Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HudHZ098qlvnxHAG4NhdYEsKrnk.roa
File: HudHZ098qlvnxHAG4NhdYEsKrnk.roa (raw, json)
Hash identifier: o/DeMG3RgyEpBDf7sBOrx7uAu4hIb7HS03EOCKs8AOI=
Subject key identifier: 1E:E7:47:67:4F:7C:AA:5B:E7:C4:70:06:E0:D8:5D:60:4B:0A:AE:79
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018315009DC47B14E931F1D122D5BE76DF20
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HudHZ098qlvnxHAG4NhdYEsKrnk.roa
Signing time: Tue 06 Sep 2022 22:51:45 +0000
ROA not before: Tue 06 Sep 2022 22:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150298
IP address blocks: 2a06:a005:1278::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:15:00:9d:c4:7b:14:e9:31:f1:d1:22:d5:be:76:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 6 22:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ee747674f7caa5be7c47006e0d85d604b0aae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:0a:7e:77:cd:fc:db:0e:dc:0f:7e:7e:68:
62:e2:11:af:24:8d:cf:ee:6b:07:39:2b:88:55:45:
ca:f2:e6:de:41:b9:97:05:9d:ac:3a:6c:50:97:61:
0f:dd:3e:48:c8:95:86:63:c1:cc:ad:5e:e6:3d:91:
52:03:99:bf:6c:12:b0:30:4c:c0:09:b3:68:4d:fa:
fb:ff:61:34:8e:56:9f:5f:57:33:5d:43:70:22:24:
d4:69:fa:f0:30:08:2d:ee:71:e4:d6:5d:f3:24:1d:
8d:cf:0e:27:a9:d8:a8:8c:a4:4d:74:eb:44:9d:41:
a9:31:54:1e:1e:82:b8:70:da:60:19:89:41:c0:83:
c1:55:cf:59:13:64:93:c5:f2:12:bb:73:02:de:0f:
2e:a7:76:e0:c2:c4:49:0a:ec:07:65:b3:86:98:05:
3a:7d:4f:61:a1:68:ab:e7:32:b7:9a:5f:6d:4b:1b:
2f:59:9c:69:e0:c1:9c:fc:3f:53:63:bc:5d:fa:db:
71:ad:b0:05:6f:c8:c6:9e:61:7a:35:8f:98:5a:39:
ac:22:31:eb:27:61:cb:97:dc:72:90:33:87:64:f3:
b2:63:08:9d:d3:98:1c:35:1f:34:b3:af:b9:d4:f1:
f7:e1:f2:a4:a5:35:f7:4c:5e:21:a2:10:f8:7a:66:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:47:67:4F:7C:AA:5B:E7:C4:70:06:E0:D8:5D:60:4B:0A:AE:79
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HudHZ098qlvnxHAG4NhdYEsKrnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1278::/48
Signature Algorithm: sha256WithRSAEncryption
a3:11:73:94:1c:54:20:3b:be:6c:bb:41:ce:d1:19:46:a2:89:
a2:ca:d5:31:23:5f:1d:b6:dd:4d:4a:db:b4:d0:30:ce:79:b9:
3d:eb:77:8a:a9:92:24:76:62:38:c3:c9:92:36:10:d9:7f:90:
b6:18:c2:eb:36:18:3c:75:25:24:fa:7c:44:43:ec:8b:e4:9f:
68:92:b0:df:5a:9b:36:b3:3f:75:a2:5e:4e:a0:5e:63:58:07:
4f:42:59:69:24:66:0f:06:b2:5c:9e:81:04:75:2f:bc:8b:c3:
49:de:fc:a8:39:52:52:37:2a:9a:b1:4d:3e:d1:df:ce:cd:ff:
51:a2:d6:d3:b6:5d:4e:fd:c8:4b:18:bc:4e:e1:2d:a2:4d:bc:
8b:5a:e4:fc:e8:ad:1c:d1:78:31:f1:e3:86:fa:a4:3f:11:b9:
bb:89:80:ff:1b:4d:92:21:86:20:b5:9f:94:33:1c:40:41:53:
7e:03:68:4e:a4:32:ac:cf:7e:35:28:81:14:3a:f4:eb:a8:8f:
93:43:32:6f:5c:95:3b:94:89:e8:d4:a3:37:3c:2e:21:d9:45:
42:f1:0f:a4:24:2d:08:a0:eb:72:07:5c:d2:ec:d9:60:8d:74:
64:67:ed:64:17:0f:51:5d:61:67:9d:b3:43:c0:9b:c8:3b:26:
7d:9f:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:43 2025 by rpki-client