Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/HHQySsc2sVncpl_R112Rp7UBme8.roa
File: HHQySsc2sVncpl_R112Rp7UBme8.roa (raw, json)
Hash identifier: o5Y2R7hIF0WuEuOP3GMyoZ2q0qHpF5bawNz2lBwugJ8=
Subject key identifier: 1C:74:32:4A:C7:36:B1:59:DC:A6:5F:D1:D7:5D:91:A7:B5:01:99:EF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 0194E6AB198F99069EA4E2A7205CB1114522
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/HHQySsc2sVncpl_R112Rp7UBme8.roa
Signing time: Sat 08 Feb 2025 17:46:00 +0000
ROA not before: Sat 08 Feb 2025 17:46:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50028
IP address blocks: 2a0f:d300::/48 maxlen: 48
2a0f:d301::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e6:ab:19:8f:99:06:9e:a4:e2:a7:20:5c:b1:11:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Feb 8 17:46:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c74324ac736b159dca65fd1d75d91a7b50199ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:7a:dc:a4:83:e3:25:0a:64:13:45:c7:86:
7d:35:1f:4f:b9:df:f2:65:9a:80:ac:af:64:22:ee:
e8:e6:07:3b:1b:d9:77:ef:eb:b3:25:6e:19:26:46:
ad:69:71:81:8b:c8:47:15:50:fb:ab:f8:86:28:52:
8e:2c:fa:7f:f9:47:c1:61:23:56:51:62:c7:26:a7:
12:23:c9:89:c4:62:24:4e:b7:c5:0c:da:a1:e6:32:
2c:3d:08:1b:e9:f7:5e:8d:24:aa:5c:e6:40:38:15:
7e:f8:f5:7b:07:34:a0:2b:40:e0:62:b4:33:1c:88:
bd:ad:56:4f:6c:5f:b5:db:91:44:42:4d:28:69:99:
b5:26:05:6b:e4:ac:5c:8a:db:28:73:1f:5f:eb:4f:
57:ac:50:50:99:cd:69:b9:b0:da:8f:37:a8:16:e8:
7a:df:93:6e:ce:2f:25:8e:41:1c:fa:1a:ea:76:4d:
4e:b4:30:b6:7d:f7:e8:d2:6e:1c:50:13:b3:19:78:
4e:ff:42:94:81:68:40:ce:73:e2:90:52:10:ba:f1:
18:97:f8:6e:9b:27:d6:af:cf:78:1d:07:a9:e1:99:
d8:c8:5f:44:fa:c3:1e:58:4b:59:15:f6:b0:3f:8d:
d8:3d:92:a1:3c:6d:3e:d5:09:12:01:d3:eb:3e:e5:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:74:32:4A:C7:36:B1:59:DC:A6:5F:D1:D7:5D:91:A7:B5:01:99:EF
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/HHQySsc2sVncpl_R112Rp7UBme8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:d300::/48
2a0f:d301::/48
Signature Algorithm: sha256WithRSAEncryption
27:2a:c2:c8:1d:d4:3d:39:1b:d8:6c:0f:bb:19:8e:35:b0:85:
2e:ca:4a:7f:82:29:71:98:1b:6b:fc:61:b7:43:0a:8e:e3:02:
90:b1:b9:4b:14:f0:cb:ba:a9:d6:83:97:09:cb:76:cf:36:0e:
a0:c7:6d:a9:0c:aa:10:4e:ca:60:fe:54:94:8f:b9:64:2c:7a:
05:b5:e5:00:da:9e:d2:fc:6d:6f:a5:25:5f:68:af:fa:cc:69:
05:73:e5:a1:e7:e7:4c:59:ad:cf:5d:20:c0:19:32:84:77:9d:
5e:f3:e5:c5:ea:d2:57:7b:1b:10:17:e1:1d:05:65:40:d9:82:
af:03:46:56:28:79:62:30:8b:49:8b:ff:62:2c:90:90:a1:1e:
64:5c:cb:13:60:d4:e5:34:62:d5:e5:e4:be:33:aa:7f:3a:2d:
b5:64:60:9f:f8:da:e7:6d:12:c2:2f:87:2b:16:01:35:ad:0e:
b9:46:80:48:27:ef:82:e6:32:7f:ee:b1:1e:9d:1e:de:86:95:
99:fd:ee:44:a2:07:ee:8d:6f:55:5f:44:c9:9d:9f:b8:70:b0:
63:f3:28:ae:ad:9b:e6:22:32:18:54:20:28:83:e4:b9:46:ba:
4d:11:dc:56:a2:b8:cc:9e:ec:64:8b:58:3e:1d:35:6e:5d:0f:
37:ae:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:39 2025 by rpki-client