Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fFV90Bc47sF0NeRHcBo7kyonaGo.roa
File: fFV90Bc47sF0NeRHcBo7kyonaGo.roa (raw, json)
Hash identifier: LzSAUHziENIUc2dj+TFt34Pz77xkOrzGcZLsjW6f/Ss=
Subject key identifier: 7C:55:7D:D0:17:38:EE:C1:74:35:E4:47:70:1A:3B:93:2A:27:68:6A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE7CC96E17BE2B04029FFD2986666
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fFV90Bc47sF0NeRHcBo7kyonaGo.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208872
IP address blocks: 2a06:e881:6600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e7:cc:96:e1:7b:e2:b0:40:29:ff:d2:98:66:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c557dd01738eec17435e447701a3b932a27686a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:32:a4:93:dc:e8:2d:a0:7e:46:ce:4b:07:
8d:45:8f:16:48:cd:ef:f8:a3:9d:3f:88:f0:ef:75:
db:68:ee:bc:ee:e6:cc:01:a3:d1:c4:55:88:75:25:
18:79:17:d0:c5:b8:0b:eb:e6:c3:62:b4:80:c2:f8:
31:6f:37:0b:5b:6c:63:d6:c6:8a:75:13:42:fc:47:
78:80:68:f1:1e:cf:d9:0d:ea:8c:dd:a4:94:03:0c:
42:26:94:31:5f:5e:ba:37:e5:49:3a:b1:23:18:60:
ed:22:84:05:49:8b:ec:3d:64:48:c6:01:c8:c9:7a:
f9:f4:00:77:b8:d8:01:08:b0:87:af:ba:5b:93:7c:
b5:46:d0:22:c0:d6:c7:2c:42:70:c3:33:65:48:5f:
ba:47:93:3d:f8:49:04:0f:06:ec:37:c3:d9:7c:75:
79:66:d5:e5:e5:13:f8:e4:5b:80:34:25:35:d7:11:
3e:54:f6:47:13:92:69:3f:b5:5e:68:3a:59:a0:be:
dd:88:40:49:1a:c5:f5:74:2b:f0:fa:39:7d:01:3d:
07:f3:ff:e0:b4:13:3d:18:9a:cc:05:6b:1d:3a:1f:
be:a6:6b:ee:9e:9f:e8:56:99:d6:e5:d1:f1:30:a8:
d1:48:dd:67:a2:ab:84:5b:5b:9c:09:cc:00:c5:cc:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:55:7D:D0:17:38:EE:C1:74:35:E4:47:70:1A:3B:93:2A:27:68:6A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fFV90Bc47sF0NeRHcBo7kyonaGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6600::/44
Signature Algorithm: sha256WithRSAEncryption
0d:69:f9:a5:ca:85:b7:90:2c:92:fe:b2:a6:a1:c7:a0:44:d2:
03:4d:a8:42:19:6f:fa:64:4e:38:81:7d:20:5a:df:0f:54:6b:
34:b4:6b:42:4c:35:39:08:24:41:60:aa:ea:31:da:15:80:af:
39:ae:d0:f2:fa:32:ff:68:17:8c:8f:2e:17:56:cc:cb:41:45:
ed:04:6e:ec:50:24:bf:84:ce:51:d3:b1:e5:f6:0c:a9:e8:64:
e6:2f:9a:c8:ed:5c:06:3d:e7:ff:9c:35:46:1d:35:23:06:53:
bc:e3:36:55:48:15:75:72:fe:d1:5b:fa:8a:34:a0:2f:01:cd:
6e:f9:ff:d0:0b:3d:66:e0:d8:af:d3:8a:2c:45:29:c8:f6:a5:
82:a5:e3:b6:7a:3d:0e:78:bd:1c:36:85:28:34:2c:12:7d:16:
16:66:54:84:42:3e:83:34:ce:6d:b2:61:7c:56:81:3a:06:b2:
1e:aa:af:5b:64:50:da:8e:f4:85:ec:52:df:d7:73:95:57:92:
8a:bf:ee:9b:be:ce:d2:d5:96:fa:e2:34:dd:49:c8:15:ef:a3:
c9:39:38:9b:2c:fa:2d:1d:02:33:af:cc:13:5d:97:94:a2:fe:
fe:a2:b5:de:eb:78:3e:70:7c:0c:c9:08:02:81:88:88:8a:22:
c8:d3:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:57 2025 by rpki-client