Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa
File: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (raw, json)
Hash identifier: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=
Subject key identifier: 7E:78:AC:8F:63:2F:56:A6:85:68:C7:98:5B:D9:66:27:44:82:5B:DA
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0194236A104E8D3D01E9DBA9927ADDA13D04
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214009
IP address blocks: 2a01:ee80:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:4e:8d:3d:01:e9:db:a9:92:7a:dd:a1:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e78ac8f632f56a68568c7985bd9662744825bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:87:93:bb:07:8d:1a:fc:12:f4:f4:92:f8:
b2:61:f3:4d:a9:78:23:57:0c:9a:44:08:5f:02:67:
5b:0e:49:e0:1d:95:55:10:a5:6f:16:91:b2:e1:e7:
fc:2c:13:b9:a1:ab:fe:69:ea:d0:71:92:dd:f9:56:
96:e0:ac:9f:4b:3c:88:54:90:1f:2a:41:eb:32:d5:
d3:5b:5e:19:b9:97:56:3b:ad:52:48:2b:10:56:d5:
dc:92:20:10:ba:40:db:fe:50:fe:1b:9b:8d:1c:72:
ae:6a:e9:cc:e1:4b:4d:09:ed:c8:41:59:1f:79:66:
ae:84:3c:f6:d3:e0:b2:c5:81:0b:0a:69:a6:96:d8:
42:66:bd:02:9c:0b:9c:d1:4d:ae:aa:e3:3f:3d:3b:
38:a4:a7:38:ca:26:b2:a3:d7:87:4b:3d:37:e9:2e:
64:95:d4:e8:01:6f:2e:6f:fe:63:ee:71:3c:b2:6e:
5e:ca:13:27:7a:99:21:2d:64:37:f6:24:35:64:aa:
58:fc:82:5c:3d:ab:aa:c0:73:29:26:6f:12:97:23:
33:5f:ff:2b:89:b5:5f:c1:d7:42:8d:12:00:e1:fc:
8c:e7:fb:c8:c7:12:a0:a3:f2:1e:66:ae:6a:d6:ee:
9a:fa:52:ec:41:ca:18:70:c2:1c:d3:23:a6:a7:05:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:AC:8F:63:2F:56:A6:85:68:C7:98:5B:D9:66:27:44:82:5B:DA
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ee80:dead::/48
Signature Algorithm: sha256WithRSAEncryption
3b:81:18:84:59:72:dd:be:ce:b5:03:f7:6a:fd:88:72:e0:cb:
cc:26:d3:db:52:c2:93:3b:88:6d:c5:fc:07:ee:16:4c:f7:83:
53:b7:b5:76:d6:8f:28:3b:00:51:51:e3:91:07:68:39:ca:ab:
12:2c:ce:c5:20:ec:5e:f4:a8:05:60:ed:57:70:a0:d3:a0:6c:
ec:fb:09:2c:10:4c:77:48:95:40:c6:b1:94:2b:46:02:b5:93:
79:3a:7a:7d:03:2a:8a:19:ed:97:60:74:54:b5:f3:31:ef:c5:
7e:30:d0:44:06:8d:e7:1b:c5:ed:52:57:31:61:22:bd:45:63:
f7:64:4e:2a:4a:10:1f:73:f1:f0:8e:e7:c9:43:79:de:48:e1:
45:8c:0b:83:5f:a4:32:72:92:4b:4c:24:0b:8b:eb:03:a6:60:
4f:80:1e:13:0c:57:34:53:c8:72:66:e7:0c:89:b0:94:0d:ce:
73:46:b4:2b:c7:5a:a8:eb:52:0f:e6:cd:3c:1b:35:fe:1b:e4:
0c:d8:e9:c2:11:1b:58:b1:a1:2b:d4:1a:5f:68:ed:81:29:11:
9a:2d:3c:d2:00:08:c3:ed:f0:ae:bf:3b:4f:6a:09:08:55:00:
09:fe:79:ab:27:ef:52:5b:22:ed:32:f3:1a:94:af:dc:dd:f3:
05:fd:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:39 2025 by rpki-client