Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fDycivQ9AmqpLXHb643beo7AfkY.roa
File: fDycivQ9AmqpLXHb643beo7AfkY.roa (raw, json)
Hash identifier: giu8ZH0FRUAJ8CnaQDlkV6QxKuqlHaaB/PA9dHIY+u0=
Subject key identifier: 7C:3C:9C:8A:F4:3D:02:6A:A9:2D:71:DB:EB:8D:DB:7A:8E:C0:7E:46
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B55CDB6633E560F6B0206516080ED9
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fDycivQ9AmqpLXHb643beo7AfkY.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 2a09:6285::/32 maxlen: 32
2a12:a346::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5c:db:66:33:e5:60:f6:b0:20:65:16:08:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c3c9c8af43d026aa92d71dbeb8ddb7a8ec07e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:c2:76:c5:48:00:0d:9a:90:0c:b6:84:a2:
e1:85:41:ef:a2:49:3f:df:93:08:8d:d7:b1:dc:76:
51:5b:b0:3b:71:6f:c1:e5:a7:b4:95:7f:d4:13:ab:
b4:ad:34:05:9b:5a:b3:16:df:9a:e6:24:34:62:90:
df:d6:c6:8b:9d:27:dd:26:b1:69:d0:5f:a2:85:35:
40:11:bb:80:ff:01:e1:b4:a7:86:1c:03:bb:e7:8e:
71:f2:40:96:33:22:e3:ae:cf:c6:0e:3a:76:9b:06:
e0:85:84:c4:14:ff:a7:6d:cb:10:cc:52:94:62:08:
eb:d7:a3:75:73:88:0b:48:58:4e:34:52:e0:ac:58:
f0:cc:71:b7:0f:2d:f0:f2:3b:3b:bc:87:d7:5a:71:
fb:a1:59:03:04:fe:80:db:a4:80:c7:3b:0b:a3:ea:
0c:d4:f6:38:37:27:c0:9d:6c:7b:70:91:77:c7:08:
46:39:d0:11:63:69:7f:10:6b:40:67:10:19:ab:a2:
65:f9:3a:c3:10:52:14:2e:7f:4e:c0:c7:67:30:bf:
6e:1c:ef:36:0f:8a:8b:45:56:e1:e3:23:06:35:1e:
e9:49:0d:7b:c1:39:a0:6d:34:08:9f:4d:d8:bd:e8:
bc:54:de:c7:0a:66:8f:30:46:04:f5:56:88:e1:89:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3C:9C:8A:F4:3D:02:6A:A9:2D:71:DB:EB:8D:DB:7A:8E:C0:7E:46
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fDycivQ9AmqpLXHb643beo7AfkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6285::/32
2a12:a346::/32
Signature Algorithm: sha256WithRSAEncryption
8d:eb:54:63:92:78:fe:39:24:0b:d2:5c:a8:6b:67:fa:65:6a:
85:bb:de:0b:9e:27:2e:fa:74:f1:ec:fe:32:db:68:5f:8e:1c:
c7:57:0e:c2:54:b2:94:10:ba:d9:f7:2d:e8:27:45:75:1e:61:
2f:5e:0f:4a:1d:e8:f9:19:43:50:e4:27:68:d9:2f:14:1f:d7:
25:10:83:37:e1:5e:0f:41:70:71:b7:6d:30:2d:73:50:47:9d:
32:38:56:d3:1d:f7:9c:b3:b0:4c:28:1e:5c:34:8f:03:d0:1f:
d3:c7:fc:2d:7e:b7:d7:43:6a:07:31:7f:4d:ae:6c:7d:0b:4d:
3c:cf:d7:44:c6:41:98:d0:48:19:85:31:d0:dd:c7:3e:4c:4b:
9d:72:46:7d:52:bf:4e:5f:9a:3f:0c:d3:69:97:00:fe:02:b6:
ce:23:50:c8:77:0f:2f:37:88:61:56:b7:6a:ee:98:8b:cd:c0:
96:fe:13:91:38:c9:90:52:01:90:07:68:72:55:01:8d:74:db:
6f:bb:16:4f:ea:c0:8a:45:66:3d:4f:60:03:81:51:90:bd:3a:
95:c3:17:d3:09:95:5a:7e:2b:7a:30:f6:5d:d4:89:9a:f9:6b:
95:bd:9c:61:da:02:56:c4:45:d8:4a:4c:8d:52:6e:3b:c4:e4:
9f:45:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:10:39 2025 by rpki-client