Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/fiT--EnKPMRIAOIBu2plf_sa3p8.roa
File: fiT--EnKPMRIAOIBu2plf_sa3p8.roa (raw, json)
Hash identifier: nonsYDPhMylY0WYYHaHKoSrlK7lW62Gb9rTUFrXzscQ=
Subject key identifier: 7E:24:FE:F8:49:CA:3C:C4:48:00:E2:01:BB:6A:65:7F:FB:1A:DE:9F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F70C84233555111989EC192A26C1BB55
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/fiT--EnKPMRIAOIBu2plf_sa3p8.roa
Signing time: Thu 22 May 2025 08:11:54 +0000
ROA not before: Thu 22 May 2025 08:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:0c:84:23:35:55:11:19:89:ec:19:2a:26:c1:bb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 08:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e24fef849ca3cc44800e201bb6a657ffb1ade9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:13:04:ca:79:18:6b:df:2f:82:65:3c:53:
bb:35:f1:0d:78:0d:f3:e6:dd:b8:21:f2:a6:50:23:
07:b6:26:b3:67:1c:dc:73:1c:25:fe:23:cb:5e:39:
32:92:0d:e2:89:58:fb:7e:03:40:0f:ff:ef:28:db:
32:9f:de:fc:a9:6d:42:43:ec:e8:3f:68:4b:f2:68:
98:f7:5d:ab:06:de:a8:e0:67:3b:09:a1:60:f2:b2:
32:62:ff:17:22:c3:47:12:cb:dc:04:c8:7a:9c:bd:
16:75:79:ed:be:47:44:65:1a:f9:0e:c9:54:bd:22:
ec:dc:ee:eb:de:f9:95:36:e1:fb:d7:54:5c:66:ed:
4d:5b:73:90:03:d7:8d:26:2d:ed:ad:72:10:85:d1:
ad:17:d8:ce:ba:20:e7:02:f0:9d:de:7d:15:96:06:
22:72:3d:50:81:eb:ff:b5:08:50:69:0d:db:44:5e:
a5:10:99:05:38:d0:cd:76:b1:a5:01:72:7e:bf:6b:
ee:30:24:4b:32:55:4c:1e:45:b8:a2:eb:33:a2:b4:
c3:db:ff:23:63:74:f6:eb:c0:cd:7e:23:fa:90:fb:
88:71:30:00:8b:b9:89:9b:a0:16:ee:74:b5:98:e1:
3a:6f:c3:10:2a:db:5b:02:7c:13:02:0c:84:73:13:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:FE:F8:49:CA:3C:C4:48:00:E2:01:BB:6A:65:7F:FB:1A:DE:9F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/fiT--EnKPMRIAOIBu2plf_sa3p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
c8:3d:30:ba:f1:38:24:e6:f9:c6:e4:20:df:0d:6b:a2:bd:41:
a5:2b:5b:57:6c:6a:21:9f:7b:54:9b:61:a4:0c:68:06:55:92:
09:41:2e:f4:67:db:6a:4d:ca:93:bf:05:f7:39:e2:f5:e4:8b:
33:1b:1c:21:ca:1a:5e:d6:c4:51:52:d8:a8:19:1f:df:32:38:
c2:c2:2b:70:8d:1b:ee:0a:53:af:2a:56:2b:c6:7a:cd:1e:91:
1a:b0:4c:26:b2:e8:64:d0:25:b6:c4:bf:4a:3e:50:4b:a1:c2:
fc:b7:1f:b8:eb:35:07:60:66:37:97:82:fe:d1:0f:63:aa:3a:
82:c3:58:93:07:94:50:83:55:26:dc:cb:82:50:8c:0b:2b:e1:
b2:1e:b3:dc:6d:5b:ca:ae:7a:f5:a8:82:5d:dc:15:6a:87:23:
45:0a:30:14:da:0b:59:97:98:47:64:b7:80:5f:d0:44:35:bd:
2a:4a:11:11:6e:c4:34:8b:cf:bb:14:24:51:1d:25:f9:a6:ea:
cb:a8:5c:21:31:7d:42:9a:f3:22:bd:dc:d3:11:41:2b:bc:ab:
ad:cd:43:08:36:91:75:50:7f:32:51:12:60:4d:02:bb:a2:01:
bd:28:9f:50:05:d9:c5:0d:26:55:aa:2f:b1:7c:f9:6a:41:c6:
da:f5:f2:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:24 2025 by rpki-client