Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hiNE0XB1SL69Jxixno-VJnsvALg.roa
File: hiNE0XB1SL69Jxixno-VJnsvALg.roa (raw, json)
Hash identifier: B5EEgyqjOpanZrMGFVsAiQLSeM3f2GaO7ae9qvnVUXo=
Subject key identifier: 86:23:44:D1:70:75:48:BE:BD:27:18:B1:9E:8F:95:26:7B:2F:00:B8
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE5C26A1A130E0D644CA490126FCC
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hiNE0XB1SL69Jxixno-VJnsvALg.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211158
IP address blocks: 2a0e:aa07:e021::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e5:c2:6a:1a:13:0e:0d:64:4c:a4:90:12:6f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=862344d1707548bebd2718b19e8f95267b2f00b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:35:6a:42:f6:54:5b:8e:d5:08:67:83:07:
d3:e8:56:00:a2:a3:59:bc:a4:1c:19:50:7d:35:0b:
60:de:65:ef:66:6e:4e:e7:86:50:60:61:a5:c8:cb:
b1:8a:e4:0b:40:e1:b0:a8:f1:37:bb:7a:5a:59:6c:
f6:d9:b2:35:51:be:c2:7f:d4:77:dd:10:72:60:90:
cf:20:43:6c:c8:70:09:df:b8:6f:6c:52:98:08:05:
41:fa:32:8d:15:d8:20:b3:72:e3:4c:fb:e8:5b:62:
67:ca:67:5c:6b:4b:1d:ad:c4:c4:ea:a9:88:a4:d9:
e5:9d:b1:64:41:3b:7d:e2:65:0e:f6:a1:83:dc:7b:
1c:36:2e:55:4e:34:97:98:53:bc:b3:3b:e7:f9:1b:
0b:0a:d4:da:74:45:23:64:91:c8:fb:86:76:03:9f:
98:b0:14:65:24:18:62:0e:3c:04:c0:b9:50:d5:1b:
d1:f8:37:1f:ac:ff:b8:62:22:3f:a6:42:88:4e:23:
d2:ca:b5:26:e1:31:68:1c:1d:bc:71:9f:58:8e:dd:
40:2a:f2:38:12:a1:7d:ea:3b:d5:62:63:aa:4f:41:
fd:64:fd:42:f1:5a:20:ac:f6:00:17:39:58:69:72:
45:48:cb:08:a8:b4:1a:69:6b:9d:02:a8:73:d4:f6:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:44:D1:70:75:48:BE:BD:27:18:B1:9E:8F:95:26:7B:2F:00:B8
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hiNE0XB1SL69Jxixno-VJnsvALg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e021::/48
Signature Algorithm: sha256WithRSAEncryption
82:99:96:ba:9f:69:2e:f0:c4:ef:08:c3:74:08:aa:50:ba:d2:
17:55:bf:dd:0e:68:1b:f3:3e:59:38:88:0e:3e:60:95:79:6e:
e0:d9:09:f6:4b:4e:fe:f5:26:91:5d:68:02:42:8f:43:ec:ab:
bf:3d:3b:df:bf:bc:2c:aa:0d:7b:91:93:bd:ea:44:c6:3b:eb:
7f:cd:c3:b2:ca:0b:58:96:9f:59:8d:28:03:f8:a6:62:67:e9:
2a:30:45:3c:fc:5b:75:fb:be:d2:4a:de:39:a9:78:5a:43:60:
24:56:47:21:09:32:54:6b:b7:36:59:2c:4f:69:ca:26:19:6e:
00:7d:48:c2:a7:13:48:1d:91:08:2d:57:9b:97:d5:a6:15:6e:
7b:7a:12:a0:57:a4:75:8d:20:8c:db:58:a5:f1:3c:6e:ee:7c:
51:b6:da:ab:ec:fa:4d:2e:af:6f:d3:da:37:5b:14:e0:7d:d4:
5a:29:04:9c:67:df:84:82:aa:ad:19:69:54:31:c0:c5:64:00:
93:a4:48:64:55:c7:8a:76:63:44:7f:c3:53:a9:ae:eb:46:b8:
74:ee:13:56:b9:4d:46:8b:3c:f3:be:1a:00:65:53:af:9c:0d:
d9:d5:de:ba:92:1b:57:bc:47:e7:ab:55:90:61:b2:6c:4f:f9:
d6:cf:f1:f6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljuXCahoTDg1kTKSQEm/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjIzNDRkMTcwNzU0OGJlYmQyNzE4YjE5ZThmOTUyNjdiMmYwMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJY1akL2VFuO1QhngwfT6FYAoqNZ
vKQcGVB9NQtg3mXvZm5O54ZQYGGlyMuxiuQLQOGwqPE3u3paWWz22bI1Ub7Cf9R3
3RByYJDPIENsyHAJ37hvbFKYCAVB+jKNFdggs3LjTPvoW2Jnymdca0sdrcTE6qmI
pNnlnbFkQTt94mUO9qGD3HscNi5VTjSXmFO8szvn+RsLCtTadEUjZJHI+4Z2A5+Y
sBRlJBhiDjwEwLlQ1RvR+DcfrP+4YiI/pkKITiPSyrUm4TFoHB28cZ9Yjt1AKvI4
EqF96jvVYmOqT0H9ZP1C8VogrPYAFzlYaXJFSMsIqLQaaWudAqhz1PbIoQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIYjRNFwdUi+vScYsZ6PlSZ7LwC4MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvaGlORTBYQjFTTDY5SnhpeG5vLVZKbnN2QUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ah
MA0GCSqGSIb3DQEBCwUAA4IBAQCCmZa6n2ku8MTvCMN0CKpQutIXVb/dDmgb8z5Z
OIgOPmCVeW7g2Qn2S07+9SaRXWgCQo9D7Ku/PTvfv7wsqg17kZO96kTGO+t/zcOy
ygtYlp9ZjSgD+KZiZ+kqMEU8/Ft1+77SSt45qXhaQ2AkVkchCTJUa7c2WSxPacom
GW4AfUjCpxNIHZEILVebl9WmFW57ehKgV6R1jSCM21il8Txu7nxRttqr7PpNLq9v
09o3WxTgfdRaKQScZ9+EgqqtGWlUMcDFZACTpEhkVceKdmNEf8NTqa7rRrh07hNW
uU1GizzzvhoAZVOvnA3Z1d66khtXvEfnq1WQYbJsT/nWz/H2
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:40 2025 by rpki-client