Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/FXy87TSnS3zZKpD3cubdEzL9JTI.roa
File: FXy87TSnS3zZKpD3cubdEzL9JTI.roa (raw, json)
Hash identifier: ev8YOzfcP94Okj6loLdeokLYKFfF9CSd4o8ZPprNj7U=
Subject key identifier: 15:7C:BC:ED:34:A7:4B:7C:D9:2A:90:F7:72:E6:DD:13:32:FD:25:32
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 01941FFA0C82B226067E5737E6F7E342EC71
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/FXy87TSnS3zZKpD3cubdEzL9JTI.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204896
IP address blocks: 2001:67c:4bc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0c:82:b2:26:06:7e:57:37:e6:f7:e3:42:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=157cbced34a74b7cd92a90f772e6dd1332fd2532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:d8:6f:ca:bd:8e:1f:a5:7c:23:3f:98:70:
6b:71:91:57:c1:7f:1b:52:da:5b:1c:38:54:e3:7a:
c1:75:b6:47:94:f0:b9:8a:ae:c6:7e:66:91:f0:3d:
54:25:4a:d4:64:74:df:4c:4c:17:f9:41:44:93:39:
62:3c:c0:a4:32:29:73:77:8d:02:3b:08:cf:b0:b4:
91:d8:06:a1:ae:dd:55:f4:1b:cb:e1:f6:d1:45:6a:
d5:4d:0e:73:a7:a4:d6:ad:7e:5d:5a:c7:74:ea:8a:
51:98:31:6e:fe:de:32:db:a5:0e:16:0c:8c:9a:72:
7e:7b:85:7e:94:78:eb:7a:ea:ce:a1:ff:bd:18:01:
07:d0:db:6b:f2:90:e3:77:56:73:eb:1f:c0:07:ee:
17:46:3f:a0:8a:f2:7c:59:a8:89:86:ea:1d:21:c3:
70:b5:8c:87:7d:b7:98:7c:e4:99:07:b9:93:d5:71:
89:eb:48:84:65:f3:60:e6:fc:4c:0d:ea:26:9b:23:
1f:4e:8b:3a:b5:e6:3c:8f:4c:5c:d0:28:68:55:ec:
d8:1e:b9:cc:e8:40:f9:86:7f:41:86:64:70:37:98:
f4:08:95:cc:52:bb:e9:4c:60:e5:5d:83:53:e5:53:
9e:34:7c:1e:ee:fa:ba:7f:3c:31:b5:4b:4e:40:8a:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7C:BC:ED:34:A7:4B:7C:D9:2A:90:F7:72:E6:DD:13:32:FD:25:32
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/FXy87TSnS3zZKpD3cubdEzL9JTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4bc::/48
Signature Algorithm: sha256WithRSAEncryption
8b:3f:05:47:ee:db:c7:5d:77:fa:84:e0:28:22:ff:9e:51:38:
ea:9c:c0:d4:07:2a:92:11:7a:35:3a:32:9d:f3:52:a4:1a:a1:
09:8a:89:99:53:44:3b:08:30:6e:ad:d7:39:be:16:56:0f:eb:
b5:22:7b:85:82:1c:70:7a:30:0a:99:4a:cc:a9:65:d9:32:8d:
23:cd:c2:5e:4e:8c:75:a1:87:1f:57:0c:4f:e7:39:44:06:7b:
c4:77:23:c0:da:bd:7a:22:09:5f:4b:51:a7:c6:71:2a:37:f2:
ce:a2:b3:fb:b3:61:f3:7f:5b:af:29:37:4a:05:34:49:8e:7e:
43:a7:c0:0e:7d:16:28:f7:20:81:54:5d:da:72:e0:29:ab:1c:
58:d7:b6:61:9d:84:ff:23:7d:99:52:dc:cd:1b:d5:ad:58:ce:
8b:2f:bf:2c:fc:3a:90:2a:cf:fe:d8:da:41:da:31:06:6a:87:
b0:81:72:d2:0b:a3:63:ae:60:e7:6e:78:01:5b:4e:32:cf:27:
a2:67:11:62:bf:51:74:03:f3:29:7f:05:68:b9:93:e0:0e:bf:
ca:5e:6a:33:60:9b:5a:b0:b3:3d:6f:b8:61:76:65:af:d4:0e:
b7:71:f6:03:75:25:41:50:b2:72:4c:34:70:96:1c:10:3c:fc:
26:af:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:14 2025 by rpki-client