Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/FPWiCY2-zcvw764-PCkB_n3H890.roa
File: FPWiCY2-zcvw764-PCkB_n3H890.roa (raw, json)
Hash identifier: wss9AAOg8kZM/+BUz4VQ2e75n6B0wE0ky3c2MNahlRk=
Subject key identifier: 14:F5:A2:09:8D:BE:CD:CB:F0:EF:AE:3E:3C:29:01:FE:7D:C7:F3:DD
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01942220127B63F53D885F24022B8E6F66E0
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/FPWiCY2-zcvw764-PCkB_n3H890.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215568
IP address blocks: 2a01:f2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:12:7b:63:f5:3d:88:5f:24:02:2b:8e:6f:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14f5a2098dbecdcbf0efae3e3c2901fe7dc7f3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:9d:52:1b:91:42:b9:f5:5e:fb:ba:7e:27:
4d:79:db:23:7c:43:80:c0:c3:5f:12:7c:2e:1d:ac:
0b:65:25:04:85:d6:63:ca:96:e2:30:58:8f:0e:20:
59:9f:87:05:7b:c8:5e:71:4f:9f:27:83:79:6e:f8:
28:dc:c4:b2:a1:60:dc:b0:69:76:21:4c:27:7f:aa:
6e:86:8f:85:da:19:f6:fe:75:64:8c:6b:db:af:c1:
24:6f:01:a3:40:fd:7c:da:ad:2f:16:4d:16:98:75:
62:52:28:17:9f:57:7d:3e:8e:9f:2d:b1:aa:5a:70:
10:a9:fd:fa:0b:f9:e3:5d:9a:2e:9e:39:a0:c3:ef:
8b:d4:ec:72:d2:3b:33:70:89:c3:c7:09:8a:4c:c5:
b3:d7:56:4c:d0:53:cc:f8:c3:f7:eb:6b:dc:8e:ea:
c2:c3:bc:35:6b:28:80:3b:18:25:ae:5f:7f:e4:c4:
70:3a:3c:3b:92:cc:df:c2:78:fa:77:29:cb:9e:96:
bf:62:01:2e:04:ad:69:d1:f0:cd:a0:22:3a:72:cb:
80:7e:07:20:ad:f9:07:68:fa:15:25:7f:7a:eb:50:
02:cc:62:a0:cd:c6:67:ab:f0:df:47:a2:e5:18:31:
ad:b0:a9:44:21:07:08:ce:16:88:c2:15:f2:0a:97:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:A2:09:8D:BE:CD:CB:F0:EF:AE:3E:3C:29:01:FE:7D:C7:F3:DD
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/FPWiCY2-zcvw764-PCkB_n3H890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
bf:69:f8:b3:0f:3f:cc:e8:59:6f:aa:e1:79:f7:be:41:fd:e8:
66:b2:bc:d1:1d:b6:57:f7:0a:95:9b:3f:f7:f7:ef:40:57:29:
dc:ff:ef:93:e4:16:cb:60:02:1b:2d:2e:03:9c:98:1b:b2:2e:
b3:0f:67:6b:01:61:ba:87:70:2a:f3:e1:f0:ba:9c:4d:23:b3:
ca:05:59:51:b0:3e:96:48:67:bf:c7:91:3c:6e:38:6a:71:b0:
17:65:95:08:61:8d:7c:06:23:2e:ce:de:5c:24:ae:5e:56:70:
f0:35:12:d7:d0:71:00:cd:8b:19:26:4b:a0:30:25:16:ea:0e:
1c:e1:42:7c:df:8f:c5:2a:d5:4f:fb:2b:00:93:97:34:56:37:
a3:19:92:c7:e5:a0:5e:f8:66:e9:da:e3:0d:0e:52:c6:62:3d:
75:d6:74:eb:d6:f3:21:97:1a:c3:83:d5:cb:ac:c2:10:d9:69:
8c:b4:6e:45:c5:43:50:d3:5d:85:95:fd:9b:a7:28:cb:80:31:
12:6a:c9:30:60:42:81:dd:51:f2:5e:58:3e:ef:8c:36:f8:04:
46:fd:fb:0d:eb:2a:19:0b:5d:d3:9d:2d:ba:d0:37:a7:18:ac:
8e:f7:47:eb:e4:24:95:69:bb:2c:3f:1f:39:02:72:cf:ed:b5:
78:c6:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:25 2025 by rpki-client