Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/Fq0sc2OPDXysO8vUHb7ZnGoOhHs.roa
File: Fq0sc2OPDXysO8vUHb7ZnGoOhHs.roa (raw, json)
Hash identifier: J/sFuDLXCmMs697buhkjkHNmhkF494+DEiPN7MZMT8I=
Subject key identifier: 16:AD:2C:73:63:8F:0D:7C:AC:3B:CB:D4:1D:BE:D9:9C:6A:0E:84:7B
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 01856D4ADC846943F4FAEAF8CB10CF85CC1D
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/Fq0sc2OPDXysO8vUHb7ZnGoOhHs.roa
Signing time: Sun 01 Jan 2023 12:25:00 +0000
ROA not before: Sun 01 Jan 2023 12:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207480
IP address blocks: 2a06:1e82::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:dc:84:69:43:f4:fa:ea:f8:cb:10:cf:85:cc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 12:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16ad2c73638f0d7cac3bcbd41dbed99c6a0e847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:ae:82:d8:18:62:9d:6d:3d:22:59:59:23:
60:1f:26:80:cb:7a:1c:62:5f:04:7f:ef:72:00:1e:
60:72:bb:15:fd:b0:f9:c8:2a:e6:c0:8f:d8:c8:68:
13:d7:26:31:85:d1:d9:2f:5b:4f:ac:3b:b1:2e:9c:
3f:a1:48:b1:33:24:19:3a:73:48:f0:e2:59:c5:5e:
fd:83:e5:0d:6c:aa:6b:47:00:b7:d0:65:18:68:82:
d9:f7:e7:c3:f7:e2:f3:1f:49:3c:bc:46:79:81:23:
62:64:eb:c4:c2:62:4a:7c:60:05:c6:50:c4:5e:93:
9a:e8:d4:db:52:9c:ab:d7:5e:48:bf:02:15:b8:43:
b6:a0:eb:95:b8:d7:ae:70:56:7b:33:80:45:1f:30:
7e:c9:8a:a8:a1:e2:99:cc:20:25:82:2c:06:f2:2f:
98:d7:ed:96:48:30:7d:18:7c:fc:c1:4c:88:f7:02:
0c:e7:4d:6a:6e:c3:cb:7d:2b:24:32:c5:f2:d7:d1:
45:c4:76:2c:87:34:9a:05:88:d0:a5:21:8b:06:4c:
f0:98:21:16:e1:a4:a5:c2:1d:41:ac:34:96:3c:c7:
35:85:51:ed:2f:3f:cc:54:7a:c8:68:59:46:bd:f3:
39:cd:49:75:6b:0d:32:86:c5:a1:b5:c3:92:4f:a3:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:2C:73:63:8F:0D:7C:AC:3B:CB:D4:1D:BE:D9:9C:6A:0E:84:7B
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/Fq0sc2OPDXysO8vUHb7ZnGoOhHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1e82::/44
Signature Algorithm: sha256WithRSAEncryption
18:bc:d9:3f:1d:92:4c:0d:bf:e3:7c:f8:11:f5:4f:4e:14:09:
bc:6f:03:5b:d8:99:dc:ec:77:c3:de:14:91:f7:98:3b:75:94:
2d:80:cf:4c:a2:f0:94:ed:58:5e:38:14:86:7e:4a:c0:11:db:
8d:8a:a3:f2:b6:76:d8:59:24:7f:1e:8b:dc:b7:4a:6c:64:e6:
c7:b0:5c:bb:d0:7d:a2:58:5e:1d:3a:9e:31:b8:9e:cc:a9:bb:
99:ff:ce:cd:11:2a:3c:6a:f1:c4:f3:1a:3b:b9:8c:14:f3:51:
f4:e6:65:07:db:91:e3:bb:b0:cc:8b:27:2c:d5:65:08:eb:96:
1b:65:a3:f0:f5:d1:d6:ec:f6:fa:9f:31:7e:01:10:9b:2b:4a:
e7:73:30:dd:7f:35:30:46:9c:69:05:d9:8f:2c:c6:75:06:f6:
6c:dc:70:b2:71:78:6c:b4:63:ba:be:d1:36:67:06:77:be:80:
86:d6:9d:e4:18:31:25:18:f9:57:b7:31:e6:3d:95:e6:fa:d7:
79:4e:44:7c:c4:bd:54:c7:00:dc:c6:e5:36:00:a2:15:0b:b6:
e5:86:bb:fe:1d:9a:82:87:49:55:00:08:fb:0e:1a:26:38:2c:
6e:eb:23:cf:c2:69:53:44:6c:b4:db:b5:1f:f2:36:36:6e:3b:
09:fd:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:20 2025 by rpki-client