Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hoJ44gWbyGiHV4ug7nO6zqyy8lg.roa
File: hoJ44gWbyGiHV4ug7nO6zqyy8lg.roa (raw, json)
Hash identifier: PDudw/ZIqIZyiAzuTu/1HeHN/pUJ/IcN/wCe1f2y95I=
Subject key identifier: 86:82:78:E2:05:9B:C8:68:87:57:8B:A0:EE:73:BA:CE:AC:B2:F2:58
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422202989CF3EDF36FE16199AF545349F
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hoJ44gWbyGiHV4ug7nO6zqyy8lg.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199691
IP address blocks: 2a0e:8f02:f055::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:89:cf:3e:df:36:fe:16:19:9a:f5:45:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=868278e2059bc86887578ba0ee73baceacb2f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:39:b9:d8:09:ef:22:9f:a5:e4:60:ad:7f:
64:54:f1:ea:65:e9:d5:7b:89:69:59:7a:a7:eb:e1:
e2:4a:8c:f3:56:69:27:c4:bf:13:e4:54:10:47:8e:
78:c2:5b:d7:c9:f3:8c:b9:be:da:83:c2:f3:75:b0:
ed:98:78:23:43:ae:27:92:91:94:fd:26:b0:20:22:
97:ab:30:5b:b1:d0:0c:37:1e:37:68:8f:59:40:e4:
29:db:66:f8:4d:f8:37:f5:f8:b8:59:3a:e4:7f:e1:
85:c8:a8:b4:ed:74:45:bb:24:62:2f:b6:81:54:65:
9f:2c:34:ac:bf:93:cf:57:25:02:60:28:b0:e0:7a:
b3:d8:86:5d:bb:2c:73:bc:f6:ea:be:8a:c3:8a:ee:
9f:f9:f8:dd:8f:ff:ce:54:7f:32:f2:9f:42:5f:1f:
d3:91:4b:b9:7a:ac:0d:0f:7a:27:13:81:5b:37:0e:
9d:ee:82:8a:67:b8:1c:f8:dc:fc:67:58:43:78:92:
e1:9e:db:a4:91:2e:68:b2:d4:f4:94:fa:4d:a7:dc:
38:3f:c8:af:e8:ff:2a:1e:56:cc:7b:6d:13:1a:81:
ce:9b:40:9a:1a:0e:6d:43:7c:e1:ab:5e:a0:97:b0:
e9:7a:e4:5a:47:96:c6:8f:c8:36:20:cc:84:cb:f1:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:82:78:E2:05:9B:C8:68:87:57:8B:A0:EE:73:BA:CE:AC:B2:F2:58
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hoJ44gWbyGiHV4ug7nO6zqyy8lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f055::/48
Signature Algorithm: sha256WithRSAEncryption
2c:53:12:94:28:4a:f5:ec:9c:aa:0d:2d:6a:c5:01:40:7d:7e:
be:a8:b0:ce:b2:6c:36:2e:e1:95:b5:57:93:4f:4d:69:82:31:
54:2e:ff:8d:58:8e:76:07:64:b9:dc:0f:37:af:8b:b9:0a:aa:
f4:33:ec:6f:62:24:2f:00:cb:ce:fe:e8:44:9a:53:de:7a:d7:
c4:89:ff:21:7c:e7:2b:9c:d0:2d:fa:85:0e:87:8d:53:41:22:
20:33:97:cf:ba:dd:0c:2b:6d:38:d8:08:f8:f2:25:a1:fd:b7:
ad:31:3c:cc:b3:a1:4e:84:18:c1:93:2b:07:d1:67:5c:6c:53:
38:0e:27:cd:e8:52:53:62:cb:af:00:95:14:5f:30:4e:46:e3:
bd:f2:e0:59:c8:a8:30:79:1f:62:20:97:4c:69:6d:9b:ff:84:
76:6c:ca:02:6f:f8:f3:67:3c:4c:50:29:ef:71:90:b9:88:d6:
ee:a8:45:f6:7a:82:10:77:42:1f:39:00:4b:1c:a0:bd:b6:7a:
44:18:5d:85:68:5d:33:d0:d8:ec:17:a2:47:72:eb:1c:94:88:
06:f2:ec:2f:63:cb:89:91:cb:56:6a:8d:d7:9a:9e:50:6a:0c:
48:3a:01:3f:7d:e4:51:f4:53:cd:47:e0:a0:24:83:e4:c3:48:
95:c7:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:20 2025 by rpki-client