Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/_OiChs3aOD95izxVXaCOo2qgpvA.roa
File: _OiChs3aOD95izxVXaCOo2qgpvA.roa (raw, json)
Hash identifier: tLbzYzrIK504sxJ59bK+1HEvF9TcLW4pKN1xZgqHSVc=
Subject key identifier: FC:E8:82:86:CD:DA:38:3F:79:8B:3C:55:5D:A0:8E:A3:6A:A0:A6:F0
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019420D5B2E18812C494DADC7B89030B6CFD
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/_OiChs3aOD95izxVXaCOo2qgpvA.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198515
IP address blocks: 2a0d:70c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b2:e1:88:12:c4:94:da:dc:7b:89:03:0b:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fce88286cdda383f798b3c555da08ea36aa0a6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:eb:81:17:41:ae:dd:2b:98:19:af:90:89:
b4:50:01:0c:88:45:82:3d:ca:48:fb:3c:4f:66:0a:
06:fe:28:a2:56:f0:a3:38:a9:96:11:84:15:17:52:
e9:12:62:ab:d7:f5:cf:2c:d6:27:89:80:86:2e:3f:
ca:2c:42:f0:c6:68:79:23:13:8e:cd:20:40:76:b6:
17:46:2a:9f:96:21:f7:1a:ab:52:a3:d6:56:0c:71:
9b:51:04:44:d9:7c:78:69:e2:4c:56:8c:96:2c:d2:
b0:ee:df:2f:ef:9c:86:84:f3:91:36:42:71:d2:0d:
73:28:73:d9:bc:c7:c5:af:eb:5c:85:1d:eb:4e:c2:
2d:a5:cf:71:1d:7a:00:56:01:94:e0:4b:63:ca:f4:
31:8d:8a:e3:46:43:60:58:1d:83:83:29:55:0d:3c:
e4:36:f8:1b:df:88:bf:22:21:6b:aa:be:56:37:f0:
82:e5:1e:47:8d:43:6b:a7:c6:c1:03:c9:47:37:33:
2e:83:c2:5c:fc:cd:72:93:d1:2f:7e:f8:82:da:50:
09:2c:7d:55:3d:5d:00:f9:2a:90:f9:1f:58:e7:ee:
90:60:f8:0b:be:c4:4f:49:6f:2d:d1:a9:68:14:32:
89:5f:07:e8:70:0a:04:4d:a3:e2:7b:6d:06:c0:06:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E8:82:86:CD:DA:38:3F:79:8B:3C:55:5D:A0:8E:A3:6A:A0:A6:F0
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/_OiChs3aOD95izxVXaCOo2qgpvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:70c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:52:bd:90:0b:b3:ff:b1:53:8a:8a:a1:7b:04:17:4b:60:cc:
33:8c:42:e8:a8:ed:25:1d:c8:8f:7a:4c:0a:5a:0a:d9:05:7c:
0c:89:f6:c9:e4:ae:7f:c7:dc:93:31:42:49:ba:ce:d9:5d:ac:
58:a9:b0:2a:83:04:4f:6f:f4:af:25:e3:50:54:c8:6a:a8:df:
30:8b:f1:82:2b:1a:b6:f2:89:93:c8:b3:8b:94:f2:ae:02:5d:
74:5e:1c:2e:bf:0d:7b:cb:61:09:22:3d:0a:fe:7b:d7:ce:7a:
de:3d:f5:86:7f:b9:69:dd:8f:25:92:95:8a:9e:a5:19:4e:14:
c0:c7:e2:90:65:e1:fa:d7:01:81:fb:67:03:1b:6a:6f:06:f6:
c5:cd:43:e9:a5:bf:be:d9:fb:bf:75:be:17:22:e7:59:86:e6:
db:aa:0b:3a:97:31:63:b4:e4:6a:44:5d:28:87:12:28:06:af:
85:1d:04:3d:34:86:f4:f6:15:d1:5c:ab:01:fd:81:cf:60:f9:
96:2b:1e:82:00:76:32:30:57:9e:41:b3:f6:b5:c7:a9:e4:7f:
24:0d:2f:80:50:62:f0:be:d1:91:40:c9:dd:a5:f8:91:da:fd:
55:7b:a8:49:b6:53:0d:45:28:97:cd:4d:b1:9e:6f:dc:1e:23:
a2:4a:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:31 2025 by rpki-client