Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa
File: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (raw, json)
Hash identifier: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=
Subject key identifier: 16:A4:07:4B:9C:74:2B:B7:DB:DC:00:6F:F9:1D:4E:DA:B4:06:12:F7
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 0194228DE3F638027B9262803FA280863062
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44286
IP address blocks: 2a02:2410::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e3:f6:38:02:7b:92:62:80:3f:a2:80:86:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16a4074b9c742bb7dbdc006ff91d4edab40612f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f7:cb:e9:08:aa:9d:a8:9b:2f:6f:80:9c:91:
fc:dc:8f:37:2d:1b:28:f2:28:18:06:64:db:fe:5d:
af:f3:d5:db:43:7b:65:4a:7c:b6:79:a1:13:38:60:
cd:b0:70:be:9f:7a:7c:7a:79:15:42:18:28:a4:85:
8a:98:2d:ad:96:7d:b8:95:96:17:9d:f0:36:67:43:
c4:0f:05:be:d6:f3:a9:fc:93:1d:23:6a:38:a3:c9:
d7:22:60:44:67:a5:58:68:b1:ae:2e:e1:2b:2b:3c:
1b:75:d5:7b:bf:74:13:94:59:ae:5a:98:ba:ed:60:
52:78:ba:1a:cb:21:56:35:4f:09:01:38:70:cb:c9:
7d:73:a3:12:4f:3f:d7:36:bc:0f:ca:fe:bb:21:14:
11:14:00:b5:90:08:b1:2f:35:46:57:b2:d7:9c:28:
23:86:1e:dc:2f:d0:b0:2d:9a:f7:b8:66:b5:3d:ef:
3d:6e:97:15:57:1b:b3:f9:02:71:eb:f2:6d:2b:cc:
53:a7:a3:a1:da:19:0e:a4:62:d2:97:fe:b0:d1:fe:
d1:fd:49:0c:d7:43:a6:dd:13:c8:c4:65:9b:ef:7f:
f6:90:1f:87:38:c2:7b:74:58:54:ea:f7:48:35:4d:
b0:61:9b:17:07:89:39:3c:10:d3:74:fb:09:02:28:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A4:07:4B:9C:74:2B:B7:DB:DC:00:6F:F9:1D:4E:DA:B4:06:12:F7
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2410::/32
Signature Algorithm: sha256WithRSAEncryption
a4:56:6c:d7:ac:02:44:2f:f8:ec:fb:2c:fc:8b:a9:cf:5d:38:
fb:ad:45:26:e9:4e:b3:7c:b0:c1:3e:41:7c:d9:70:d7:a4:db:
83:ba:51:16:fb:ea:15:40:3f:0c:91:d3:e5:39:d8:3b:17:38:
5c:8d:b9:d2:66:28:cb:dc:33:c2:1f:1c:8b:43:49:0f:46:ea:
94:e9:76:2e:de:e6:9a:2f:de:9c:97:f1:8c:8b:06:4e:0c:94:
3e:b3:d3:50:c8:78:c4:fe:1c:68:af:8a:82:95:f2:a7:00:28:
74:79:18:af:de:2e:f5:fd:5c:23:25:e1:14:e5:b0:aa:2f:c6:
d3:b7:27:c7:1b:9d:8c:cd:dc:67:da:81:19:24:b8:70:09:5d:
db:b7:b8:e0:ce:c3:b8:03:f9:3a:35:bc:1a:86:a9:cc:8d:31:
59:f8:d2:07:4e:c8:1b:9e:0f:3e:ab:7a:2f:ad:ac:63:cf:be:
5f:a1:64:7b:7d:d2:ba:fa:62:c3:3c:33:fe:3b:12:6a:b0:3f:
40:0d:f6:8d:88:87:d9:cb:f9:d8:85:bc:f8:8a:69:6e:b2:11:
11:34:1b:22:2b:be:47:3a:64:d2:ff:55:e2:be:e1:fb:89:25:
a4:fd:dd:8b:37:d9:e1:58:3d:2b:4d:74:28:69:8a:d1:d9:7b:
ff:54:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:17 2025 by rpki-client