Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HSd7fEVBWiJa6vcUQE5O3t79-Z4.roa
File: HSd7fEVBWiJa6vcUQE5O3t79-Z4.roa (raw, json)
Hash identifier: POvrmMPZcKa+eO1tYTH+839MZxe56ef4rbBe/fAXgoE=
Subject key identifier: 1D:27:7B:7C:45:41:5A:22:5A:EA:F7:14:40:4E:4E:DE:DE:FD:F9:9E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184ECA0F1BF75B97199E712C76AD8C02423
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HSd7fEVBWiJa6vcUQE5O3t79-Z4.roa
Signing time: Wed 07 Dec 2022 12:48:01 +0000
ROA not before: Wed 07 Dec 2022 12:48:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200795
IP address blocks: 2a0a:6040:be00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:a0:f1:bf:75:b9:71:99:e7:12:c7:6a:d8:c0:24:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 12:48:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d277b7c45415a225aeaf714404e4ededefdf99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:8c:e3:c3:af:08:04:09:30:e6:bb:2f:c0:
c3:70:43:01:33:c9:95:09:3f:2d:79:bb:21:a0:c1:
69:8b:dc:34:44:75:c7:16:f9:8d:be:c4:ab:3f:03:
5c:e2:59:e9:85:29:fd:e0:7a:c2:4b:3d:8f:e7:9f:
69:f3:09:bd:75:af:6f:2e:83:ee:71:1d:2b:08:dc:
e9:ba:b1:55:c8:5d:eb:1d:6a:d6:6b:4b:c9:b7:7e:
5a:af:cc:bb:c7:07:79:8e:44:cc:e3:e4:1a:1f:38:
f0:f5:25:29:a1:ac:8f:e5:22:e5:a3:f0:bd:c2:40:
b1:ba:fb:9d:ab:48:16:ad:3b:5f:72:15:33:36:f2:
99:7c:49:10:49:f7:f2:4e:bf:3e:31:87:c3:78:bc:
bb:43:f2:b7:cc:cb:53:69:76:7e:43:8e:cf:ca:8d:
c5:a1:9c:65:01:ea:58:db:8c:65:8e:39:4e:d1:6b:
b7:0b:b9:d8:2f:58:6f:ae:c7:14:6b:7e:f4:b9:b1:
71:7b:8e:83:4b:a7:d5:5b:d7:b4:b8:76:a6:e6:28:
94:16:09:7b:ed:09:0d:78:94:33:b7:df:be:bf:0d:
2f:d1:9f:c7:e4:75:e0:7b:e6:91:09:ae:a5:3f:f2:
03:3f:16:52:8d:56:ad:33:b6:1c:ca:1a:7c:d9:2e:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:7B:7C:45:41:5A:22:5A:EA:F7:14:40:4E:4E:DE:DE:FD:F9:9E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HSd7fEVBWiJa6vcUQE5O3t79-Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:be00::/40
Signature Algorithm: sha256WithRSAEncryption
2b:bd:44:be:fc:e3:74:64:33:d7:fa:df:cf:cf:a9:06:d0:7d:
52:45:be:71:9c:92:49:77:b5:1c:f9:b6:ae:f2:7f:cc:48:1b:
7f:86:fc:28:d7:5a:90:4d:e0:1f:1f:74:b2:60:2c:9f:90:20:
f4:83:0a:e7:7a:13:36:1b:b4:f9:c0:2c:93:87:7b:4d:8f:92:
ef:e0:e1:c7:5a:a6:c0:0e:d4:e9:6b:c6:50:fa:92:92:16:82:
67:09:e9:48:48:13:1f:95:f2:fe:76:e7:e9:89:00:c0:f2:24:
f2:09:94:e5:e4:4b:bd:d7:58:95:c7:8b:ab:80:20:b1:ea:0b:
0c:4c:f6:13:60:00:fa:a5:f1:7c:b8:be:c8:ac:da:b7:c4:17:
c7:0b:c2:4a:79:e4:0f:c8:cc:92:b4:b0:f2:ec:1f:e4:f0:7e:
d9:03:10:a2:ea:d3:6f:90:de:9f:e5:86:36:17:79:45:48:69:
82:77:5a:c7:2b:7f:9e:1d:ca:55:a6:11:c2:fa:e4:a4:1d:79:
20:94:bc:1d:ec:08:a4:ec:cc:c3:b3:3d:1e:1d:c5:58:c6:c9:
55:0e:07:82:94:49:87:72:05:4f:e9:5e:75:86:1e:dc:42:28:
69:f5:67:34:2b:86:52:8f:8b:9f:bf:50:c6:01:93:60:c1:e4:
f4:df:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:42 2025 by rpki-client