d:20:1d:bd:14:fd:a2:22:64:05:aa:e5:
25:a4:0d:cd:46:f7:83:8b:04:30:b0:0d:99:8f:7c:d4:c9:3a:
8a:ba:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:18 2025 by rpki-client