Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa
File: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (raw, json)
Hash identifier: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=
Subject key identifier: 1D:DE:84:7E:86:95:EA:74:F7:1C:23:7A:5D:A7:8E:8E:27:7A:29:E1
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC41008087A496E66700CF9BA367A9
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43182
IP address blocks: 2a0d:f740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:41:00:80:87:a4:96:e6:67:00:cf:9b:a3:67:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dde847e8695ea74f71c237a5da78e8e277a29e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:ab:97:ff:1b:4a:bd:b4:06:55:15:91:64:
51:8e:92:73:e5:eb:be:01:cd:0c:2d:05:5d:a7:c0:
2b:fc:fa:06:1f:b8:63:60:f1:93:47:e6:79:e3:9a:
6e:8d:02:3a:81:2b:59:3a:e2:f6:bd:8c:96:2a:02:
b1:49:84:8d:20:5b:5b:f9:74:67:e8:60:15:0f:07:
fb:7b:0b:d7:ff:df:ba:8f:40:74:12:7a:43:45:65:
19:11:30:f6:d6:dc:58:6d:5a:ac:48:2f:d5:40:5e:
3c:f4:d2:0d:8d:c5:b6:11:b8:6d:93:d8:9c:ba:9b:
88:1d:90:ff:48:97:e4:2c:c3:70:40:04:91:e1:6d:
cc:83:9c:5d:c3:d3:21:1c:6d:ff:5f:c6:ed:bb:ff:
76:8e:69:f8:8c:63:11:f4:7b:c7:62:a2:d1:a1:c7:
f3:5f:1e:a3:6e:0f:b0:a4:1f:06:fe:5b:ab:a8:34:
ab:66:0f:02:af:c0:61:0e:6c:ba:33:1a:01:57:87:
53:f6:bd:4d:92:2b:3e:13:a3:df:ce:b4:3f:08:65:
5d:80:bb:55:3f:75:1e:92:44:c5:f7:fc:32:e7:b0:
95:ba:19:67:4a:91:c3:07:b0:c2:01:19:34:91:a5:
03:d9:20:fa:9d:bf:51:44:d8:e5:b6:aa:69:4e:30:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DE:84:7E:86:95:EA:74:F7:1C:23:7A:5D:A7:8E:8E:27:7A:29:E1
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f740::/32
Signature Algorithm: sha256WithRSAEncryption
28:df:bc:10:6e:7e:66:77:7c:35:2f:2e:3e:d8:61:71:74:9c:
81:90:72:75:f5:fb:5a:d3:d8:82:45:00:1d:5b:7a:14:fa:7a:
59:ad:30:67:d2:5a:03:1d:fb:c5:33:6e:d0:b9:53:e3:fb:fa:
af:17:56:4e:5b:bb:9f:d4:a6:a8:ae:e6:12:28:47:ca:f3:ed:
40:5e:40:68:b4:e5:0b:73:76:a6:06:be:8d:c1:64:51:1f:d6:
c4:a8:26:b8:9d:52:49:15:30:cc:2b:8b:f7:a5:ab:4e:ad:56:
dd:1a:27:bc:be:d0:65:26:28:af:1f:3d:49:b6:d7:79:f3:cc:
c4:02:3d:88:6f:e5:85:8a:11:88:fb:5a:9e:53:b5:eb:15:1f:
7f:70:67:c4:a0:56:f9:9a:a1:c2:e9:6c:d7:9c:17:21:49:21:
e5:72:f1:e8:16:7c:be:b9:f8:64:4e:90:22:e5:f6:d4:6b:d1:
09:72:3c:d2:61:e9:f3:2d:34:1c:7b:81:fd:cd:05:e5:fc:8a:
94:a4:f9:e7:9c:e5:b0:cb:aa:33:54:65:03:04:e3:94:e3:41:
80:51:5e:39:77:72:9f:b5:a1:63:74:04:96:e3:47:1c:0f:49:
32:8f:c1:a5:fb:1a:30:b5:8c:10:94:00:12:03:67:8e:0e:4c:
bc:2c:2d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:16 2025 by rpki-client