Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HOZ4JFKp2bZf3ztcHqpzqcuKbuw.roa
File: HOZ4JFKp2bZf3ztcHqpzqcuKbuw.roa (raw, json)
Hash identifier: j+t0ERat3XntifXPMQmPAjVKzyz97lngbi7GlcqNLFE=
Subject key identifier: 1C:E6:78:24:52:A9:D9:B6:5F:DF:3B:5C:1E:AA:73:A9:CB:8A:6E:EC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF2F0544BD8D59BA40695A6AB47EF
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HOZ4JFKp2bZf3ztcHqpzqcuKbuw.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214939
IP address blocks: 2a0c:9a40:8230::/44 maxlen: 48
2a0c:9a40:8230::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f2:f0:54:4b:d8:d5:9b:a4:06:95:a6:ab:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ce6782452a9d9b65fdf3b5c1eaa73a9cb8a6eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:cb:a8:43:07:5d:d3:46:ac:b6:b6:1b:cd:
61:6e:48:5f:ab:9c:5a:c0:4a:21:ec:a3:6d:ab:93:
f8:82:ee:f9:ca:a9:aa:29:23:d5:ba:4b:73:d0:a1:
5d:f1:08:46:ff:b0:71:c7:09:12:81:51:4a:14:cb:
19:10:9c:ac:6f:60:d6:77:b9:a1:9a:29:cb:4f:fe:
41:f2:c2:14:68:8b:8b:5b:ae:98:1a:40:aa:6e:c1:
5a:38:22:83:b2:c2:2b:29:80:02:46:a9:c6:df:14:
32:45:ab:e2:56:ac:71:e6:48:e1:94:c0:0d:ec:50:
de:bb:1d:69:55:ae:21:71:21:97:27:62:d9:39:6d:
ab:3e:a7:55:64:56:ac:44:d2:c0:7f:9e:a6:3a:5c:
3c:bd:21:69:4e:42:56:77:f9:4d:c7:86:0a:33:86:
50:c5:66:86:ca:74:43:eb:57:d0:5f:d3:f4:36:c1:
71:a8:c1:8e:f7:8e:11:2e:47:e4:cd:f4:c6:67:9a:
c4:e7:a5:00:6e:f1:bf:38:c7:d0:a9:f3:b8:93:51:
f0:23:d7:5e:69:65:33:80:2e:64:36:73:6e:82:e6:
3a:87:c8:98:9b:ff:70:9a:2b:c0:76:69:63:80:4d:
e0:13:ac:25:a3:0a:61:20:05:34:34:e6:62:9c:f2:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:78:24:52:A9:D9:B6:5F:DF:3B:5C:1E:AA:73:A9:CB:8A:6E:EC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HOZ4JFKp2bZf3ztcHqpzqcuKbuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8230::/44
Signature Algorithm: sha256WithRSAEncryption
a7:80:04:27:69:ef:59:6f:ce:fc:28:5f:e0:7f:da:2c:23:98:
07:6c:96:7c:65:e6:99:4d:d0:1c:bf:2a:07:88:0e:19:d2:59:
38:3b:de:e2:53:48:2d:96:55:4c:7b:a2:17:d6:fd:f7:06:67:
d5:e5:8d:3d:39:bd:7f:66:ae:79:52:da:1a:bc:45:c1:13:dc:
00:56:36:8f:5e:c5:a0:69:59:26:a1:e2:b8:cc:b2:3e:7a:68:
5a:81:63:32:49:d2:bd:4c:0f:f5:8f:45:cc:66:71:03:f9:af:
87:70:ff:23:99:f1:6a:cb:b9:e6:23:3e:da:0a:09:f9:92:3a:
63:9e:04:18:d4:ca:4f:7e:82:c5:ba:67:26:5c:fd:30:b1:0a:
27:b0:fd:d9:2c:4a:2b:0f:ab:cf:c8:3b:8c:da:0b:db:60:1b:
4c:6c:8d:a1:4f:05:e0:c6:02:24:61:71:99:79:b0:52:9f:98:
b1:3f:51:99:78:b4:d6:8a:88:a9:54:15:f0:cb:b4:fa:ad:15:
ef:27:86:37:64:1c:2e:43:47:75:e9:e3:6a:f0:29:a3:93:98:
5e:42:8c:b4:36:d0:2a:b6:e5:49:cd:51:50:d8:b3:3b:a9:9b:
44:13:11:01:c9:d0:12:a7:30:37:95:ba:7d:53:60:a9:70:36:
e1:d9:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:59 2025 by rpki-client