Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa
File: HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa (raw, json)
Hash identifier: pPboSXO8tiMM7pJBa4jtCOBqPLqnjIzaqu8scQSbAz0=
Subject key identifier: 1E:16:09:65:17:3F:89:8E:C4:83:72:65:B5:10:80:BA:57:59:34:9D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15C83B56
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa
Signing time: Sat 01 Jan 2022 05:59:13 +0000
ROA not before: Sat 01 Jan 2022 05:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 270013
IP address blocks: 2a06:a006::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365443926 (0x15c83b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e160965173f898ec4837265b51080ba5759349d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:22:9c:47:3f:91:af:bd:e6:a1:b3:46:8e:
5d:68:95:54:7a:f6:28:2f:0b:d8:81:24:1e:e2:1a:
1a:85:84:df:4f:77:5e:37:05:43:85:f5:e4:ac:87:
1d:c9:89:b5:b0:a0:f2:8a:7f:87:6c:e5:2e:3d:11:
58:b1:2b:62:4e:6a:ab:b3:00:27:34:65:14:cf:79:
4f:e7:d7:25:4d:f7:b4:96:f4:9e:05:5b:1f:d0:58:
72:42:6f:e6:c5:f5:56:64:82:fd:86:81:4c:7e:f1:
7f:e0:2a:21:a6:40:6f:41:5a:bf:ec:5b:31:a7:80:
d9:6b:e4:e5:0d:cc:25:2a:5e:60:0c:ff:a2:54:17:
1d:3d:52:53:cc:67:07:fe:42:f1:9c:4b:7a:df:8b:
2f:75:57:6e:34:e7:71:db:de:5e:a2:e8:5c:67:8f:
5c:3a:73:d1:30:56:ae:2f:06:d0:5e:d7:19:f8:a0:
41:3a:2e:d5:5f:94:eb:eb:25:63:18:d1:81:5d:ac:
fb:64:fb:ce:2e:a0:22:de:03:b7:ea:f4:55:d4:5f:
12:cd:0e:fe:78:13:f8:7f:4b:2a:11:24:85:09:2a:
c1:7e:b2:85:91:55:26:8e:ce:4e:5d:3f:91:5b:1b:
04:dd:fa:12:f7:3b:35:65:d3:be:d9:6a:19:0d:a4:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:09:65:17:3F:89:8E:C4:83:72:65:B5:10:80:BA:57:59:34:9D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
41:df:4e:51:7e:f3:41:f6:f1:5d:fa:d2:bf:9c:67:5b:f5:af:
3c:de:fa:37:75:f7:3c:03:d4:8b:22:39:0e:71:78:fb:4b:5c:
1e:62:6c:e3:ac:bf:1b:79:ea:d4:58:e9:cb:0e:26:c0:df:42:
90:1a:7a:ca:9d:43:86:45:04:7a:e9:5c:ea:d1:df:50:b5:c6:
e2:f4:ed:a5:d9:6a:fb:2a:51:ee:63:f6:95:01:fd:2a:56:19:
39:83:b9:8e:2a:b9:e2:6c:d2:36:09:49:00:5e:6b:ac:34:e0:
91:a3:b7:0a:92:86:c0:0e:1c:3a:e0:fc:9d:1a:d1:74:1c:00:
8f:1f:8f:47:2b:c7:db:5e:d6:3a:38:5b:22:dd:82:eb:60:80:
46:8f:51:4d:cd:38:7f:6e:4b:64:ce:1f:6c:d0:90:88:f2:b5:
c8:0a:85:e8:37:26:60:31:77:11:7d:fb:d7:57:be:c9:f1:d7:
93:a8:58:e8:c8:8c:3a:62:7e:b0:7e:83:86:00:6d:60:5d:de:
77:0f:70:ab:1c:a7:9b:83:3f:35:2d:a8:18:b6:0a:6a:46:10:
bf:d8:c5:66:78:0d:35:40:49:fa:e3:2d:f4:0a:b2:b0:ce:a4:
a3:d7:1b:d3:e7:6e:c6:ab:4c:48:09:53:4b:ae:ad:53:4e:c1:
f8:a0:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:48 2025 by rpki-client