Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/hpbGdoVO5HEexnNB52_kdQEdul4.roa
File: hpbGdoVO5HEexnNB52_kdQEdul4.roa (raw, json)
Hash identifier: B3G8pIIgVIB7A2us6RSFyhVvtCAPNK2yg2+AQlwIasM=
Subject key identifier: 86:96:C6:76:85:4E:E4:71:1E:C6:73:41:E7:6F:E4:75:01:1D:BA:5E
Certificate issuer: /CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Certificate serial: 0193ACDE7EDA787C65A989AB5EFB736DC7B5
Authority key identifier: CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/hpbGdoVO5HEexnNB52_kdQEdul4.roa
Signing time: Mon 09 Dec 2024 19:21:22 +0000
ROA not before: Mon 09 Dec 2024 19:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:66c1::/32 maxlen: 32
2a12:cc02::/32 maxlen: 32
2a12:cc04::/32 maxlen: 32
2a12:cc06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:de:7e:da:78:7c:65:a9:89:ab:5e:fb:73:6d:c7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Validity
Not Before: Dec 9 19:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8696c676854ee4711ec67341e76fe475011dba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:b0:92:d7:82:f8:d8:1c:76:b9:c4:5d:ab:
aa:a1:2b:b5:5a:c5:24:57:02:e9:84:2a:1b:cf:8b:
da:85:60:d2:df:6e:4c:7c:67:6d:47:23:9e:8a:21:
04:42:9f:6c:e0:20:9e:9c:bc:93:30:a8:f2:0d:34:
d4:ae:40:27:4b:e6:b3:f0:eb:a5:3e:1b:b3:7e:96:
48:e7:e4:b7:d2:9d:f0:0e:c0:8e:64:b3:74:94:40:
f1:47:b9:a0:2b:9e:7d:80:e5:6e:0a:d2:77:62:6e:
c8:2f:a2:27:27:5c:28:3a:bd:fe:12:3e:0f:3f:87:
29:95:34:4a:49:c5:3a:a5:72:c1:49:6c:c0:b9:da:
5f:53:ae:18:26:7a:52:a8:ba:f9:58:7d:02:1e:5e:
65:67:2a:51:48:86:f4:c6:84:20:01:51:ab:a2:13:
80:ec:5c:0b:a7:0a:6e:64:d4:fd:6a:e9:6f:36:f0:
a6:d9:24:87:1d:57:71:73:4e:43:65:08:f8:c2:58:
f5:02:3e:68:00:88:37:28:98:77:1b:2f:3e:c3:60:
2c:f4:ba:e0:2a:c8:2e:bf:e8:5d:06:c4:ba:8d:29:
11:f2:d0:5c:31:a9:a4:1a:8d:0d:d7:a5:7f:ea:c9:
32:45:54:b2:5e:3a:b9:d2:29:1f:5e:11:90:75:38:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:C6:76:85:4E:E4:71:1E:C6:73:41:E7:6F:E4:75:01:1D:BA:5E
X509v3 Authority Key Identifier:
keyid:CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/hpbGdoVO5HEexnNB52_kdQEdul4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:66c1::/32
2a12:cc02::/32
2a12:cc04::/32
2a12:cc06::/32
Signature Algorithm: sha256WithRSAEncryption
a9:d6:50:99:5b:b5:c4:c3:f7:4c:ab:be:ac:79:2c:84:7b:bd:
f2:7e:f8:b0:b3:33:80:d8:fb:8d:63:4f:a6:2f:1e:58:40:c8:
e6:95:86:ac:22:6a:f0:14:63:61:3a:66:9b:1e:b8:a1:c5:30:
19:2f:ff:a1:cc:a3:0b:b1:67:e8:66:d7:66:40:12:b1:0f:52:
84:32:c0:d2:89:56:0a:0c:36:38:1b:40:ac:73:e8:ef:ff:e9:
a4:ef:ae:3b:b1:22:be:16:50:bb:48:a1:1c:5b:12:de:2a:a7:
05:b5:06:6d:84:c9:e5:7c:57:46:39:ee:31:a4:31:8d:11:93:
4c:00:4b:a9:4d:cf:ab:d9:d5:0d:69:f0:a3:d2:2a:a6:d1:82:
c6:e9:83:dd:d5:b4:2d:b4:27:ef:ce:ae:a5:e4:c4:40:fd:52:
e1:75:48:ac:3d:58:74:2a:f4:e3:17:f7:d4:a0:a5:e4:0f:16:
df:90:ea:80:e0:d9:ef:d4:d1:90:80:98:a9:3b:5c:a9:9d:a5:
d3:0d:7d:11:09:04:10:e6:e6:ae:83:77:ac:99:00:9e:3e:6f:
31:b4:fb:3b:ad:5a:bd:68:d1:c3:89:e4:08:cc:4a:71:e3:37:
8c:3a:97:d2:a8:15:1c:79:dc:75:5f:51:c6:ce:3f:21:ec:5b:
1a:6a:bc:6e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZOs3n7aeHxlqYmrXvtzbce1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGJlZmJhOGZlM2MxZjY2OGM4NDQ0Mzg0ZmU0YTNhOWY0
ZDg3ZjEwHhcNMjQxMjA5MTkyMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njk2YzY3Njg1NGVlNDcxMWVjNjczNDFlNzZmZTQ3NTAxMWRiYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwSwkteC+NgcdrnEXauqoSu1WsUk
VwLphCobz4vahWDS325MfGdtRyOeiiEEQp9s4CCenLyTMKjyDTTUrkAnS+az8Oul
PhuzfpZI5+S30p3wDsCOZLN0lEDxR7mgK559gOVuCtJ3Ym7IL6InJ1woOr3+Ej4P
P4cplTRKScU6pXLBSWzAudpfU64YJnpSqLr5WH0CHl5lZypRSIb0xoQgAVGrohOA
7FwLpwpuZNT9aulvNvCm2SSHHVdxc05DZQj4wlj1Aj5oAIg3KJh3Gy8+w2As9Lrg
Ksguv+hdBsS6jSkR8tBcMamkGo0N16V/6skyRVSyXjq50ikfXhGQdThVyQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFIaWxnaFTuRxHsZzQedv5HUBHbpeMB8GA1UdIwQY
MBaAFM3b77qP48H2aMhEQ4T+SjqfTYfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemR2dnVvX2p3ZlpveUVSRGhQNUtPcDlOaF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZTUyZjEtMTNiMi00NWRmLThhNDMt
MWEzOWU2YTZkZTkzLzEvaHBiR2RvVk81SEVleG5OQjUyX2tkUUVkdWw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZTUyZjEtMTNiMi00NWRmLThhNDMtMWEzOWU2YTZkZTkz
LzEvemR2dnVvX2p3ZlpveUVSRGhQNUtPcDlOaF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKhFmwQMF
ACoSzAIDBQAqEswEAwUAKhLMBjANBgkqhkiG9w0BAQsFAAOCAQEAqdZQmVu1xMP3
TKu+rHkshHu98n74sLMzgNj7jWNPpi8eWEDI5pWGrCJq8BRjYTpmmx64ocUwGS//
ocyjC7Fn6GbXZkASsQ9ShDLA0olWCgw2OBtArHPo7//ppO+uO7EivhZQu0ihHFsS
3iqnBbUGbYTJ5XxXRjnuMaQxjRGTTABLqU3Pq9nVDWnwo9IqptGCxumD3dW0LbQn
786upeTEQP1S4XVIrD1YdCr04xf31KCl5A8W35DqgODZ79TRkICYqTtcqZ2l0w19
EQkEEObmroN3rJkAnj5vMbT7O61avWjRw4nkCMxKceM3jDqX0qgVHHncdV9Rxs4/
IexbGmq8bg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:43 2025 by rpki-client