Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-HibKYNRlVckj_iTZXhupR1bakY.roa
File: 1-HibKYNRlVckj_iTZXhupR1bakY.roa (raw, json)
Hash identifier: Pbr797a3iSuwQPzQuuhzHtYhPcEF76lPdVXFTnoW0hM=
Subject key identifier: F8:78:9B:29:83:51:95:57:24:8F:F8:93:65:78:6E:A5:1D:5B:6A:46
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C6C0ADD609D46DD8FE67443FA3A77
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-HibKYNRlVckj_iTZXhupR1bakY.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56330
IP address blocks: 2a02:2698:3400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6c:0a:dd:60:9d:46:dd:8f:e6:74:43:fa:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8789b2983519557248ff89365786ea51d5b6a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:94:1c:ce:23:64:2d:3a:6d:71:54:aa:54:
4c:f9:4b:33:01:fb:ca:c7:14:d9:3e:20:c0:2e:08:
a9:02:4a:33:59:9a:f3:0d:2d:e6:63:30:4a:3e:a4:
48:77:bf:5f:e8:49:9a:ff:f4:ff:6c:c6:20:c0:fe:
df:91:ad:5a:4a:02:72:94:a4:c3:a2:7c:ac:9e:c2:
74:f0:eb:36:07:ad:81:5f:4a:3b:20:c3:b4:5b:b4:
11:ba:49:5c:72:fa:ba:16:88:c7:43:63:ca:08:6c:
c0:49:5b:c5:43:b7:1c:c0:58:fc:9b:db:fd:7c:d5:
b2:5a:ef:f9:7a:c5:12:cc:7c:2c:a8:eb:bc:b3:24:
a9:51:59:c8:1c:c5:91:91:7e:78:9a:90:e9:ea:f4:
86:71:f1:cd:c7:64:30:cf:a3:a1:8b:2b:f6:36:4e:
11:1c:dd:0f:6c:5e:4f:28:2c:57:cc:a2:9f:4a:94:
54:92:0a:0a:86:16:ae:b1:2b:0d:8b:72:09:f6:22:
db:7c:94:97:a5:f4:c3:1c:7f:f5:f9:b8:3e:70:16:
05:28:99:4e:65:4a:66:7f:d2:47:c7:fc:5a:41:d4:
33:38:70:a7:a3:b2:38:b6:f6:d4:5b:9f:64:01:1d:
eb:49:8e:0f:98:4a:7e:ee:6c:0e:f4:4a:20:ca:95:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:78:9B:29:83:51:95:57:24:8F:F8:93:65:78:6E:A5:1D:5B:6A:46
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-HibKYNRlVckj_iTZXhupR1bakY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:3400::/38
Signature Algorithm: sha256WithRSAEncryption
3f:5d:7a:c7:f2:dd:e9:b9:d5:75:79:d3:d0:4c:8a:16:89:78:
06:eb:d5:5b:77:b8:45:29:3d:3d:6b:ba:9c:fe:c5:8d:e5:33:
59:f1:fc:67:4c:d6:6f:f3:61:78:f8:c4:66:1e:e0:dc:87:39:
52:ef:07:35:89:60:4c:92:9a:a5:cd:01:8c:8b:fa:28:ed:6a:
0d:c9:64:04:20:31:6f:a3:35:a9:29:cd:a5:c0:d7:e3:d6:38:
66:f7:00:f6:40:84:ff:10:5e:91:66:c0:54:20:2c:0a:e7:ad:
6f:fb:5a:a3:8c:75:a6:d8:26:78:9f:b6:4b:37:ef:06:da:4a:
27:e4:02:3a:18:76:ce:a2:bc:e4:24:3a:3c:3f:c5:04:56:19:
93:6c:59:89:b2:11:21:c3:dd:e6:6c:48:96:2c:3c:2d:fc:c0:
6c:b0:b7:e5:08:70:a4:f7:4f:67:5e:e2:72:ce:d8:e3:dc:59:
64:2c:21:54:3f:a6:85:21:78:3f:93:b4:34:50:9a:48:c7:7f:
50:b8:f3:2d:6a:1d:65:58:f4:cd:62:14:9a:e6:96:3e:05:8d:
8b:3c:3e:8c:e3:27:cc:46:11:d1:39:54:7b:97:76:31:8d:50:
12:c6:af:e5:1a:db:d3:09:02:7e:34:60:cf:e7:f7:32:22:b1:
81:7d:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:29 2025 by rpki-client