Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/NHS8j6EfVj264WhBn5T1VNURnZU.roa
File: NHS8j6EfVj264WhBn5T1VNURnZU.roa (raw, json)
Hash identifier: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=
Subject key identifier: 34:74:BC:8F:A1:1F:56:3D:BA:E1:68:41:9F:94:F5:54:D5:11:9D:95
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 0194266A26C6ECCA7DF2619AAFBE06C2F4AA
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/NHS8j6EfVj264WhBn5T1VNURnZU.roa
Signing time: Thu 02 Jan 2025 09:47:58 +0000
ROA not before: Thu 02 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 2a13:1500:3a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:26:c6:ec:ca:7d:f2:61:9a:af:be:06:c2:f4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jan 2 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3474bc8fa11f563dbae168419f94f554d5119d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:21:fc:11:98:2c:a4:4b:77:67:03:4c:50:
e2:25:00:6c:b0:c3:4f:0d:62:8e:8b:05:23:52:df:
84:47:0c:51:fc:ab:56:c4:01:f2:8d:20:d8:ae:84:
92:56:0d:f9:d3:f6:8e:8d:e4:97:c8:00:52:48:ef:
46:38:fe:92:fa:2e:3e:bb:03:b6:61:a8:44:dc:b8:
b4:a4:c4:e8:1d:91:49:e1:86:72:4e:09:31:cd:d8:
6d:8e:b7:2f:a6:07:3d:19:37:2b:ef:70:79:4c:27:
ff:79:7a:a7:4f:a0:e6:ec:7d:e2:05:82:ad:d0:4f:
96:07:71:1e:ce:57:ce:51:6b:ff:48:aa:83:a1:b8:
f6:de:e0:81:a3:db:88:22:c6:0d:a9:e0:e0:34:98:
58:ab:6c:95:b8:f7:77:80:7f:7b:69:67:e2:b7:d1:
e9:d5:65:33:66:1c:4c:48:c6:df:47:16:87:fa:93:
e9:df:08:27:1c:fc:eb:5f:7e:c8:5c:e4:43:be:35:
59:df:18:a2:19:19:48:37:dd:d1:5e:36:e5:fa:db:
bc:5e:89:27:7f:8d:7e:7d:72:10:e9:a7:b5:44:ed:
59:a2:7a:09:ce:32:69:db:8d:61:a4:e6:a7:9f:00:
c1:b5:ea:1b:4d:0e:a3:56:e1:5d:a2:4f:05:0c:20:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:BC:8F:A1:1F:56:3D:BA:E1:68:41:9F:94:F5:54:D5:11:9D:95
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/NHS8j6EfVj264WhBn5T1VNURnZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1500:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
5b:d1:fd:3e:ec:f9:58:cf:67:04:5e:bc:f2:8c:d5:02:9a:e1:
ab:e9:62:c7:8d:a4:cb:03:b9:a0:c3:a8:e8:20:8d:84:da:63:
65:a4:91:10:72:66:36:06:ed:6a:e7:33:44:88:fd:b2:43:ad:
7d:25:46:b7:d4:90:ff:3f:98:c6:be:ef:17:c3:09:9a:66:15:
e0:07:3d:12:22:86:25:c0:7e:8d:29:3a:c6:cc:1b:63:44:d8:
60:22:6e:16:81:04:6e:f8:31:74:65:88:bd:bc:9b:c5:97:ee:
fc:09:ed:f3:e6:d3:a7:ba:69:49:05:95:2d:e2:2d:fe:70:83:
b7:22:63:3a:5f:23:a6:08:e1:11:a5:dc:f7:a3:ee:93:4c:30:
f1:e8:24:87:cb:47:a4:2c:a9:dc:cc:b4:a2:df:e4:76:7b:9f:
ff:e1:db:b9:27:7f:7b:ee:9d:5b:d3:ad:8e:f6:dd:0b:58:4f:
e4:88:8c:ec:9a:f7:97:9c:02:e7:a2:4d:97:c9:b2:65:15:03:
04:f8:cd:20:49:bf:b3:5e:93:17:a6:1d:1f:08:8d:6b:41:5d:
e2:5d:92:09:ce:d4:9d:0a:29:45:cf:f9:e6:08:a8:1f:b2:c1:
10:62:1f:5e:8a:94:11:97:22:fc:d1:2a:ca:30:41:7f:2b:25:
d1:04:62:82
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQmaibG7Mp98mGar74GwvSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk
NzUyMjQwHhcNMjUwMTAyMDk0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDc0YmM4ZmExMWY1NjNkYmFlMTY4NDE5Zjk0ZjU1NGQ1MTE5ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr4h/BGYLKRLd2cDTFDiJQBssMNP
DWKOiwUjUt+ERwxR/KtWxAHyjSDYroSSVg350/aOjeSXyABSSO9GOP6S+i4+uwO2
YahE3Li0pMToHZFJ4YZyTgkxzdhtjrcvpgc9GTcr73B5TCf/eXqnT6Dm7H3iBYKt
0E+WB3EezlfOUWv/SKqDobj23uCBo9uIIsYNqeDgNJhYq2yVuPd3gH97aWfit9Hp
1WUzZhxMSMbfRxaH+pPp3wgnHPzrX37IXORDvjVZ3xiiGRlIN93RXjbl+tu8Xokn
f41+fXIQ6ae1RO1ZonoJzjJp241hpOannwDBteobTQ6jVuFdok8FDCAmcwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDR0vI+hH1Y9uuFoQZ+U9VTVEZ2VMB8GA1UdIwQY
MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt
ZWZlNzljMjU0ZTI1LzEvTkhTOGo2RWZWajI2NFdoQm41VDFWTlVSblpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1
LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhMVADow
DQYJKoZIhvcNAQELBQADggEBAFvR/T7s+VjPZwRevPKM1QKa4avpYseNpMsDuaDD
qOggjYTaY2WkkRByZjYG7WrnM0SI/bJDrX0lRrfUkP8/mMa+7xfDCZpmFeAHPRIi
hiXAfo0pOsbMG2NE2GAibhaBBG74MXRliL28m8WX7vwJ7fPm06e6aUkFlS3iLf5w
g7ciYzpfI6YI4RGl3Pej7pNMMPHoJIfLR6QsqdzMtKLf5HZ7n//h27knf3vunVvT
rY723QtYT+SIjOya95ecAueiTZfJsmUVAwT4zSBJv7NekxemHR8IjWtBXeJdkgnO
1J0KKUXP+eYIqB+ywRBiH16KlBGXIvzRKsowQX8rJdEEYoI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:27:12 2025 by rpki-client