Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/FGBhAbbMNj4v1on9HtnxES8TEQQ.roa
File: FGBhAbbMNj4v1on9HtnxES8TEQQ.roa (raw, json)
Hash identifier: 9y2JLygloGGLSs3NexJ4JtG2R3q5h0THd0I5dmQq2sc=
Subject key identifier: 14:60:61:01:B6:CC:36:3E:2F:D6:89:FD:1E:D9:F1:11:2F:13:11:04
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019621BBB527063589A2F47CF09F1ED5692F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/FGBhAbbMNj4v1on9HtnxES8TEQQ.roa
Signing time: Thu 10 Apr 2025 22:04:31 +0000
ROA not before: Thu 10 Apr 2025 22:04:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:21bb:42df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:bb:b5:27:06:35:89:a2:f4:7c:f0:9f:1e:d5:69:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 10 22:04:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14606101b6cc363e2fd689fd1ed9f1112f131104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:f8:03:7c:68:94:6c:07:9f:5f:e4:4e:55:
67:e5:bf:ab:2c:9b:c8:c4:33:3d:03:b6:3c:35:6e:
54:e7:9b:b9:6f:42:6a:4a:e4:09:12:6a:12:e0:7f:
c0:be:f2:e2:cc:26:69:e8:50:08:23:43:e2:64:76:
2a:ca:ba:ed:77:3b:e2:ba:c2:c2:ce:cc:72:91:3b:
7b:0b:66:15:cc:bf:ff:85:72:84:e7:79:ba:de:58:
63:fa:d8:59:9e:a7:84:70:e1:58:56:cd:6a:36:46:
38:9d:80:58:7e:f1:0d:11:87:5e:fe:35:6e:5c:8a:
d3:63:de:b9:ed:f6:33:d9:5b:cb:e1:ea:e3:45:18:
64:0e:6c:2d:07:f0:20:3c:f3:68:1d:34:46:0a:5b:
37:6d:da:99:72:8d:7f:01:51:79:c7:41:e3:1f:f9:
72:9a:63:70:6e:62:08:7d:0e:d5:d7:87:8d:15:df:
95:0f:00:84:7b:fb:89:6d:8d:75:21:5c:0a:99:0d:
63:c6:6a:6d:72:b7:c2:a4:fd:a5:a4:e0:96:72:b0:
02:98:dc:0b:da:7e:41:d4:25:46:ec:0b:92:3b:0e:
37:a6:ae:73:15:aa:9b:1d:ce:e8:01:f6:33:6b:68:
f5:2d:94:37:a0:ff:7f:41:f5:01:32:e0:85:15:52:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:61:01:B6:CC:36:3E:2F:D6:89:FD:1E:D9:F1:11:2F:13:11:04
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/FGBhAbbMNj4v1on9HtnxES8TEQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:21bb:42df/128
Signature Algorithm: sha256WithRSAEncryption
66:60:fb:b0:4c:58:6c:8f:c2:e4:f3:8e:5b:33:46:e1:64:ea:
4b:1e:7d:ab:74:ca:43:c0:64:a1:4b:18:69:3f:77:a1:ab:e5:
d0:a1:98:8f:41:6d:16:81:1c:c1:10:7f:34:25:8b:66:03:e1:
f6:d8:2a:2a:b9:95:77:80:c7:6d:34:bf:29:67:5d:f0:e2:2b:
0e:31:fc:36:2b:dd:da:c1:f2:83:97:45:fa:12:17:85:e8:fe:
24:0c:06:63:6a:2b:96:80:80:a2:af:be:8a:12:73:f8:2c:14:
79:9c:24:ac:36:c6:50:5c:6c:a7:51:3d:35:0b:5f:92:ba:11:
ce:93:1f:92:a9:02:95:a1:78:f1:06:3a:c6:cc:3b:42:b0:2a:
8d:7b:44:4f:72:3b:33:57:9a:bc:c1:be:46:8a:cb:46:ca:63:
2c:5c:1a:28:ab:19:0c:59:0f:bf:8d:b6:38:41:03:53:09:f7:
7a:97:a0:dc:49:48:52:fd:b6:7e:4f:38:7e:76:33:9a:a4:18:
c0:6b:e3:7e:4a:e9:da:60:e9:ca:b9:34:14:70:97:5a:8f:da:
15:2b:22:53:6c:06:78:e2:fb:21:b9:7c:59:da:b1:9b:a3:df:
60:4f:d6:bb:54:2b:98:b1:28:1b:fb:04:1c:27:96:fd:7a:8b:
4f:f9:50:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:05:02 2025 by rpki-client