Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Hsq3XORMjQ_v7yFkVVl34jtYwqU.roa
File: Hsq3XORMjQ_v7yFkVVl34jtYwqU.roa (raw, json)
Hash identifier: r/UJe3RIPSzb/cidDydvjW1KgY2mhYt2SKZhBy+CfZ4=
Subject key identifier: 1E:CA:B7:5C:E4:4C:8D:0F:EF:EF:21:64:55:59:77:E2:3B:58:C2:A5
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF1A45379663ADEB2DFBC23FED89C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Hsq3XORMjQ_v7yFkVVl34jtYwqU.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214400
IP address blocks: 2a0c:9a46:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f1:a4:53:79:66:3a:de:b2:df:bc:23:fe:d8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ecab75ce44c8d0fefef2164555977e23b58c2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:18:b1:de:45:2a:fd:45:06:ca:ad:a0:08:
d0:af:f2:39:db:f6:c7:16:c9:4e:79:7c:b6:86:bf:
06:81:cd:59:1f:71:dc:49:f1:83:95:92:9a:72:cb:
38:11:5e:dc:e7:8f:bc:8d:85:83:04:27:c3:75:0b:
7c:96:68:dd:e8:e7:3c:5d:e1:ac:11:f4:62:b1:8b:
9e:e4:db:34:6a:8f:90:cc:b2:5d:d8:42:a1:a5:f2:
ec:07:c6:1b:1b:75:a1:4d:16:0e:7e:c7:30:dc:6a:
6f:1b:c9:05:2a:2a:a5:c5:2a:fb:8d:c6:b6:09:e6:
b8:3c:19:26:91:9f:98:ef:ff:b5:d9:98:fe:93:50:
13:e5:a8:90:3b:9d:9c:04:60:c0:9c:37:a4:0b:b9:
96:f9:78:90:1e:58:f3:27:15:33:d7:53:e8:43:96:
aa:00:ff:2b:28:72:8f:45:d2:f3:0e:a7:08:ea:8a:
93:ae:aa:3a:1a:33:2e:62:0a:fd:d9:ca:08:61:8a:
7f:8b:10:3c:b6:18:f7:03:46:30:37:f1:44:ca:47:
14:98:a0:81:3e:b2:ce:cd:de:d8:19:f0:77:0e:01:
f6:31:0b:83:c5:cc:56:1d:67:45:eb:9e:9b:a3:48:
3c:7a:a1:e1:a2:b9:ad:9a:f5:37:af:74:05:05:7d:
38:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:B7:5C:E4:4C:8D:0F:EF:EF:21:64:55:59:77:E2:3B:58:C2:A5
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Hsq3XORMjQ_v7yFkVVl34jtYwqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:100::/40
Signature Algorithm: sha256WithRSAEncryption
83:72:8a:c2:85:ce:18:d0:2a:2f:6c:10:01:ce:d4:50:1b:4f:
39:cd:fb:8f:aa:d8:e2:04:86:1f:83:74:ba:09:c4:80:a3:55:
1f:0d:54:2b:25:19:bd:5f:d4:3a:e6:49:9c:d8:3a:0e:c7:a7:
8f:4f:9b:04:8a:a4:c3:df:a5:80:f7:e8:e5:1c:3c:eb:ee:15:
9a:78:47:21:bb:9b:54:dd:e3:6b:72:5b:f7:78:41:6e:80:d5:
a2:61:3e:e8:8f:f9:4f:e7:98:80:24:d3:72:10:d7:ce:df:df:
77:7e:6e:73:61:d2:38:ed:00:81:19:8f:a5:76:dd:4a:b1:0d:
7d:ef:1c:64:a7:1a:ff:6c:fe:be:39:a0:f3:7d:b5:cd:cb:8c:
29:bf:2b:b2:95:e5:6e:c7:32:e6:49:dd:31:83:71:32:ad:f6:
54:e1:04:a1:62:bb:07:bc:31:30:30:7c:c6:a3:06:ae:96:43:
00:44:44:da:5d:b3:ac:6a:28:39:d2:6f:6f:fa:17:94:21:85:
9a:9c:2c:c9:59:bd:c2:ec:d0:ee:cc:f1:fd:02:3a:8b:6e:4f:
fa:fb:d2:cb:d9:02:36:fa:83:8d:4d:a2:bd:85:93:4e:56:79:
bc:6c:8a:91:44:55:17:e0:3f:d9:28:17:e2:29:fe:93:a4:1e:
21:35:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:32 2025 by rpki-client