Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HuYymGIqFKAlAREHLDo12IlIq_A.roa
File: HuYymGIqFKAlAREHLDo12IlIq_A.roa (raw, json)
Hash identifier: LEHGWphR5naIvbOLtryReaTpx188/B5aZUc7VfHMcKo=
Subject key identifier: 1E:E6:32:98:62:2A:14:A0:25:01:11:07:2C:3A:35:D8:89:48:AB:F0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 176E93BC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HuYymGIqFKAlAREHLDo12IlIq_A.roa
Signing time: Mon 28 Mar 2022 09:55:15 +0000
ROA not before: Mon 28 Mar 2022 09:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138517
IP address blocks: 2a06:a005:2b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393122748 (0x176e93bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 28 09:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ee63298622a14a0250111072c3a35d88948abf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:05:cc:00:f3:24:f3:2a:1f:dd:10:3c:43:
3f:56:a5:40:73:26:59:d6:92:3b:53:99:2d:3d:b2:
60:8d:1c:50:8e:57:06:7e:23:64:27:44:a6:87:ff:
27:c7:41:b9:83:2c:21:4a:7d:c9:3a:f0:b0:c3:88:
f3:83:1d:b5:ea:1c:d3:b3:47:9c:88:a4:80:19:b3:
f7:d2:43:c3:79:27:90:f5:c1:c0:31:57:49:e5:61:
d6:5d:3c:e6:9d:ab:eb:11:47:52:fd:86:f3:99:96:
fe:36:3e:78:d6:13:de:af:b2:6a:01:11:ac:42:25:
31:b2:be:06:b8:c8:a7:5f:f1:31:20:53:d7:07:64:
e8:31:7d:f7:70:c9:b1:6a:aa:45:19:39:f7:45:5d:
30:54:cf:ec:46:85:9e:64:6c:de:16:41:d6:ab:a0:
18:81:2a:51:bc:05:49:75:d5:0c:c5:4d:0d:71:d6:
b3:75:66:cf:d6:42:1d:77:21:aa:72:e9:a3:7e:fa:
38:c7:6e:a5:2e:c5:4e:91:8e:a1:60:03:5d:3c:a5:
a1:b2:a3:ea:ac:3a:45:1e:b5:9b:6f:b7:9f:0e:4e:
fd:5d:3a:3d:b5:45:ae:b8:50:f6:2a:27:65:af:4d:
c1:a8:ce:98:d9:c7:10:af:6a:85:18:d5:10:37:1d:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E6:32:98:62:2A:14:A0:25:01:11:07:2C:3A:35:D8:89:48:AB:F0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HuYymGIqFKAlAREHLDo12IlIq_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
4f:fb:e0:18:20:15:82:82:e3:d4:86:8f:b4:15:59:2d:36:3e:
d8:7e:ae:61:68:b4:14:9d:59:ad:50:d2:46:a7:95:da:4c:e8:
98:99:72:a9:b8:7f:5e:20:96:3d:06:f5:10:40:a4:e4:a7:07:
db:d6:a0:fc:0a:4f:d3:33:ba:4f:de:69:c3:d0:d2:34:d0:17:
31:eb:8c:6f:05:47:c1:cb:21:e0:5e:fe:f6:93:62:1f:09:f3:
bc:83:0b:2c:e9:65:bb:3e:57:e7:0f:9a:93:29:ba:5e:ee:93:
11:c8:a9:41:60:57:95:a6:e6:38:65:74:d1:2e:bd:98:f0:29:
be:9a:74:fa:fd:47:98:c4:f4:00:ba:11:b1:fa:7f:a2:40:84:
a6:92:57:85:2b:1e:97:1c:2d:a3:12:65:b7:13:6c:b7:7a:a1:
83:52:e5:ae:5d:3e:1e:0c:69:04:5a:c5:ea:16:33:c6:74:d3:
5d:1d:18:13:a1:9b:3e:30:c3:cb:9b:df:2f:b4:37:81:82:57:
4a:bc:e3:e0:56:68:12:9e:de:19:ca:21:56:0d:89:71:54:ce:
e6:4b:1a:c7:f5:8c:a3:fd:44:96:4c:f6:42:0b:21:8b:c7:a2:
da:de:83:39:21:a6:73:89:80:da:df:c2:d2:11:cf:33:58:6f:
a0:37:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:16:11 2025 by rpki-client