Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/FGOmap9I6AXdQJiM1KsqjmUGkJ0.roa
File: FGOmap9I6AXdQJiM1KsqjmUGkJ0.roa (raw, json)
Hash identifier: PpIBU7AvrwrLC4Tf6En49ApHeIUhbBTQkm9GyHE5ksk=
Subject key identifier: 14:63:A6:6A:9F:48:E8:05:DD:40:98:8C:D4:AB:2A:8E:65:06:90:9D
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 01941FFA7D9BA471A0D58BC07CAE9738B93E
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/FGOmap9I6AXdQJiM1KsqjmUGkJ0.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4585::/32 maxlen: 32
2a0e:4587::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:9b:a4:71:a0:d5:8b:c0:7c:ae:97:38:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1463a66a9f48e805dd40988cd4ab2a8e6506909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:1e:2e:62:23:f1:24:66:7c:36:4f:06:04:
4e:62:c6:7f:c5:ef:62:a3:59:c8:0a:dd:0e:ed:bd:
47:93:c2:b1:80:7d:95:7b:3d:68:80:bd:a8:ec:ac:
16:a9:ca:41:97:03:38:d8:23:a6:7b:65:be:50:3a:
39:42:c2:ab:86:82:23:50:8c:90:31:bb:97:19:d6:
02:bd:70:3b:cb:88:11:50:72:b3:b5:a3:54:51:76:
11:79:82:2e:39:07:f5:16:aa:02:3e:f4:47:c6:24:
cd:cc:b9:3a:9c:20:c7:b7:a4:fa:61:1e:c5:21:d0:
be:2e:fb:cb:88:c4:ec:10:ac:fd:fd:e9:97:c4:4b:
21:bc:d4:37:bb:03:f7:f6:a1:2d:ad:8f:eb:56:fc:
02:c6:20:db:35:4a:fe:7d:b8:a9:ab:81:80:36:fb:
c1:e5:ec:3e:8a:4c:fa:33:35:df:63:65:de:a9:60:
43:2e:a2:df:34:61:d5:5f:8f:41:1a:3d:19:8a:95:
2e:22:5a:ef:8c:41:3b:5c:56:db:cb:bf:70:6a:4e:
d5:a9:19:6d:0d:77:9c:d7:1f:05:a6:29:28:a8:67:
c4:e8:2f:28:10:04:a6:fb:df:c9:e4:ac:49:f8:a4:
a9:06:f0:31:52:b5:6a:bc:33:be:9a:32:98:14:bf:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:A6:6A:9F:48:E8:05:DD:40:98:8C:D4:AB:2A:8E:65:06:90:9D
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/FGOmap9I6AXdQJiM1KsqjmUGkJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4585::/32
2a0e:4587::/32
Signature Algorithm: sha256WithRSAEncryption
83:cb:38:02:6f:59:2f:79:61:65:d2:e1:87:0b:83:a6:18:9b:
88:cf:d5:1f:89:bc:ce:9a:ef:d6:9a:1e:06:a1:ed:40:6c:47:
49:73:1d:75:71:a2:dd:c9:e9:59:00:e2:43:1c:6b:3d:b6:2f:
1b:cb:b4:26:d3:d6:07:12:5b:ac:85:06:8a:a3:a2:26:84:69:
91:47:ca:d8:7d:25:2c:15:6b:1c:50:68:09:ae:77:9d:2e:01:
32:b0:67:b4:97:51:3a:74:5f:a7:e9:ab:2b:13:18:2d:da:2a:
4c:03:30:f8:54:05:34:c4:57:02:b1:6c:c3:9d:e4:9e:fd:6c:
74:d4:6f:dc:44:01:80:84:98:a9:1d:da:0e:44:d3:93:39:31:
b2:5e:f0:f8:08:d9:6c:48:34:fc:9c:fe:62:06:c4:2d:48:bc:
0d:10:fe:13:b4:b5:3f:01:61:2f:ad:c8:ee:b2:70:cc:09:c2:
b0:35:c6:03:05:6b:c9:f1:ae:b6:f7:6d:a7:3f:7c:bb:d8:38:
18:a8:f2:d9:a2:32:0c:32:c5:c2:47:ee:8e:87:50:b6:46:eb:
cf:d2:7e:53:6d:b1:0c:b7:52:ad:26:69:dc:f0:58:90:a8:48:
ad:44:96:e9:40:e4:0d:21:76:f4:25:81:e4:05:37:07:64:40:
d2:c2:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:22 2025 by rpki-client