Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa
File: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (raw, json)
Hash identifier: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=
Subject key identifier: 17:22:34:16:05:41:47:67:82:64:8B:BB:F8:18:41:E5:E5:87:8E:13
Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial: 01942144447942DE8D3406C04749C3788CCE
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199221
IP address blocks: 2a06:9687::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:44:79:42:de:8d:34:06:c0:47:49:c3:78:8c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=172234160541476782648bbbf81841e5e5878e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:bd:ba:8b:81:82:81:04:c1:5f:f1:65:18:
24:10:c5:b0:10:c4:ee:76:55:75:af:31:94:ae:9c:
62:0c:d6:77:74:c7:ed:6b:0f:d6:61:04:37:1e:72:
8f:0b:91:29:5d:5d:cc:12:ae:55:e6:56:e4:75:7c:
22:68:66:f1:2e:b1:5f:b1:2b:e8:c5:2e:d4:04:2e:
57:09:aa:e2:2d:85:4b:26:32:1e:e5:1c:d2:41:27:
3d:4a:ea:f8:c6:68:0d:87:a5:a5:0a:3b:5c:10:3b:
77:c6:8d:98:0e:ea:9b:9a:48:9c:47:37:97:12:ca:
a2:0e:85:94:18:d9:d3:7e:d4:13:87:f6:9d:38:c0:
2d:8c:4e:de:f7:46:e7:77:74:49:d2:90:de:70:ea:
a4:de:0c:f6:89:a7:3c:d6:a6:11:96:fd:50:14:d3:
ff:08:13:6c:92:b0:a5:64:d1:54:74:c6:1c:71:c6:
49:f3:e9:03:4c:a1:2e:3f:be:9d:e7:42:e5:89:75:
6d:c6:3f:f6:51:1e:17:60:61:e9:fe:ba:27:1f:23:
fd:da:a9:04:6b:8a:b5:fb:d9:c6:a6:5e:2a:3e:40:
44:1e:a3:e9:94:6b:27:86:c5:ec:d0:2a:1e:2c:81:
ed:ec:4c:11:a6:98:01:2f:30:e7:73:cf:20:31:a8:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:34:16:05:41:47:67:82:64:8B:BB:F8:18:41:E5:E5:87:8E:13
X509v3 Authority Key Identifier:
keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9687::/32
Signature Algorithm: sha256WithRSAEncryption
48:51:fd:30:01:11:cb:df:77:44:37:7f:65:28:d8:68:58:9d:
4b:49:dd:ff:86:bd:ad:3f:e0:2e:fd:18:80:10:3c:91:e7:81:
3d:e0:21:40:a3:1a:b3:53:53:f8:b4:81:e0:0a:9a:f0:73:89:
da:ee:88:53:dd:b7:24:b3:15:12:71:db:b3:f8:ee:c7:f9:5c:
fa:bd:90:7b:f7:2b:72:e1:a1:65:89:9a:c9:7a:8e:9f:b5:88:
00:02:40:e9:9b:64:a2:41:f5:be:1b:a1:94:84:bb:79:e3:82:
a6:f7:b3:8d:67:93:ab:5d:bf:5f:8b:28:0b:f5:f9:62:aa:97:
f0:0c:c2:1d:ae:5a:9b:56:ec:50:5e:4a:b4:19:cb:0c:fd:0d:
9f:65:21:22:97:6c:b3:02:37:93:f0:a1:ab:2f:a3:78:db:bd:
c6:57:2e:c3:40:dd:d8:ad:c0:f3:c9:c9:26:3e:a1:c3:4d:e7:
63:76:d9:67:d5:d5:4e:c0:f3:9d:50:08:5b:96:e6:40:f3:9a:
10:97:bf:b8:8a:2c:d3:07:6b:a7:c0:fe:2b:c6:a3:e0:27:92:
e4:3f:db:2a:5b:68:37:a6:1c:37:b2:06:c2:cb:3d:c8:62:d6:
82:7c:80:fa:60:5c:3d:d0:73:0d:4d:f9:43:1b:61:8d:09:ef:
32:99:04:e7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhRER5Qt6NNAbAR0nDeIzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi
OTdiYTYwHhcNMjUwMTAxMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzIyMzQxNjA1NDE0NzY3ODI2NDhiYmJmODE4NDFlNWU1ODc4ZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjO9uouBgoEEwV/xZRgkEMWwEMTu
dlV1rzGUrpxiDNZ3dMftaw/WYQQ3HnKPC5EpXV3MEq5V5lbkdXwiaGbxLrFfsSvo
xS7UBC5XCariLYVLJjIe5RzSQSc9Sur4xmgNh6WlCjtcEDt3xo2YDuqbmkicRzeX
EsqiDoWUGNnTftQTh/adOMAtjE7e90bnd3RJ0pDecOqk3gz2iac81qYRlv1QFNP/
CBNskrClZNFUdMYcccZJ8+kDTKEuP76d50LliXVtxj/2UR4XYGHp/ronHyP92qkE
a4q1+9nGpl4qPkBEHqPplGsnhsXs0CoeLIHt7EwRppgBLzDnc88gMahk5wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBciNBYFQUdngmSLu/gYQeXlh44TMB8GA1UdIwQY
MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt
MTIwMjVjNTRmNDg0LzEvRnlJMEZnVkJSMmVDWkl1Ny1CaEI1ZVdIamhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0
LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgaWhzAN
BgkqhkiG9w0BAQsFAAOCAQEASFH9MAERy993RDd/ZSjYaFidS0nd/4a9rT/gLv0Y
gBA8keeBPeAhQKMas1NT+LSB4Aqa8HOJ2u6IU923JLMVEnHbs/jux/lc+r2Qe/cr
cuGhZYmayXqOn7WIAAJA6ZtkokH1vhuhlIS7eeOCpvezjWeTq12/X4soC/X5YqqX
8AzCHa5am1bsUF5KtBnLDP0Nn2UhIpdsswI3k/Chqy+jeNu9xlcuw0Dd2K3A88nJ
Jj6hw03nY3bZZ9XVTsDznVAIW5bmQPOaEJe/uIos0wdrp8D+K8aj4CeS5D/bKlto
N6YcN7IGwss9yGLWgnyA+mBcPdBzDU35QxthjQnvMpkE5w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:15 2025 by rpki-client