Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/jhlmLh--Fe0ICj7hvW7KAqjvWqw.roa
File: jhlmLh--Fe0ICj7hvW7KAqjvWqw.roa (raw, json)
Hash identifier: 1FZCflmFpzFt5lOiwrwcCB3daxKRGAB3UUOelBugZLE=
Subject key identifier: 8E:19:66:2E:1F:BE:15:ED:08:0A:3E:E1:BD:6E:CA:02:A8:EF:5A:AC
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BE00402130EBFB3E0F9A34417C59
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/jhlmLh--Fe0ICj7hvW7KAqjvWqw.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48700
IP address blocks: 2a05:b0c7:7000::/36 maxlen: 36
2a05:b0c7:7fe0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:be:00:40:21:30:eb:fb:3e:0f:9a:34:41:7c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e19662e1fbe15ed080a3ee1bd6eca02a8ef5aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:11:f2:1f:2c:cc:a8:39:27:1e:5b:35:c2:
02:4d:2f:01:b7:06:27:c3:23:33:68:4f:26:28:3a:
ca:7d:10:58:b7:fb:21:6a:ad:72:a4:d1:d4:96:d5:
2e:77:66:29:58:42:bf:54:d3:ef:c1:66:fe:ae:37:
80:c3:4a:98:50:d4:fe:55:e2:6e:38:70:62:0d:43:
50:ad:73:1f:d5:ad:b4:6c:75:8c:4b:5f:57:8b:08:
37:47:4f:81:07:36:be:1c:91:47:fc:fc:54:5d:6b:
91:ce:ba:57:e2:21:12:54:83:ea:97:d6:22:e9:bf:
be:aa:20:7e:59:97:50:40:51:01:f3:b0:df:56:98:
13:a2:b6:c5:ce:af:37:0c:15:4d:3a:3e:71:3c:2a:
5a:19:ac:40:cc:5f:69:37:f7:7b:d6:b6:2a:c4:94:
b9:19:07:6c:a9:34:49:3d:16:28:eb:16:56:47:98:
9a:45:ad:99:91:f6:61:04:35:d1:05:a5:2a:f3:d1:
31:7c:14:f1:5b:97:2f:bd:ed:91:a1:a6:31:9e:16:
2e:71:4b:1a:48:b3:2e:b4:7f:8b:49:c3:d3:62:bb:
88:f4:17:0f:6f:11:ab:5c:73:3f:f7:2b:74:89:c1:
5f:85:bd:b8:49:8c:67:2f:b5:2b:f2:ff:08:b5:41:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:66:2E:1F:BE:15:ED:08:0A:3E:E1:BD:6E:CA:02:A8:EF:5A:AC
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/jhlmLh--Fe0ICj7hvW7KAqjvWqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:7000::/36
Signature Algorithm: sha256WithRSAEncryption
39:59:40:a1:8d:4b:d9:a2:4b:a8:1c:09:42:75:b3:7f:77:99:
d6:f2:33:bf:fb:81:cd:e6:c4:cc:ab:f7:f7:3f:ac:7a:24:2f:
c7:bd:6a:72:6b:4c:16:1e:6e:b7:86:90:1e:f4:b0:4b:94:74:
e1:e8:33:c6:ca:2a:6f:ba:93:0f:dc:c3:a3:eb:78:37:56:80:
6a:39:83:ae:36:06:da:bc:7f:8a:81:62:b8:8f:36:e5:3f:66:
72:20:b7:35:f4:f4:0f:27:1b:73:29:f4:2e:c5:04:6e:2a:e9:
e7:72:66:c2:0c:9a:2b:44:0b:5b:c1:c7:b2:be:e2:e1:f0:e2:
3d:c7:c5:22:7f:c9:89:45:37:16:9d:c8:34:6c:90:6f:9c:9f:
82:1e:fd:04:86:03:9a:11:32:68:42:da:52:5e:f7:c6:84:26:
47:0d:f0:41:96:5e:e0:b9:e4:08:34:13:a1:10:30:c8:01:17:
20:45:e8:27:80:36:2c:f1:45:de:40:4e:6b:ee:dc:d7:22:b9:
8f:ca:80:1f:2d:90:6b:fd:de:44:60:52:4d:11:02:2e:d0:8c:
b1:6c:bb:8d:c4:b5:39:ac:b6:68:7f:00:bf:5b:32:24:44:1f:
fe:65:b9:c2:66:eb:f0:24:7a:c4:e8:21:f3:80:65:98:c7:07:
b2:68:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:41 2025 by rpki-client