Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hxZQSO6Iu-n-k2ZmnP7oGgNWp8o.roa
File: hxZQSO6Iu-n-k2ZmnP7oGgNWp8o.roa (raw, json)
Hash identifier: NAuEOyZchiPfQr1YLs+51yy2m5kbWVDDCve5lDOupjI=
Subject key identifier: 87:16:50:48:EE:88:BB:E9:FE:93:66:66:9C:FE:E8:1A:03:56:A7:CA
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747E8C1067C1BEA3FBF5E92DD7648F1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hxZQSO6Iu-n-k2ZmnP7oGgNWp8o.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210718
IP address blocks: 2a0b:b87:ff12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e8:c1:06:7c:1b:ea:3f:bf:5e:92:dd:76:48:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87165048ee88bbe9fe9366669cfee81a0356a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:c5:65:61:4b:33:44:e5:c1:8c:f1:34:e7:
8f:31:86:1c:bd:18:e8:84:dd:4f:4d:3b:e8:ac:bd:
4f:fc:7c:31:32:11:61:1a:39:4e:e8:15:99:6a:68:
0e:50:24:a8:93:b5:3f:5e:bb:0d:9e:92:00:b3:0c:
29:c3:9f:1b:6a:9c:a4:2d:a6:41:22:83:72:48:6b:
a1:97:bb:a6:2a:df:83:36:aa:30:cf:09:9d:b6:6b:
a7:87:9e:9d:c3:68:4d:1e:25:89:b1:d7:70:8c:0e:
d0:f7:8d:89:31:05:0a:92:5d:d5:a6:86:c2:be:45:
ca:5a:d5:5d:73:a4:e9:a2:79:68:44:2a:fc:c0:3b:
93:8f:49:cf:f7:5c:e3:be:e0:93:ad:a6:21:8e:23:
29:91:49:f0:fb:af:a1:95:1b:71:16:21:48:2b:d0:
ae:b3:4f:8d:28:f0:50:1f:a8:cb:6d:f2:47:bb:80:
b1:07:f6:95:ab:a4:da:f4:a0:14:73:fa:41:9d:6d:
35:34:b6:41:0b:8a:78:a3:9b:1c:73:e9:58:87:81:
a1:c4:6b:c6:8c:05:73:0d:6a:6c:5c:90:51:a1:e2:
6b:df:f8:f4:7f:eb:b8:ad:2b:f1:73:1a:ee:67:3c:
3e:f9:ee:e1:57:1d:3e:e9:bd:6d:e4:b8:53:8f:fa:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:16:50:48:EE:88:BB:E9:FE:93:66:66:9C:FE:E8:1A:03:56:A7:CA
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hxZQSO6Iu-n-k2ZmnP7oGgNWp8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ff12::/48
Signature Algorithm: sha256WithRSAEncryption
75:14:2c:b7:25:8f:e0:4e:24:d9:16:7d:af:68:35:51:28:8d:
66:35:28:5a:51:eb:2a:34:2c:b2:92:28:46:83:69:8b:3c:d6:
d4:b7:7d:c4:63:3e:41:85:2d:b1:55:20:78:f4:89:54:f5:0f:
80:d9:1f:1e:b3:a5:7e:2d:0c:d9:ae:79:a0:42:52:1b:1b:60:
20:94:8b:80:98:9f:e4:61:2a:ab:ae:e0:4c:83:ce:9e:88:b9:
9c:b6:71:55:62:8a:1b:dc:ba:17:14:22:a3:6f:65:be:be:02:
38:38:16:68:53:37:88:65:7e:47:8d:2f:a4:cb:73:0d:07:98:
4c:a9:54:73:9e:3c:e7:87:07:ba:96:e8:02:94:4a:57:62:d4:
8b:5f:fc:d5:ad:28:7d:d8:a7:23:dd:f9:75:71:79:25:e7:61:
2a:1c:44:ed:18:70:9c:fd:f7:c1:ac:34:aa:15:58:71:f7:12:
3c:3b:4c:09:ce:bd:64:dc:81:b9:bd:9c:2a:19:a4:b5:d5:20:
b9:e0:55:5e:e8:71:2a:49:1d:ae:27:4f:b7:e4:f8:64:e4:f4:
65:b4:25:bb:2c:f7:1e:76:16:92:86:f0:f3:18:86:97:9a:80:
65:55:75:33:5f:56:f3:44:a0:9a:43:4c:d8:31:90:29:22:60:
47:54:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:01:43 2025 by rpki-client