Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa
File: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (raw, json)
Hash identifier: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=
Subject key identifier: 7E:F1:1A:66:15:BE:18:63:21:85:D6:E7:EC:4C:D8:CF:18:53:3B:46
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 0194258F45A71A5E387F872CBCE50E26BE17
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199926
IP address blocks: 2a03:dc40:ffef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:45:a7:1a:5e:38:7f:87:2c:bc:e5:0e:26:be:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ef11a6615be18632185d6e7ec4cd8cf18533b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:27:5a:ae:c4:28:b3:11:55:29:83:e1:9f:
7d:b9:42:94:26:cd:8b:c1:e2:02:45:0b:5c:3f:4f:
5c:12:18:c3:70:b0:ee:02:65:10:e7:d2:87:b2:f1:
97:07:21:1e:b1:10:81:b3:ad:bb:ca:38:cd:c7:2e:
5e:d8:6d:2b:9c:30:29:83:49:ba:69:3d:4a:4f:0b:
71:ff:44:4d:d1:64:49:70:3f:47:f9:d9:c1:f9:27:
c2:a7:be:33:47:68:24:19:c9:0e:7d:a3:ed:69:a4:
c6:88:de:3b:08:0d:62:2f:10:58:b3:60:00:49:69:
d5:70:45:75:f3:fd:31:c4:b5:13:0b:24:b7:60:97:
53:48:5e:f3:0b:ee:a8:8c:9e:0d:22:a3:92:43:79:
a9:ed:6b:99:e7:62:4b:a1:79:32:01:75:dc:6b:af:
d9:6d:d4:ff:67:e0:0b:b3:de:a1:4f:6a:85:5f:be:
f8:42:31:79:43:66:ba:b2:ee:ed:a6:49:7b:ce:e1:
c4:6a:46:76:e3:20:42:78:30:b9:92:26:c2:b0:ec:
dc:1b:27:43:d9:a9:10:c4:df:22:18:9e:8e:e0:8d:
2c:4a:c6:4b:c7:f5:ed:da:a4:6e:29:c6:cc:af:03:
eb:c1:f1:7c:ad:20:c7:9c:79:dd:c4:a2:76:fd:20:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:1A:66:15:BE:18:63:21:85:D6:E7:EC:4C:D8:CF:18:53:3B:46
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:dc40:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
87:08:4f:c5:06:5c:c7:5a:f6:cc:3b:11:77:91:fc:ae:1c:b7:
83:66:f4:15:d3:da:3b:7a:0c:f5:15:4c:7f:61:10:d6:c2:e6:
1d:75:1f:36:c9:c9:84:9c:4c:1b:bb:a1:86:95:c6:d8:9a:0a:
02:e7:31:93:94:e7:fd:f8:31:1a:88:f6:d3:e3:6c:2b:26:f1:
0f:bb:1d:d8:54:c2:18:ba:e7:a4:45:64:f4:ae:08:11:73:5b:
2c:90:44:d3:54:89:60:31:79:5b:4b:b8:52:36:be:85:b9:4e:
c6:16:c9:b4:82:19:2b:4b:d9:60:29:ef:0d:7e:7c:f1:6f:13:
6d:17:99:3c:4c:69:f9:4a:82:19:fc:09:fd:eb:11:36:a6:ed:
b6:53:a7:f5:05:43:f5:e2:65:12:0e:63:cd:de:17:b8:d6:0e:
55:28:25:f9:e7:45:fe:d4:27:54:4b:65:ad:36:76:ea:2d:fd:
99:c0:4e:e8:16:42:b7:e8:88:d8:6e:62:3a:bb:e6:99:38:fc:
0b:39:f4:85:83:83:f6:b2:c9:fd:74:8a:8d:52:0a:f4:88:5f:
3b:7d:5e:b5:ff:1d:f0:dd:df:ae:15:2c:2c:91:0b:95:cc:0a:
c8:17:b0:49:0c:51:f5:65:fc:f6:b5:3f:d3:94:a4:75:3f:e5:
36:1f:97:76
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj0WnGl44f4csvOUOJr4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjYyZGJhZWNkMzU5YTRhMmE4OTEyY2YyZTY2OTNiMmY0
OGM5ZWYwHhcNMjUwMTAyMDU0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWYxMWE2NjE1YmUxODYzMjE4NWQ2ZTdlYzRjZDhjZjE4NTMzYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSAnWq7EKLMRVSmD4Z99uUKUJs2L
weICRQtcP09cEhjDcLDuAmUQ59KHsvGXByEesRCBs627yjjNxy5e2G0rnDApg0m6
aT1KTwtx/0RN0WRJcD9H+dnB+SfCp74zR2gkGckOfaPtaaTGiN47CA1iLxBYs2AA
SWnVcEV18/0xxLUTCyS3YJdTSF7zC+6ojJ4NIqOSQ3mp7WuZ52JLoXkyAXXca6/Z
bdT/Z+ALs96hT2qFX774QjF5Q2a6su7tpkl7zuHEakZ24yBCeDC5kibCsOzcGydD
2akQxN8iGJ6O4I0sSsZLx/Xt2qRuKcbMrwPrwfF8rSDHnHndxKJ2/SCTcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH7xGmYVvhhjIYXW5+xM2M8YUztGMB8GA1UdIwQY
MBaAFGe2Lbrs01mkoqiRLPLmaTsvSMnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTIt
MjgxZWVlMzFiNzQ3LzEvZnZFYVpoVy1HR01oaGRibjdFell6eGhUTzBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTItMjgxZWVlMzFiNzQ3
LzEvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPcQP/v
MA0GCSqGSIb3DQEBCwUAA4IBAQCHCE/FBlzHWvbMOxF3kfyuHLeDZvQV09o7egz1
FUx/YRDWwuYddR82ycmEnEwbu6GGlcbYmgoC5zGTlOf9+DEaiPbT42wrJvEPux3Y
VMIYuuekRWT0rggRc1sskETTVIlgMXlbS7hSNr6FuU7GFsm0ghkrS9lgKe8Nfnzx
bxNtF5k8TGn5SoIZ/An96xE2pu22U6f1BUP14mUSDmPN3he41g5VKCX550X+1CdU
S2WtNnbqLf2ZwE7oFkK36IjYbmI6u+aZOPwLOfSFg4P2ssn9dIqNUgr0iF87fV61
/x3w3d+uFSwskQuVzArIF7BJDFH1Zfz2tT/TlKR1P+U2H5d2
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:19 2025 by rpki-client