Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/huu3eCtyLYszV41lNAiqQHEYB3g.roa
File: huu3eCtyLYszV41lNAiqQHEYB3g.roa (raw, json)
Hash identifier: ISpTwmf4iTCGLfHrmVw+iyN5Mvg1S1fX3svF3/eJLvY=
Subject key identifier: 86:EB:B7:78:2B:72:2D:8B:33:57:8D:65:34:08:AA:40:71:18:07:78
Certificate issuer: /CN=f998035895f95549c2cdaac3f005446cbdd11c02
Certificate serial: 0185715E49813C8F302F7023D3F362364EBB
Authority key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/huu3eCtyLYszV41lNAiqQHEYB3g.roa
Signing time: Mon 02 Jan 2023 07:24:42 +0000
ROA not before: Mon 02 Jan 2023 07:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201963
IP address blocks: 2a0e:fcc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:49:81:3c:8f:30:2f:70:23:d3:f3:62:36:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Validity
Not Before: Jan 2 07:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86ebb7782b722d8b33578d653408aa4071180778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:69:d9:55:41:61:b7:d8:02:41:95:c9:b8:4a:
dc:8c:5b:08:5b:b0:16:45:42:94:e5:7a:7d:5b:55:
e2:ce:9c:9c:1e:79:fe:94:de:65:80:2d:76:7e:89:
32:45:61:10:be:7a:19:81:45:b8:a3:c8:8e:d1:55:
8a:05:10:5f:38:ab:5d:12:33:2b:54:b8:32:93:86:
63:00:68:83:96:50:51:84:8b:c7:47:bc:42:3b:3d:
2c:2e:68:fd:6c:98:0c:84:01:bc:19:0c:2d:fe:d5:
f1:e1:7f:fd:12:d0:bc:47:d0:9f:ff:6f:19:d2:14:
d3:e1:49:28:be:93:bd:d2:8e:82:f7:33:37:29:b5:
be:c3:25:b1:04:10:4d:38:3c:07:0f:45:3b:48:cf:
93:0e:6b:7a:49:2b:e0:1d:ab:04:c2:fe:b9:46:f4:
27:81:c9:3c:64:3f:4d:d9:4a:99:bb:89:2f:df:22:
8c:97:0b:2a:8e:57:54:ee:11:05:ea:64:42:ea:5b:
a6:6c:c6:c0:a4:02:79:e2:76:fd:b2:d0:37:a1:91:
b6:bf:30:2e:cd:6d:f2:e1:c8:49:ce:ab:e7:17:d5:
8d:57:42:bb:4e:93:14:6c:cc:f7:86:0a:ba:66:61:
63:5e:5c:4f:7a:cf:93:b1:9a:0a:62:6d:3a:e4:af:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:B7:78:2B:72:2D:8B:33:57:8D:65:34:08:AA:40:71:18:07:78
X509v3 Authority Key Identifier:
keyid:F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/huu3eCtyLYszV41lNAiqQHEYB3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:da:7b:13:3d:3e:00:62:ea:be:ac:0e:b8:5b:24:93:dc:46:
40:62:c0:6a:d4:d5:87:8e:46:bd:eb:e3:8b:be:d8:d3:f5:69:
94:32:18:fc:11:1a:12:d2:d5:54:c5:cc:0d:2c:38:2f:14:b0:
90:5a:02:0e:57:41:aa:11:f8:5d:c3:f0:ab:23:44:41:b0:f2:
5e:a2:9b:be:ab:78:08:1b:61:95:3d:b0:a4:89:66:3a:10:31:
d9:39:82:1f:90:52:38:a1:a6:1f:4e:7f:6f:61:4d:1f:1c:cb:
fc:43:9e:b2:e9:55:13:45:3f:d9:67:55:22:aa:5a:5a:b5:26:
af:10:36:ea:47:9c:fc:69:39:e7:52:b3:90:4c:8c:4f:69:8b:
72:8f:1a:ab:f1:d1:ba:f5:cd:5c:19:46:af:09:ef:0d:57:29:
05:a1:9f:76:59:d0:7c:b3:ff:2e:27:b2:2e:a7:43:4b:51:fc:
3e:09:69:61:15:04:a8:4a:59:06:6f:f9:50:f5:cc:4e:0e:89:
d8:5f:e8:86:c1:0e:48:5d:66:6d:88:50:e9:9d:7a:45:99:61:
fc:d7:3b:3e:0e:ab:ba:4d:6e:ee:00:e1:ed:ff:f2:25:29:13:
55:77:d3:96:8b:4a:15:9b:7d:27:38:94:6e:57:80:6e:c5:2f:
23:c5:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:23:02 2025 by rpki-client