Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa
File: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (raw, json)
Hash identifier: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=
Subject key identifier: 16:ED:B5:E2:9A:91:12:23:0D:CA:CA:A7:67:D0:3B:43:92:66:E7:21
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 01941F8CA4FA5B81DE3973046E4B061058D6
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35332
IP address blocks: 2001:67c:a3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:fa:5b:81:de:39:73:04:6e:4b:06:10:58:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16edb5e29a9112230dcacaa767d03b439266e721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:d5:a1:b2:03:0c:dd:5c:96:8a:e7:52:b5:
89:31:97:90:e4:9c:d2:df:8b:c7:1b:ad:90:5a:f9:
d4:3a:5e:6d:46:e2:a5:90:08:f7:76:ce:fb:c7:4b:
0b:6f:22:56:e1:31:c6:26:b2:10:3e:ba:4c:be:51:
26:28:94:f8:04:c9:80:a3:1c:bd:00:2b:bc:f5:7b:
35:dc:55:dd:9e:10:de:2a:7c:f8:6b:f3:ce:97:e1:
67:29:d0:47:c6:79:26:c9:4b:4e:8e:e1:8d:1d:6b:
89:7c:da:20:b6:81:09:f2:6b:ad:46:91:6b:c1:df:
76:50:d7:ff:2b:75:0f:35:dd:6c:96:59:dc:51:49:
5a:18:b8:f4:ea:05:ac:66:1e:bd:88:3b:04:1e:62:
ae:be:be:05:a0:4f:e1:3a:83:5d:c6:db:5c:7a:16:
0a:7a:30:57:1f:a7:be:61:d6:db:7f:c3:74:1c:b2:
e7:5e:a9:9d:6c:24:2b:1e:dc:af:e7:9c:d1:e0:a9:
8b:20:67:05:85:ab:2e:d3:bd:f9:ab:98:a2:99:07:
92:4f:35:e3:64:6c:02:fb:80:71:df:ce:21:91:8f:
49:81:a1:1a:67:1d:85:89:d0:7a:b6:65:13:6f:e8:
41:60:73:e4:a0:49:32:c5:07:7f:7e:c1:68:46:3c:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:B5:E2:9A:91:12:23:0D:CA:CA:A7:67:D0:3B:43:92:66:E7:21
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a3c::/48
Signature Algorithm: sha256WithRSAEncryption
c4:4f:f1:27:ff:96:af:7f:40:bd:ca:e2:e1:32:69:c8:7b:0d:
ad:4d:19:85:be:17:68:1e:76:82:6b:80:51:82:fb:d4:c2:04:
07:06:f2:f2:00:45:24:4e:d9:71:49:f3:8a:24:30:79:dc:cc:
87:e2:bd:06:06:1d:63:49:2f:38:71:d8:8f:4b:f8:cb:31:b0:
e1:b6:3b:5c:df:33:b1:cd:a9:da:fb:c5:42:91:a6:91:78:99:
6a:1c:f4:57:72:b0:88:07:7c:cf:b2:e0:4e:c3:54:4f:c1:b8:
10:dc:d2:cd:e1:d8:1c:70:c9:97:67:13:29:52:f1:8d:cd:49:
a3:40:ef:27:3e:57:83:9f:9a:d9:da:71:4f:7e:a2:43:29:59:
5d:db:ec:d8:7a:c3:9c:35:a4:59:41:1b:1a:01:97:1b:08:41:
32:9d:42:c3:5e:36:57:ca:e2:1c:6b:41:06:3b:bb:51:2c:e7:
39:87:27:46:4f:c3:5d:c0:f1:54:41:96:e7:1d:6d:f5:3d:60:
d5:6b:49:d0:fb:1d:d1:0a:a4:90:77:0e:ce:72:e4:39:9c:ab:
cc:18:2c:59:6a:32:9c:14:3e:c7:99:d0:a0:82:ac:9a:87:d5:
e2:ae:6a:61:b9:14:90:e2:19:41:c8:ec:2a:2c:8b:7b:3c:de:
04:b3:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:18 2025 by rpki-client