Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/hYrcWn28QF87PT5GR-h_Avch49E.roa
File: hYrcWn28QF87PT5GR-h_Avch49E.roa (raw, json)
Hash identifier: yZsmK6dgSPwi89O4yC7VPRqXoei5G1XdD0R6Z7wiEg0=
Subject key identifier: 85:8A:DC:5A:7D:BC:40:5F:3B:3D:3E:46:47:E8:7F:02:F7:21:E3:D1
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0197E5FB1D944AB0D825FB41312E9F6433FB
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/hYrcWn28QF87PT5GR-h_Avch49E.roa
Signing time: Mon 07 Jul 2025 17:42:08 +0000
ROA not before: Mon 07 Jul 2025 17:42:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a0e:9183::/32 maxlen: 32
2a12:3145::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:fb:1d:94:4a:b0:d8:25:fb:41:31:2e:9f:64:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jul 7 17:42:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=858adc5a7dbc405f3b3d3e4647e87f02f721e3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:f7:a3:53:ef:61:a7:40:5a:47:9d:a3:a9:
50:75:e5:7b:92:e8:9d:c1:a4:9d:77:23:8f:80:a7:
2b:a3:c1:96:1b:0f:85:e2:1f:f4:fd:4c:13:63:c9:
28:b9:90:e2:3a:ac:39:b3:5e:b5:3f:5b:53:45:b2:
f6:17:1a:28:05:3e:a9:f1:a9:b0:b7:13:ec:db:9b:
de:61:38:03:75:79:27:83:b3:46:c1:eb:4a:1a:fd:
09:b1:94:92:03:30:41:f9:9b:c2:d2:63:f3:7d:91:
16:8a:98:09:6e:ad:63:63:01:ed:37:d2:1b:29:de:
d1:0a:e6:29:97:50:f9:46:b9:ea:36:00:83:04:7d:
5d:b0:03:ed:d5:0f:f3:8a:2a:f2:0b:f6:88:a5:c8:
7f:45:4c:90:49:dc:40:3f:9a:fd:90:2a:9f:4a:7a:
33:71:73:8d:80:2d:70:4b:ad:e5:a8:7d:af:bc:64:
66:43:17:d3:60:79:98:63:7f:1c:2e:fd:57:7c:0f:
c7:b4:88:e8:a5:fb:cf:ef:f4:ce:9c:62:3d:28:9b:
67:bd:95:a7:e1:07:4a:45:2d:85:b7:cb:17:43:e0:
81:ef:3d:7b:f0:a3:bf:ce:f2:b8:06:f7:34:02:4e:
d5:3e:c7:c6:58:53:ff:7f:5d:b9:04:d6:ab:27:47:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:DC:5A:7D:BC:40:5F:3B:3D:3E:46:47:E8:7F:02:F7:21:E3:D1
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/hYrcWn28QF87PT5GR-h_Avch49E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9183::/32
2a12:3145::/32
Signature Algorithm: sha256WithRSAEncryption
75:ad:d9:73:ff:a3:c0:24:0f:df:f8:cb:02:5c:ee:fd:08:9a:
43:ed:49:f3:c5:5e:1e:e7:26:d0:2f:57:77:d5:34:36:71:2c:
f0:c5:2a:8b:bc:93:dd:8d:85:8f:c0:d3:1d:20:bb:1b:b2:fc:
8e:91:f7:7e:62:92:54:19:c7:ad:f3:22:a7:47:70:11:7e:e6:
ac:00:2f:05:e0:69:f1:e8:78:26:ef:b2:54:75:81:7b:16:3c:
41:5e:0b:c8:cc:1f:8b:03:2b:3c:45:08:41:f5:13:56:a2:c6:
33:3a:ad:61:0c:b7:79:c7:b3:50:99:0a:0f:08:05:58:85:3d:
67:45:a4:88:81:b2:e8:4b:2b:89:26:15:b1:d2:47:64:cd:ad:
a5:c8:d3:9b:26:60:10:f9:e8:56:03:33:40:14:b5:29:50:c5:
98:81:05:99:f4:bd:c7:d2:9d:8d:76:77:ca:bf:1f:d5:df:df:
f1:16:a8:4b:36:9b:81:10:07:77:c5:ae:ee:55:51:50:6b:29:
71:5b:d0:cd:97:31:ac:69:9d:f4:3f:90:6b:ce:26:c9:95:eb:
8a:50:75:01:e1:cf:5d:7e:58:13:8c:e7:0b:4f:ab:d9:f8:f0:
35:2d:5d:71:9f:5a:49:cb:22:33:10:e9:5a:fc:0c:4c:69:0f:
17:bf:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:59:00 2025 by rpki-client