Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/hEP3BbLXuXDunOZ1k6wfGQ4R8Do.roa
File: hEP3BbLXuXDunOZ1k6wfGQ4R8Do.roa (raw, json)
Hash identifier: JdbmV/4wgBwHGN3BBE/ltIiS1SXXws37YMtFNKcwTSg=
Subject key identifier: 84:43:F7:05:B2:D7:B9:70:EE:9C:E6:75:93:AC:1F:19:0E:11:F0:3A
Certificate issuer: /CN=47f843cce09c295d2d86d93541169bc1a0f5a2b9
Certificate serial: 06F243C9
Authority key identifier: 47:F8:43:CC:E0:9C:29:5D:2D:86:D9:35:41:16:9B:C1:A0:F5:A2:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hDzOCcKV0thtk1QRabwaD1ork.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/hEP3BbLXuXDunOZ1k6wfGQ4R8Do.roa
Signing time: Wed 01 Jun 2022 13:09:20 +0000
ROA not before: Wed 01 Jun 2022 13:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207641
IP address blocks: 2a0f:ff40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116540361 (0x6f243c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f843cce09c295d2d86d93541169bc1a0f5a2b9
Validity
Not Before: Jun 1 13:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8443f705b2d7b970ee9ce67593ac1f190e11f03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:e2:7f:17:34:6c:8f:f2:4a:75:2e:3e:ce:
8f:bb:9f:9b:6c:79:3c:74:a8:f1:3d:ff:8d:91:d5:
75:d2:1c:b4:11:d0:e8:e9:65:7d:f8:b7:77:d9:db:
60:05:fc:7a:a4:86:21:b5:28:97:de:b9:ec:b4:48:
3a:96:6d:6b:f4:c3:1a:bf:ec:28:90:88:7d:7b:99:
63:b1:40:01:5e:22:61:fd:f0:2a:cc:b5:ca:5f:4c:
b9:a8:8f:da:b6:fc:e3:00:9f:3a:69:15:1e:79:12:
9d:e5:fa:51:82:56:5a:83:d0:fa:aa:5f:20:02:0e:
1c:b9:7d:ed:bc:fe:ab:4c:61:44:c8:e5:46:dc:a2:
2b:1d:25:a0:fa:d9:cd:fe:07:57:cc:6e:79:b0:71:
3a:c1:8d:49:71:c2:0f:ec:fb:85:ed:dc:12:15:7c:
38:57:1c:15:1d:7f:f8:f0:95:8e:8f:7c:a3:72:04:
8d:64:96:60:7a:51:38:b1:aa:31:95:14:d2:ae:77:
06:95:3c:4d:11:15:5a:f0:a8:d8:77:71:a7:e3:b1:
be:8d:2f:4f:33:cb:88:e3:4a:e4:12:48:30:66:0e:
cd:65:26:a7:14:4a:4a:ae:12:fe:fb:8b:e3:60:cc:
13:e8:56:e9:ec:4b:85:92:c9:e8:57:a0:27:4e:99:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:43:F7:05:B2:D7:B9:70:EE:9C:E6:75:93:AC:1F:19:0E:11:F0:3A
X509v3 Authority Key Identifier:
keyid:47:F8:43:CC:E0:9C:29:5D:2D:86:D9:35:41:16:9B:C1:A0:F5:A2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hDzOCcKV0thtk1QRabwaD1ork.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/hEP3BbLXuXDunOZ1k6wfGQ4R8Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/R_hDzOCcKV0thtk1QRabwaD1ork.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
a7:cc:e2:5d:ac:35:fb:ee:ea:9a:e8:44:9b:a7:ff:6d:b7:38:
3e:f5:fc:f1:29:4a:02:59:53:f3:54:0c:d7:13:92:4c:a2:dd:
70:cd:d2:d3:73:80:4f:10:76:32:60:81:e6:65:1b:66:44:2e:
1a:97:bc:0f:9b:de:66:e5:96:d2:73:c8:c6:be:1b:00:ab:e8:
7f:84:8c:65:53:3f:70:f7:64:ac:1d:ef:ed:ed:a8:99:33:e2:
10:d7:d2:52:73:d6:61:c0:22:5b:de:9f:2f:ba:73:14:db:e7:
c0:0e:bc:6b:c5:94:4c:0c:e0:bc:cb:01:fe:fd:5a:9a:64:9d:
57:bc:8a:cf:73:fc:ec:f9:95:4e:a5:44:5b:ae:29:f4:c3:48:
87:c1:b3:2a:57:d4:86:aa:12:c3:e1:cd:9d:40:15:c3:bc:a0:
16:b7:43:29:30:54:bf:92:30:fa:b2:57:44:d0:52:3a:62:fb:
80:8a:b8:47:3d:a8:f6:cc:6a:be:ae:2f:87:09:cf:d6:02:b3:
60:fe:80:dc:5a:33:57:a0:2a:b7:ea:46:80:ce:2f:63:c8:a3:
40:7e:3f:f5:a5:e1:30:68:ae:a1:3e:bd:85:ba:dc:83:75:e2:
8b:f5:5b:e8:97:bf:45:d9:a4:1c:64:18:99:2f:86:7a:0d:87:
be:a0:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:21 2025 by rpki-client