Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/F_cRK7_FuJ1SOPF-eStGPWamodQ.roa
File: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (raw, json)
Hash identifier: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=
Subject key identifier: 17:F7:11:2B:BF:C5:B8:9D:52:38:F1:7E:79:2B:46:3D:66:A6:A1:D4
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019427B5D24810232AA159CF6E8B9F477DED
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/F_cRK7_FuJ1SOPF-eStGPWamodQ.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206236
IP address blocks: 2001:bf7:fc00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d2:48:10:23:2a:a1:59:cf:6e:8b:9f:47:7d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f7112bbfc5b89d5238f17e792b463d66a6a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:02:99:b4:e1:f9:9d:f4:8f:ad:1c:a4:cf:
10:f5:11:74:b5:9c:a7:69:02:ba:09:dc:a0:0c:51:
1c:7f:5b:37:fe:fd:ae:ea:7d:3c:9b:da:08:84:7c:
21:f1:a2:8c:43:8f:4b:d9:75:8e:10:c8:1b:fc:65:
c5:2d:4c:c4:e8:4c:2e:70:db:0d:d9:f8:f6:43:cf:
d8:06:82:3c:7f:67:9e:07:83:76:79:16:1e:91:72:
30:10:81:52:d9:ef:83:0d:2e:65:5a:f2:c3:52:1e:
a8:55:86:ab:03:2a:22:05:cc:4f:5c:31:dd:0f:4b:
e6:dc:a2:2a:84:1b:f0:e8:51:ec:59:b4:50:ec:41:
2c:2b:4f:b1:36:8e:58:77:58:19:26:da:7b:1b:3b:
f0:9a:85:53:34:77:22:24:b0:9b:7f:0d:98:08:d9:
8e:8a:25:3d:19:98:81:ef:be:36:7b:e7:60:8b:c4:
b3:81:7b:9e:88:b3:31:6a:da:9f:62:73:65:3c:b0:
c6:62:a2:3c:e0:99:05:2e:2f:f9:5d:b0:23:fb:e5:
0a:65:ed:32:77:17:79:ab:9a:ce:3f:57:11:f7:76:
d8:82:46:5d:1e:05:1e:39:a7:35:e8:f6:26:44:73:
fc:fc:78:38:16:91:30:49:24:86:0f:97:39:e5:ac:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:11:2B:BF:C5:B8:9D:52:38:F1:7E:79:2B:46:3D:66:A6:A1:D4
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/F_cRK7_FuJ1SOPF-eStGPWamodQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf7:fc00::/44
Signature Algorithm: sha256WithRSAEncryption
84:9f:ce:0c:d4:b5:76:24:62:27:49:1f:c0:de:e5:67:25:87:
42:31:7a:4f:7b:3d:79:23:de:94:ee:d8:6d:7b:05:fd:ea:ea:
b3:f6:fe:ac:bd:16:bd:50:eb:7f:fb:12:bd:d2:2e:f5:90:98:
6f:8d:4d:ff:f0:61:d8:02:ce:a3:ea:14:e2:46:11:23:97:67:
80:49:ea:ca:f5:03:b1:7e:b2:01:c5:c8:e3:91:65:24:69:72:
88:4a:fd:54:1f:01:ec:e3:6e:e9:88:ee:2c:5c:44:c7:58:d3:
7d:ad:8e:e5:93:f6:2a:99:98:7a:16:6b:2c:b8:cb:e1:7e:ea:
2e:36:f1:72:37:1f:92:6f:d1:6b:4e:e9:1f:e4:86:6b:bf:41:
3b:36:4c:48:a1:cb:da:c6:b1:c6:20:22:93:fa:e1:ad:3b:c3:
8e:ff:4a:2c:01:db:92:ee:0b:85:09:99:68:b6:ce:25:59:bd:
52:74:c6:11:23:f4:2b:c5:10:2c:38:9e:d9:da:dc:cc:d0:8f:
88:d4:d9:be:67:0a:e9:c5:9c:f8:11:ee:4f:1b:b2:28:20:41:
b1:6e:95:35:9f:7a:c9:d6:bf:b4:fa:e6:14:03:33:c2:f5:94:
73:11:d4:a0:aa:90:36:83:c6:75:83:7e:87:81:8c:61:18:2a:
d7:a2:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:41 2025 by rpki-client