Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H0GP1ro0cxh8NzxO50WbcSJR8tU.roa
File: H0GP1ro0cxh8NzxO50WbcSJR8tU.roa (raw, json)
Hash identifier: k1zNRBiwDyJfV9Y6NkozWk+gYtuKfxsEnHl7KMjudfs=
Subject key identifier: 1F:41:8F:D6:BA:34:73:18:7C:37:3C:4E:E7:45:9B:71:22:51:F2:D5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195AF552DFC986944EE4F9552C309896F2E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H0GP1ro0cxh8NzxO50WbcSJR8tU.roa
Signing time: Wed 19 Mar 2025 16:55:49 +0000
ROA not before: Wed 19 Mar 2025 16:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152631
IP address blocks: 2a0f:b400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:55:2d:fc:98:69:44:ee:4f:95:52:c3:09:89:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 19 16:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f418fd6ba3473187c373c4ee7459b712251f2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:5a:00:95:f7:df:63:5b:5e:cc:19:ab:4a:
38:23:92:0c:19:5b:14:8c:cf:eb:dd:76:f3:fb:81:
42:a4:63:a9:2d:9e:0f:d7:61:88:87:9b:99:22:d1:
ac:de:1e:41:e3:e2:d7:6a:06:29:74:6e:87:93:35:
8d:cf:f7:05:0f:a2:e0:cb:d2:45:fa:b1:b2:81:1a:
70:fa:70:87:5c:90:7d:09:da:50:5d:0a:61:c7:64:
ae:18:41:0b:2e:5c:00:7b:2d:67:30:55:71:d9:43:
8e:fd:9a:01:3f:2b:09:a0:de:bd:fa:84:71:5b:31:
d6:73:29:0a:f5:85:77:83:e8:13:9d:8d:cb:b5:4e:
4d:de:a9:b8:2e:36:ac:36:db:ab:0e:a0:08:8b:ee:
5d:66:d9:df:24:13:7e:a6:66:db:89:f0:cc:18:38:
b2:bb:2a:4f:44:65:f8:ab:40:d4:55:04:f8:e8:55:
10:94:9d:fd:97:de:d6:98:c4:47:21:d5:f5:74:a0:
35:84:ce:0b:f0:4e:c7:0c:7f:15:51:ed:de:71:0d:
d8:1c:82:b4:40:ca:f4:7a:24:73:fc:93:9d:94:e3:
17:12:3e:fa:92:65:63:0f:07:4d:e3:72:7e:b0:d5:
3b:2b:e9:19:1e:76:46:77:37:78:d4:30:e2:cb:90:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:8F:D6:BA:34:73:18:7C:37:3C:4E:E7:45:9B:71:22:51:F2:D5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H0GP1ro0cxh8NzxO50WbcSJR8tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b400::/29
Signature Algorithm: sha256WithRSAEncryption
9b:d6:76:bd:2e:73:e9:f3:3d:6f:90:6d:75:47:61:66:c0:b7:
1b:2c:85:1e:e4:a5:f7:90:35:9e:5d:b4:f6:34:f4:4f:dd:e9:
b9:91:2d:a9:2c:42:c8:95:26:a7:f2:a5:03:8e:96:5e:fc:c2:
64:cb:f0:64:af:ce:3b:fa:aa:89:a6:7a:87:74:25:b2:92:e2:
2d:bd:e3:8a:40:f6:9b:41:12:b7:64:58:a2:88:b6:40:51:4f:
e9:79:38:a6:d6:e4:49:19:de:3f:9b:cc:51:b1:79:da:7c:bf:
88:31:fb:3a:60:22:10:98:90:08:7f:ae:b7:84:c0:3f:97:83:
80:cf:12:f0:b7:e5:a0:40:32:74:e1:da:cd:0f:17:89:1e:0a:
99:41:6d:8d:2f:1e:97:5f:ec:ac:fb:ff:74:5f:a8:96:2a:28:
1f:56:4f:a5:58:b6:82:34:3c:c0:b0:d7:ae:4d:1b:f0:d4:39:
28:04:30:3c:c6:9f:54:19:e0:fe:19:df:78:e6:96:a2:8d:98:
b8:8f:eb:f9:2c:8f:4f:e4:8f:52:2f:c9:01:53:bc:7c:f2:87:
0b:22:f9:3e:f3:0e:03:0a:35:81:33:d1:2a:f8:10:89:0d:cb:
b0:90:67:67:77:b5:70:91:62:57:dd:d8:f8:df:4f:e0:3c:a4:
a8:10:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:53 2025 by rpki-client