Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/FPnan2TsPj9crS2uywd9pXr45s0.roa
File: FPnan2TsPj9crS2uywd9pXr45s0.roa (raw, json)
Hash identifier: QCuqSNM50URwjMgqkRSaPYOXQqFNoLdqukUEzDPywXM=
Subject key identifier: 14:F9:DA:9F:64:EC:3E:3F:5C:AD:2D:AE:CB:07:7D:A5:7A:F8:E6:CD
Certificate issuer: /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial: 0A3BF39D
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/FPnan2TsPj9crS2uywd9pXr45s0.roa
Signing time: Tue 01 Feb 2022 20:56:38 +0000
ROA not before: Tue 01 Feb 2022 20:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211444
IP address blocks: 2a09:be45::/32 maxlen: 32
2a09:be46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171701149 (0xa3bf39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Validity
Not Before: Feb 1 20:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14f9da9f64ec3e3f5cad2daecb077da57af8e6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:dd:c1:f5:c7:19:cf:89:22:e9:17:da:44:
b1:c9:34:c8:8b:e5:06:b3:25:af:1e:08:e5:ca:93:
38:18:8e:19:92:1f:61:d8:1d:a1:24:fc:4a:5c:67:
20:f4:74:e6:9e:f3:b6:aa:b9:73:75:df:ad:55:ea:
32:e3:82:74:58:17:9d:d5:60:a7:68:de:5a:77:a3:
0f:7b:af:80:24:5d:21:53:0e:31:20:75:14:40:b1:
73:dd:8e:ac:c9:21:17:53:35:f7:d8:cb:ec:24:d1:
af:5b:35:0b:08:e1:16:2c:54:e7:d6:1c:ca:12:e1:
81:b6:62:e2:96:ec:22:ea:8a:b6:29:74:e3:cd:53:
93:52:b2:5b:14:8a:fe:68:69:09:56:56:f7:5e:85:
6b:ce:44:76:88:d5:2f:9b:d5:d8:1e:ad:69:c7:e3:
8e:69:31:a7:3f:2f:6b:fd:e5:3c:16:2f:21:72:52:
d3:2c:6d:58:85:9c:54:e5:3e:8a:7c:f6:58:2e:9d:
2e:b0:b2:7a:e0:b1:b9:99:b4:c9:7e:c0:96:cc:fa:
91:c8:00:38:44:56:c5:bf:3a:9a:b4:21:f5:d7:1e:
02:62:62:00:c1:15:e8:30:be:29:e6:6e:91:a4:5e:
c5:8f:13:8c:c3:65:f1:9c:18:c6:89:bd:53:3b:84:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:DA:9F:64:EC:3E:3F:5C:AD:2D:AE:CB:07:7D:A5:7A:F8:E6:CD
X509v3 Authority Key Identifier:
keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/FPnan2TsPj9crS2uywd9pXr45s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be45::-2a09:be46:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:71:54:e7:6c:b5:68:f5:c0:e0:6b:a5:30:c8:0e:d7:2f:67:
9b:23:a8:25:39:72:4f:bf:21:68:52:41:3c:d3:ba:a6:68:a9:
1c:83:ff:bf:c2:0a:a1:29:d7:d0:ca:58:16:51:4b:6e:08:63:
a3:eb:01:14:db:96:e5:5a:eb:6f:bf:a9:a1:d2:1a:fb:96:ea:
e5:03:3f:a4:09:da:31:ec:ad:16:ac:bd:96:8d:5a:ad:2d:1b:
97:e2:4d:f2:c0:bf:ed:f2:6d:4d:ac:71:4f:f5:4d:b4:ec:f2:
73:74:e0:32:1b:67:4d:54:23:ff:bf:7e:eb:57:c5:a4:b8:30:
a1:d8:26:7d:7a:04:99:64:04:fd:48:72:05:a5:ca:a0:3c:30:
78:c7:93:f5:b5:12:24:ee:9f:d0:4b:30:8b:50:a7:ab:bb:8b:
18:d5:a5:d4:48:37:8a:92:19:e5:a5:90:79:a0:88:54:1b:a5:
87:5d:8b:d8:1c:6f:24:31:d4:88:3c:93:68:1d:23:d4:8d:80:
4e:4c:fb:50:df:d6:f0:ea:21:a6:7e:5a:1d:26:b1:b1:6d:b4:
40:bb:af:56:e1:38:e4:19:73:00:5b:f0:65:71:1d:b0:8d:f7:
76:84:d8:4a:7f:97:6a:b9:1f:a5:f3:c1:b7:db:da:24:33:12:
e6:6b:ec:bc
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIECjvznTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGI5MGE1ZTE1OGJhMDkwOGZkYzgzY2M0MjQzZmU0MGM2ZGFiNDIzMB4XDTIyMDIw
MTIwNTYzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTRmOWRhOWY2NGVj
M2UzZjVjYWQyZGFlY2IwNzdkYTU3YWY4ZTZjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKiv3cH1xxnPiSLpF9pEsck0yIvlBrMlrx4I5cqTOBiOGZIf
YdgdoST8SlxnIPR05p7ztqq5c3XfrVXqMuOCdFgXndVgp2jeWnejD3uvgCRdIVMO
MSB1FECxc92OrMkhF1M199jL7CTRr1s1CwjhFixU59YcyhLhgbZi4pbsIuqKtil0
481Tk1KyWxSK/mhpCVZW916Fa85EdojVL5vV2B6tacfjjmkxpz8va/3lPBYvIXJS
0yxtWIWcVOU+inz2WC6dLrCyeuCxuZm0yX7Alsz6kcgAOERWxb86mrQh9dceAmJi
AMEV6DC+KeZukaRexY8TjMNl8ZwYxom9UzuEgHECAwEAAaOCAhMwggIPMB0GA1Ud
DgQWBBQU+dqfZOw+P1ytLa7LB32levjmzTAfBgNVHSMEGDAWgBRQuQpeFYugkI/c
g8xCQ/5Axtq0IzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMa0tYaFdMb0pDUDNJUE1Ra1AtUU1iYXRDTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvNzJkMjI2LWMzYjAtNDFmMy1iNGRiLTgzZmQ3MzgyZmYxMy8x
L0ZQbmFuMlRzUGo5Y3JTMnV5d2Q5cFhyNDVzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
NzJkMjI2LWMzYjAtNDFmMy1iNGRiLTgzZmQ3MzgyZmYxMy8xL1VMa0tYaFdMb0pD
UDNJUE1Ra1AtUU1iYXRDTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAp
BggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEDAOAwUAKgm+RQMFACoJvkYwDQYJKoZI
hvcNAQELBQADggEBAGlxVOdstWj1wOBrpTDIDtcvZ5sjqCU5ck+/IWhSQTzTuqZo
qRyD/7/CCqEp19DKWBZRS24IY6PrARTbluVa62+/qaHSGvuW6uUDP6QJ2jHsrRas
vZaNWq0tG5fiTfLAv+3ybU2scU/1TbTs8nN04DIbZ01UI/+/futXxaS4MKHYJn16
BJlkBP1IcgWlyqA8MHjHk/W1EiTun9BLMItQp6u7ixjVpdRIN4qSGeWlkHmgiFQb
pYddi9gcbyQx1Ig8k2gdI9SNgE5M+1Df1vDqIaZ+Wh0msbFttEC7r1bhOOQZcwBb
8GVxHbCN93aE2Ep/l2q5H6Xzwbfb2iQzEuZr7Lw=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:14 2025 by rpki-client