Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa
File: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (raw, json)
Hash identifier: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=
Subject key identifier: 1E:24:3A:2E:DE:34:B2:AF:B1:23:3E:AD:91:4A:14:6C:16:4F:3D:EB
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 0194258F4749FA7E5A2351761D6D3094EB0C
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 2a0e:ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:47:49:fa:7e:5a:23:51:76:1d:6d:30:94:eb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e243a2ede34b2afb1233ead914a146c164f3deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:20:24:0e:16:73:9c:5d:56:91:f0:35:c7:
05:e9:ab:ab:5f:17:d9:66:46:1f:5a:e9:3a:86:93:
44:12:30:63:c8:92:7b:98:a5:9b:d8:4e:15:0f:01:
a2:b1:9f:a9:34:85:68:2e:3d:cc:34:3e:cc:78:90:
d8:af:12:b5:d9:fe:9d:18:4e:b4:7b:58:17:0d:1e:
76:8a:0d:08:58:26:e2:28:cb:ae:1c:a3:2f:cd:90:
11:09:9f:99:f0:30:ba:3f:8c:90:ff:86:90:4d:90:
7f:ec:85:76:7c:51:a5:55:ac:40:3f:95:c7:4c:51:
2f:d9:cb:1d:d2:51:3b:04:a4:01:95:41:6e:28:ff:
0d:b5:62:81:68:ad:c7:00:84:96:36:61:27:fb:75:
c0:07:a9:62:28:4c:2f:da:d7:ec:d4:ab:be:a4:f8:
75:7b:60:2f:1d:ef:37:2e:0d:7b:d8:21:60:a1:ce:
0c:51:91:2b:0c:c1:ef:17:82:6a:1f:89:c9:0e:09:
98:48:f6:16:66:bc:e7:06:e0:32:96:b9:9d:a4:85:
a8:82:a9:de:da:01:b4:51:b9:2b:c2:56:c5:40:6a:
2a:f8:80:17:03:58:11:ee:d0:c3:01:ce:2b:a4:d1:
12:8c:c0:cd:32:54:ad:86:7f:63:0c:4c:15:35:19:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:24:3A:2E:DE:34:B2:AF:B1:23:3E:AD:91:4A:14:6C:16:4F:3D:EB
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
78:60:b1:02:e3:8d:5e:f2:0d:ea:1e:a9:27:74:cf:2c:fe:3c:
49:13:a8:d4:65:be:f4:3a:3d:d2:ce:4e:15:d6:3e:0c:cc:7c:
d9:25:39:dc:6a:8c:73:46:c1:83:78:63:01:5f:b9:9a:6e:d0:
2f:d5:69:04:f6:29:84:70:36:5f:9e:20:f0:71:06:a9:c2:06:
81:3c:c4:22:b4:0f:6a:91:4b:da:5a:48:4f:6a:84:86:3b:91:
c6:5b:b5:45:2b:ac:7b:d0:e9:1e:9f:ff:89:e2:b8:ec:cc:11:
06:ff:c2:2f:c7:40:95:fd:57:0d:16:e7:e1:c4:80:3c:87:ac:
17:5a:60:b1:f4:02:bd:ce:56:14:1a:8b:22:93:97:5b:f0:3b:
6c:e6:dd:0e:bb:8e:b1:c8:ba:80:68:6d:5d:f7:95:df:a7:27:
9b:dd:a5:84:e5:72:d8:9e:07:ba:c3:7e:3a:1a:86:3b:8e:f6:
13:f4:9c:7c:2c:a1:a6:d5:90:f7:29:ac:09:7d:0f:68:f5:c2:
e5:a1:da:5c:09:a3:ab:95:3d:30:0c:17:b6:00:b2:a4:1b:2b:
1e:1e:7a:af:8a:df:a8:fb:40:2c:d5:68:75:4d:6a:3c:8e:93:
bb:d6:26:80:29:8a:ef:97:64:4c:40:2f:e2:b2:f7:3a:dc:ea:
ce:44:27:6e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlj0dJ+n5aI1F2HW0wlOsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh
NmY3NTkwHhcNMjUwMTAyMDU0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTI0M2EyZWRlMzRiMmFmYjEyMzNlYWQ5MTRhMTQ2YzE2NGYzZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sAgJA4Wc5xdVpHwNccF6aurXxfZ
ZkYfWuk6hpNEEjBjyJJ7mKWb2E4VDwGisZ+pNIVoLj3MND7MeJDYrxK12f6dGE60
e1gXDR52ig0IWCbiKMuuHKMvzZARCZ+Z8DC6P4yQ/4aQTZB/7IV2fFGlVaxAP5XH
TFEv2csd0lE7BKQBlUFuKP8NtWKBaK3HAISWNmEn+3XAB6liKEwv2tfs1Ku+pPh1
e2AvHe83Lg172CFgoc4MUZErDMHvF4JqH4nJDgmYSPYWZrznBuAylrmdpIWogqne
2gG0UbkrwlbFQGoq+IAXA1gR7tDDAc4rpNESjMDNMlSthn9jDEwVNRlclwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB4kOi7eNLKvsSM+rZFKFGwWTz3rMB8GA1UdIwQY
MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt
Y2VjODkzMWNlNjMxLzEvSGlRNkx0NDBzcS14SXo2dGtVb1ViQlpQUGVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx
LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg4KwDAN
BgkqhkiG9w0BAQsFAAOCAQEAeGCxAuONXvIN6h6pJ3TPLP48SROo1GW+9Do90s5O
FdY+DMx82SU53GqMc0bBg3hjAV+5mm7QL9VpBPYphHA2X54g8HEGqcIGgTzEIrQP
apFL2lpIT2qEhjuRxlu1RSuse9DpHp//ieK47MwRBv/CL8dAlf1XDRbn4cSAPIes
F1pgsfQCvc5WFBqLIpOXW/A7bObdDruOsci6gGhtXfeV36cnm92lhOVy2J4HusN+
OhqGO472E/ScfCyhptWQ9ymsCX0PaPXC5aHaXAmjq5U9MAwXtgCypBsrHh56r4rf
qPtALNVodU1qPI6Tu9YmgCmK75dkTEAv4rL3OtzqzkQnbg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:16 2025 by rpki-client