Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/HSlsuvX_aWV7qj55zHqBxTYxKjI.roa
File: HSlsuvX_aWV7qj55zHqBxTYxKjI.roa (raw, json)
Hash identifier: RPNU8y7M0Fw75SCJKC5YPWyQlunqmjKvNMrNz+QmV7w=
Subject key identifier: 1D:29:6C:BA:F5:FF:69:65:7B:AA:3E:79:CC:7A:81:C5:36:31:2A:32
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 0194266C285DF322DAD05A3C9E2064D58A8C
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/HSlsuvX_aWV7qj55zHqBxTYxKjI.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215568
IP address blocks: 2a01:f140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:5d:f3:22:da:d0:5a:3c:9e:20:64:d5:8a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d296cbaf5ff69657baa3e79cc7a81c536312a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:8f:19:6a:b2:4c:26:dd:3a:5d:1a:91:da:
e6:60:d6:80:7d:90:43:27:6b:74:9a:7e:32:d2:3c:
be:ec:5f:21:24:e5:0e:ef:1c:8d:b8:91:dd:fd:53:
e3:a9:e3:54:90:7f:16:95:4d:11:80:3c:92:97:71:
3e:80:86:cf:9c:92:e3:31:13:58:f2:7a:8f:c8:a8:
57:a2:a8:9f:b0:b4:4e:9e:4e:8e:19:e1:25:f6:81:
a5:be:9b:ea:f8:eb:9e:4a:b0:c8:1b:72:2a:e3:a4:
8a:f7:51:d8:7b:0b:b3:86:f8:44:6a:4b:a0:23:90:
03:97:55:e6:68:58:d8:be:e0:52:99:61:eb:7e:d1:
27:d6:fc:d3:07:06:67:49:ea:f7:e4:0f:9a:80:05:
5a:7b:c2:04:eb:f8:26:3f:1f:44:9a:10:74:ab:d4:
ab:d8:64:f8:7c:75:23:c1:d3:13:88:15:27:f4:cf:
87:de:c4:5b:d2:d8:5e:50:0a:d6:5b:fd:2c:30:28:
33:4a:f7:2e:9f:f2:31:9c:ac:14:2f:ce:7a:03:06:
d9:47:4a:0b:f3:86:a0:7e:e5:15:01:15:a3:30:2c:
ef:e3:e5:d9:06:66:39:73:0b:66:1d:52:25:ff:80:
18:eb:4d:8b:c6:77:4e:dd:a0:7e:8f:dc:20:4f:18:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:29:6C:BA:F5:FF:69:65:7B:AA:3E:79:CC:7A:81:C5:36:31:2A:32
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/HSlsuvX_aWV7qj55zHqBxTYxKjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f140::/29
Signature Algorithm: sha256WithRSAEncryption
85:35:12:db:e7:35:38:11:2b:ec:94:a9:3a:e7:07:c4:0b:8d:
b0:1c:55:45:82:c8:a1:e2:2b:8e:de:82:b8:83:0d:e1:da:e5:
4b:39:31:15:5b:8c:7b:9b:31:1d:3f:be:05:bd:92:88:a4:49:
78:86:76:37:eb:7b:d2:de:35:d8:2e:40:4a:66:2f:25:ee:42:
b5:cb:c4:60:99:21:c7:38:0b:b0:74:1b:44:e3:2c:d7:4d:98:
08:22:c9:8e:0e:f1:c2:e9:7c:f8:ef:a2:e7:1e:fb:a1:a7:b1:
d0:f4:ff:28:86:20:a3:79:79:cd:45:40:07:98:1c:4a:dc:42:
07:21:f0:10:ff:c2:1c:ab:2f:54:b9:21:c1:b8:9d:45:a4:3f:
5a:f4:fa:99:12:69:16:da:8d:e2:e5:7d:14:94:a1:cd:2a:9b:
63:24:86:d4:95:64:a5:48:19:f1:b4:fa:94:61:0a:79:38:c0:
cf:48:6d:ce:30:9d:0c:9c:c9:bc:9e:0b:cd:42:f2:ca:49:bd:
d9:75:e9:8a:07:51:76:7f:1c:fc:77:d7:f6:53:0c:3d:fb:73:
c4:cf:c3:67:b7:44:f2:66:83:a4:3b:16:ef:a9:4e:12:35:e1:
3c:1d:f6:99:2a:fc:71:10:26:09:66:f5:e0:46:c0:ad:66:ab:
b0:b0:93:1c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQmbChd8yLa0Fo8niBk1YqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4
NmVlZjQwHhcNMjUwMTAyMDk1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDI5NmNiYWY1ZmY2OTY1N2JhYTNlNzljYzdhODFjNTM2MzEyYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtyPGWqyTCbdOl0akdrmYNaAfZBD
J2t0mn4y0jy+7F8hJOUO7xyNuJHd/VPjqeNUkH8WlU0RgDySl3E+gIbPnJLjMRNY
8nqPyKhXoqifsLROnk6OGeEl9oGlvpvq+OueSrDIG3Iq46SK91HYewuzhvhEakug
I5ADl1XmaFjYvuBSmWHrftEn1vzTBwZnSer35A+agAVae8IE6/gmPx9EmhB0q9Sr
2GT4fHUjwdMTiBUn9M+H3sRb0theUArWW/0sMCgzSvcun/IxnKwUL856AwbZR0oL
84agfuUVARWjMCzv4+XZBmY5cwtmHVIl/4AY602LxndO3aB+j9wgTxj+AwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB0pbLr1/2lle6o+ecx6gcU2MSoyMB8GA1UdIwQY
MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et
ZDUxNmYwZTE0ODdiLzEvSFNsc3V2WF9hV1Y3cWo1NXpIcUJ4VFl4S2pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi
LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHxQDAN
BgkqhkiG9w0BAQsFAAOCAQEAhTUS2+c1OBEr7JSpOucHxAuNsBxVRYLIoeIrjt6C
uIMN4drlSzkxFVuMe5sxHT++Bb2SiKRJeIZ2N+t70t412C5ASmYvJe5CtcvEYJkh
xzgLsHQbROMs102YCCLJjg7xwul8+O+i5x77oaex0PT/KIYgo3l5zUVAB5gcStxC
ByHwEP/CHKsvVLkhwbidRaQ/WvT6mRJpFtqN4uV9FJShzSqbYySG1JVkpUgZ8bT6
lGEKeTjAz0htzjCdDJzJvJ4LzULyykm92XXpigdRdn8c/HfX9lMMPftzxM/DZ7dE
8maDpDsW76lOEjXhPB32mSr8cRAmCWb14EbArWarsLCTHA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:28:31 2025 by rpki-client