Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/fNvy3r37_4b6LefWjRGgK8SlrUI.roa
File: fNvy3r37_4b6LefWjRGgK8SlrUI.roa (raw, json)
Hash identifier: 6A8ADFg9pRpZbe6Cwd0Rb5jshUxYYaxV6Jo4EFTgMJA=
Subject key identifier: 7C:DB:F2:DE:BD:FB:FF:86:FA:2D:E7:D6:8D:11:A0:2B:C4:A5:AD:42
Certificate issuer: /CN=ede0294d1305bebaf6894642bfd92fd439825102
Certificate serial: 0194258E77BA295F2AFF0993F75538A612CD
Authority key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/fNvy3r37_4b6LefWjRGgK8SlrUI.roa
Signing time: Thu 02 Jan 2025 05:48:01 +0000
ROA not before: Thu 02 Jan 2025 05:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48953
IP address blocks: 2a00:66e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:77:ba:29:5f:2a:ff:09:93:f7:55:38:a6:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede0294d1305bebaf6894642bfd92fd439825102
Validity
Not Before: Jan 2 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cdbf2debdfbff86fa2de7d68d11a02bc4a5ad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:98:46:a2:78:68:b8:e8:b5:e3:c7:00:c1:
31:38:0d:f0:3e:71:53:c4:d8:37:3b:02:c9:b5:2e:
30:d6:53:3f:a3:61:b1:db:ed:5e:1d:87:c1:4e:ce:
a7:4a:52:d3:0c:21:db:07:18:c9:13:b4:d0:df:46:
d2:e5:9a:46:06:f3:a1:16:11:52:6c:11:21:64:5e:
1e:ef:75:8a:77:ac:f1:ed:58:13:65:6f:bd:0a:b5:
3b:9b:fb:07:e1:f2:19:08:9c:28:fe:f2:32:ae:16:
fd:a0:19:ae:49:b6:77:46:58:6e:3e:79:61:b5:29:
52:0f:3a:9e:60:49:23:38:47:13:60:70:49:ac:c1:
4e:63:ed:80:7d:8d:35:76:be:7a:71:b5:e9:2b:26:
cb:3e:de:a9:d6:53:aa:c2:38:81:32:6d:34:1f:43:
24:11:ad:ed:e5:d7:45:0d:bf:eb:55:7c:2e:27:74:
f3:93:02:9c:8c:b8:dd:a5:0d:47:e0:85:27:32:e9:
6d:70:6f:cf:33:b7:36:bc:b3:86:b3:9f:ff:36:da:
ae:04:be:2a:16:8b:64:ba:82:0a:cd:b3:4b:46:12:
dc:c9:01:99:99:de:aa:6a:38:f1:f3:25:60:72:51:
6f:59:ce:9a:81:0e:2e:eb:cb:f5:9a:c4:cb:57:c6:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:F2:DE:BD:FB:FF:86:FA:2D:E7:D6:8D:11:A0:2B:C4:A5:AD:42
X509v3 Authority Key Identifier:
keyid:ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/fNvy3r37_4b6LefWjRGgK8SlrUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:66e0::/32
Signature Algorithm: sha256WithRSAEncryption
83:76:71:40:b6:b6:99:16:37:8e:fe:af:b4:3b:33:55:8f:01:
d1:04:4c:18:10:a3:78:9c:f0:66:13:64:d9:e7:58:35:6e:87:
1f:c3:02:27:70:77:5a:29:c0:74:0d:ac:9c:46:30:76:80:8a:
91:f2:17:f2:ba:08:f5:f7:f4:55:fb:ee:3b:08:db:88:5e:eb:
c6:91:1c:0a:34:0d:8c:70:6e:e2:05:88:18:94:47:e0:bb:c1:
e7:8e:91:34:0e:1e:bb:7f:31:41:12:b8:d1:5e:f1:47:00:77:
5d:13:77:80:03:66:cf:18:5d:f3:4f:53:f6:fb:b9:a6:fc:b4:
3e:af:34:36:84:84:dc:94:5e:58:e4:61:6f:7a:12:ae:8a:8d:
af:b1:aa:54:88:75:8c:0c:0c:ba:7b:f7:76:d8:43:a1:e1:10:
1d:82:dd:b6:8a:8f:7d:19:1b:95:3d:e9:d4:74:b7:cd:be:56:
c9:5a:7e:5d:95:50:a5:15:a2:fc:40:c1:f1:1e:1b:e0:fa:5c:
c8:2d:11:e0:0a:c8:35:b5:a4:2c:17:3e:c3:60:07:18:d9:70:
2a:1d:46:23:42:60:3c:49:cd:66:f1:ad:41:fa:6a:b8:3b:c9:
bb:7b:cd:cb:fb:42:d0:2d:d4:78:06:70:08:aa:33:19:93:e1:
99:c9:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:20:01 2025 by rpki-client