Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/_vdRTtZt9JtL5ja2GczGggJ0SbM.roa
File: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (raw, json)
Hash identifier: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=
Subject key identifier: FE:F7:51:4E:D6:6D:F4:9B:4B:E6:36:B6:19:CC:C6:82:02:74:49:B3
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 01941FFA746DDC4BA14BE2406DFB2ECD475C
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/_vdRTtZt9JtL5ja2GczGggJ0SbM.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200747
IP address blocks: 2a04:5d00:10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:6d:dc:4b:a1:4b:e2:40:6d:fb:2e:cd:47:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fef7514ed66df49b4be636b619ccc682027449b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:20:db:4f:e7:22:8a:cf:33:e3:5a:e3:20:
0d:cf:14:83:e1:3f:2b:9e:da:f5:1e:3e:de:d7:10:
be:93:97:f2:3f:84:90:06:91:cf:f1:97:c3:a5:fc:
23:a5:5b:05:e9:76:d4:10:af:6d:23:84:4c:3f:47:
c5:f8:59:27:eb:79:af:67:47:0c:bc:6e:e1:31:f6:
14:48:30:2b:4e:98:d8:60:36:c9:5c:c5:4a:34:fa:
c6:f5:5d:ef:1e:57:41:f3:c9:55:e7:ac:9f:56:06:
1b:64:21:5d:dc:1b:3c:07:93:51:c1:80:27:1c:73:
68:6d:39:0a:5b:5a:d6:f0:66:81:1b:c5:af:54:2e:
1b:2d:a7:40:1c:97:3e:4f:97:0f:2a:af:c2:d6:52:
9e:d0:30:41:75:e7:20:b3:6c:21:4d:7c:a6:3f:fa:
cb:a7:49:bf:da:50:67:d8:cc:c0:6f:6c:4c:5b:d9:
89:34:a3:c7:2d:e2:6b:4a:8f:b6:89:ee:f2:c6:12:
8d:71:66:af:95:77:78:f6:3a:f8:a4:fa:88:4c:57:
e4:d8:1e:26:f0:40:5e:53:09:fd:de:42:dd:b8:e5:
95:ff:44:35:d3:31:7b:c4:7d:cd:c5:58:86:cf:3c:
88:be:35:28:77:02:f0:3f:da:82:e8:b4:ba:54:a7:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:51:4E:D6:6D:F4:9B:4B:E6:36:B6:19:CC:C6:82:02:74:49:B3
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/_vdRTtZt9JtL5ja2GczGggJ0SbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d00:10::/44
Signature Algorithm: sha256WithRSAEncryption
42:9a:89:54:31:d0:fb:c6:c5:06:e1:99:c2:33:2c:d6:a9:b2:
34:2b:93:a0:fa:cf:6a:9c:27:aa:4b:1d:6e:71:13:d9:79:f8:
76:7a:23:ea:04:ad:8f:5d:64:f3:03:9f:38:8a:35:b1:9f:c3:
53:18:70:fe:aa:51:0a:c0:a4:f5:a0:31:ca:a0:c4:d1:92:86:
cc:31:fb:22:b0:53:09:7f:2e:a5:98:85:02:3e:09:3d:88:cf:
03:6b:7a:2f:e9:47:9b:ae:40:ad:78:3c:29:d0:74:ce:c3:7a:
a6:86:98:29:f5:93:a6:7e:0a:3a:21:be:8c:33:ba:0c:18:d8:
d6:f3:e6:0d:b4:77:eb:63:88:e2:5b:8a:f3:5a:3c:24:35:8f:
2a:00:54:79:e8:c3:44:74:5a:77:96:b3:e4:e3:af:7d:59:c7:
f7:19:4d:4d:80:01:df:4a:c7:54:4e:fa:49:12:e5:2d:ef:9f:
8a:70:34:d0:ec:93:2d:37:52:af:f3:e2:d3:ed:ef:81:79:5d:
02:3d:0f:d3:95:2e:c7:12:86:5d:4c:2e:3e:4f:6d:d1:30:3b:
8e:a4:1e:0a:07:ba:18:e5:17:70:bd:17:fe:eb:e8:93:43:79:
67:ad:cb:11:91:24:38:8a:3f:b9:8f:98:0c:c6:c1:1f:40:3b:
ff:26:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:46 2025 by rpki-client