Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/FZgBPNc92MthOGwVWSdqr1P0HSA.roa
File: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (raw, json)
Hash identifier: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=
Subject key identifier: 15:98:01:3C:D7:3D:D8:CB:61:38:6C:15:59:27:6A:AF:53:F4:1D:20
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01942067ECA46F6CEBBAE3C3465BE249967B
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/FZgBPNc92MthOGwVWSdqr1P0HSA.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18747
IP address blocks: 2a0e:1c80:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:a4:6f:6c:eb:ba:e3:c3:46:5b:e2:49:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1598013cd73dd8cb61386c1559276aaf53f41d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:a9:b2:77:5f:96:f9:dd:9f:84:b8:3c:8b:
9a:a0:1b:99:b6:81:83:7a:7c:3e:c8:cc:a4:e4:54:
bd:bc:cf:80:d6:72:84:9a:7a:c5:e8:ed:47:96:bf:
20:4b:5a:b6:94:1f:6e:cd:17:5a:11:8f:f8:ef:fd:
e5:03:36:3d:b5:a9:36:7f:2b:8b:54:c4:ca:8e:6a:
09:48:43:ae:22:c3:06:78:38:3f:e4:08:bb:65:e6:
21:a2:41:d4:23:41:bc:95:40:72:bc:cc:ce:ef:24:
22:87:e1:3b:50:5c:1c:09:da:57:c3:3b:6d:15:98:
0c:c4:c7:f6:9d:0a:97:ba:78:af:08:69:b5:61:98:
dc:d5:2b:32:2f:b7:ee:1f:96:08:3d:08:d6:f1:3a:
3e:63:8c:25:61:4e:33:60:a4:28:f8:5e:fe:d4:25:
2c:c4:75:ee:14:8d:8b:70:3c:6f:44:26:b6:81:5e:
3d:24:57:41:c9:ff:22:eb:eb:e6:24:39:86:8d:df:
94:cb:e8:ae:51:34:1c:a6:3e:0f:14:b3:6f:e8:ad:
ef:f5:e7:1c:1b:9a:73:93:b2:31:04:ad:fc:0c:ad:
5b:6e:85:e1:01:73:ab:ea:3e:7d:c5:42:be:46:f2:
fa:bf:e8:62:89:48:45:8e:9e:04:17:1e:92:6e:4d:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:01:3C:D7:3D:D8:CB:61:38:6C:15:59:27:6A:AF:53:F4:1D:20
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/FZgBPNc92MthOGwVWSdqr1P0HSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:1d::/48
Signature Algorithm: sha256WithRSAEncryption
58:55:2f:47:12:b8:6e:b3:af:45:52:4b:a5:4b:a8:d8:56:6d:
22:54:60:e8:4b:49:32:13:33:21:9b:45:b2:99:d6:23:29:5d:
a0:ed:2d:9d:fd:79:cf:e5:e2:e5:88:0f:f2:46:cf:45:96:db:
3f:4a:b5:f0:c4:92:2e:d4:03:e3:7b:ad:aa:c5:55:89:c8:d5:
6b:0e:d8:0c:fb:75:69:83:af:1d:5c:52:b7:83:48:c7:ba:6d:
c2:09:05:cf:32:33:7c:47:f1:ce:82:f8:9e:26:c9:bd:f8:cd:
e5:2d:a1:dc:13:d5:bf:44:c1:6a:16:ad:55:95:ff:87:2f:e8:
f4:7c:19:85:c5:67:3d:e4:81:e4:f1:fe:d1:8e:2e:67:2f:c4:
7c:7c:e3:0b:a5:7a:df:3c:f1:37:a8:b0:e8:0c:18:3d:43:95:
75:84:01:70:25:32:3c:f2:8b:92:38:fc:ab:71:6e:5a:cf:d5:
e1:ec:a9:b9:e4:5b:1e:8b:74:52:5a:fc:a7:59:dc:06:6b:a7:
47:89:26:88:33:18:42:ad:40:48:a3:c2:b9:29:32:dc:aa:a0:
3a:6d:51:83:65:16:76:e7:e1:68:15:f0:b7:75:5d:7f:35:5f:
00:44:08:4b:b5:3b:ef:0b:c7:ef:e6:c4:8a:61:40:2d:58:a4:
e1:59:a0:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgZ+ykb2zruuPDRlviSZZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjUwMTAxMDU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTk4MDEzY2Q3M2RkOGNiNjEzODZjMTU1OTI3NmFhZjUzZjQxZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjOpsndflvndn4S4PIuaoBuZtoGD
enw+yMyk5FS9vM+A1nKEmnrF6O1Hlr8gS1q2lB9uzRdaEY/47/3lAzY9tak2fyuL
VMTKjmoJSEOuIsMGeDg/5Ai7ZeYhokHUI0G8lUByvMzO7yQih+E7UFwcCdpXwztt
FZgMxMf2nQqXunivCGm1YZjc1SsyL7fuH5YIPQjW8To+Y4wlYU4zYKQo+F7+1CUs
xHXuFI2LcDxvRCa2gV49JFdByf8i6+vmJDmGjd+Uy+iuUTQcpj4PFLNv6K3v9ecc
G5pzk7IxBK38DK1bboXhAXOr6j59xUK+RvL6v+hiiUhFjp4EFx6Sbk0RrwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBWYATzXPdjLYThsFVknaq9T9B0gMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvRlpnQlBOYzkyTXRoT0d3VldTZHFyMVAwSFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cgAAd
MA0GCSqGSIb3DQEBCwUAA4IBAQBYVS9HErhus69FUkulS6jYVm0iVGDoS0kyEzMh
m0WymdYjKV2g7S2d/XnP5eLliA/yRs9Flts/SrXwxJIu1APje62qxVWJyNVrDtgM
+3Vpg68dXFK3g0jHum3CCQXPMjN8R/HOgvieJsm9+M3lLaHcE9W/RMFqFq1Vlf+H
L+j0fBmFxWc95IHk8f7Rji5nL8R8fOMLpXrfPPE3qLDoDBg9Q5V1hAFwJTI88ouS
OPyrcW5az9Xh7Km55Fsei3RSWvynWdwGa6dHiSaIMxhCrUBIo8K5KTLcqqA6bVGD
ZRZ25+FoFfC3dV1/NV8ARAhLtTvvC8fv5sSKYUAtWKThWaDv
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:15 2025 by rpki-client