Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HjJxUS9GbDj3N7Tk_dN8ONWCyAY.roa
File: HjJxUS9GbDj3N7Tk_dN8ONWCyAY.roa (raw, json)
Hash identifier: 1GiQFRBxyBWDhB3sD8pTzGNghvgz6OXxQ8Yq0tLfW/g=
Subject key identifier: 1E:32:71:51:2F:46:6C:38:F7:37:B4:E4:FD:D3:7C:38:D5:82:C8:06
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA79EF9CD510ACD3D77E766095A134
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HjJxUS9GbDj3N7Tk_dN8ONWCyAY.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48646
IP address blocks: 2a0c:b642:1a09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:79:ef:9c:d5:10:ac:d3:d7:7e:76:60:95:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e3271512f466c38f737b4e4fdd37c38d582c806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:7b:37:1f:28:31:b6:3d:31:12:74:6e:99:
62:e9:ab:23:9a:14:e4:61:c8:58:ea:1f:02:0b:3e:
fc:e5:26:c0:d9:c1:9e:82:c8:88:ee:29:be:52:ac:
5c:46:e5:92:cd:54:81:70:60:ae:0d:6d:8c:fc:1a:
79:21:f4:de:af:68:7c:4b:1f:03:e4:55:9d:d9:9c:
fb:d0:42:2a:4a:0f:1b:0b:96:4b:d7:c9:69:ec:88:
1d:8d:cf:1d:c3:09:f9:99:e5:bc:d3:40:f4:79:a0:
64:fe:ab:36:16:2b:0c:09:2c:c6:86:db:28:e9:bd:
aa:58:14:b8:77:3b:24:00:e5:e9:f9:00:d0:0f:e7:
bc:8b:8e:d2:73:fc:46:23:60:f2:fc:21:ef:83:da:
0f:d0:77:59:cd:6a:e2:81:3e:a7:ba:c7:c0:55:ee:
dd:d2:38:f2:87:4d:c7:d6:21:2e:6b:23:e8:eb:f0:
d6:f6:4f:8b:00:9a:ff:ec:d0:af:95:91:8c:82:10:
ab:a4:80:92:87:3f:1d:98:15:45:11:99:7e:9c:03:
c5:66:cc:5e:b1:86:ba:d7:78:75:e3:5c:4b:2e:25:
1a:7d:c8:4f:d2:f5:a4:6b:c6:87:d7:f4:04:44:e2:
87:11:14:1d:54:36:92:8d:84:a6:ad:f2:6b:65:60:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:71:51:2F:46:6C:38:F7:37:B4:E4:FD:D3:7C:38:D5:82:C8:06
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HjJxUS9GbDj3N7Tk_dN8ONWCyAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a09::/48
Signature Algorithm: sha256WithRSAEncryption
75:dc:a4:64:1b:99:ad:ac:ad:73:6c:00:54:a2:e0:49:c3:96:
06:01:29:ce:84:36:6b:49:62:a9:65:fa:c6:37:4a:2c:6c:ca:
8e:ac:47:b3:0d:bd:ed:aa:b2:fd:c4:f2:17:5f:f5:b0:b0:6b:
df:a8:6c:51:de:9b:e3:d9:e1:75:01:5e:72:49:2a:15:71:0e:
20:bd:9b:4d:8f:c7:04:11:16:d5:fa:ee:c6:31:7a:42:97:0f:
38:50:0c:3e:39:61:8c:49:a9:dd:d1:00:d5:42:74:88:84:c6:
80:15:8c:4f:ee:20:0a:22:7b:bf:9e:60:3b:ef:e6:af:e2:18:
39:5c:62:f0:e0:e1:1b:52:e9:d8:b9:0d:73:69:12:f6:ab:c5:
9f:c8:f9:dc:83:a8:60:32:24:bd:7d:f4:eb:05:f8:16:12:49:
4a:65:95:27:84:ef:7f:67:76:9f:6a:a8:06:53:9c:91:18:91:
46:2f:d2:14:a7:2f:3a:13:e5:ad:5d:68:52:90:08:58:59:db:
b2:22:28:95:de:cf:89:7d:da:4a:0b:ca:39:f8:40:a6:f2:14:
98:06:42:4f:25:96:5b:f0:97:72:97:0d:24:a5:fe:c9:64:38:
48:21:86:16:20:80:8c:22:f2:ac:35:62:6d:31:8b:36:26:58:
bd:d0:f0:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+nnvnNUQrNPXfnZglaE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTMyNzE1MTJmNDY2YzM4ZjczN2I0ZTRmZGQzN2MzOGQ1ODJjODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr217Nx8oMbY9MRJ0bpli6asjmhTk
YchY6h8CCz785SbA2cGegsiI7im+UqxcRuWSzVSBcGCuDW2M/Bp5IfTer2h8Sx8D
5FWd2Zz70EIqSg8bC5ZL18lp7Igdjc8dwwn5meW800D0eaBk/qs2FisMCSzGhtso
6b2qWBS4dzskAOXp+QDQD+e8i47Sc/xGI2Dy/CHvg9oP0HdZzWrigT6nusfAVe7d
0jjyh03H1iEuayPo6/DW9k+LAJr/7NCvlZGMghCrpICShz8dmBVFEZl+nAPFZsxe
sYa613h141xLLiUafchP0vWka8aH1/QEROKHERQdVDaSjYSmrfJrZWAw+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB4ycVEvRmw49ze05P3TfDjVgsgGMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvSGpKeFVTOUdiRGozTjdUa19kTjhPTldDeUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoJ
MA0GCSqGSIb3DQEBCwUAA4IBAQB13KRkG5mtrK1zbABUouBJw5YGASnOhDZrSWKp
ZfrGN0osbMqOrEezDb3tqrL9xPIXX/WwsGvfqGxR3pvj2eF1AV5ySSoVcQ4gvZtN
j8cEERbV+u7GMXpClw84UAw+OWGMSand0QDVQnSIhMaAFYxP7iAKInu/nmA77+av
4hg5XGLw4OEbUunYuQ1zaRL2q8WfyPncg6hgMiS9ffTrBfgWEklKZZUnhO9/Z3af
aqgGU5yRGJFGL9IUpy86E+WtXWhSkAhYWduyIiiV3s+JfdpKC8o5+ECm8hSYBkJP
JZZb8Jdylw0kpf7JZDhIIYYWIICMIvKsNWJtMYs2Jli90PDy
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:18 2025 by rpki-client