Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/HgTpZqsMHMuYg9OEYrDrZJs7Irk.roa
File: HgTpZqsMHMuYg9OEYrDrZJs7Irk.roa (raw, json)
Hash identifier: CxucZH6n+akS9KMMUyab6BPpXiB451arFEZQv+rOEJY=
Subject key identifier: 1E:04:E9:66:AB:0C:1C:CB:98:83:D3:84:62:B0:EB:64:9B:3B:22:B9
Certificate issuer: /CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Certificate serial: 07AB592E
Authority key identifier: 6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/HgTpZqsMHMuYg9OEYrDrZJs7Irk.roa
Signing time: Sat 01 Jan 2022 09:01:43 +0000
ROA not before: Sat 01 Jan 2022 09:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207618
IP address blocks: 2a0e:7d44:f000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128669998 (0x7ab592e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Validity
Not Before: Jan 1 09:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e04e966ab0c1ccb9883d38462b0eb649b3b22b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:3b:69:20:d3:8e:40:8c:ec:aa:9a:97:8f:
54:65:4b:04:b1:c6:6f:f9:8d:ea:19:c2:b4:1b:d6:
18:61:9e:4b:7c:20:6a:d3:43:36:01:67:23:cd:ed:
c3:ef:a4:bc:cc:97:97:0d:d3:83:52:b5:5f:62:1a:
e7:45:bd:53:0d:d8:dd:f6:a1:57:d1:20:0f:11:e7:
4c:7a:98:68:c9:46:01:76:2e:eb:05:82:ee:bc:e2:
29:3b:0f:7d:2d:e6:77:90:eb:8b:5a:2f:57:f4:68:
97:b4:a9:37:63:84:de:a3:66:f0:09:67:b3:29:17:
a2:e9:d5:05:62:18:19:c8:c9:18:90:b8:1d:9c:15:
79:88:2b:46:bb:9f:9f:29:12:cb:ef:58:01:48:c0:
00:50:4a:7f:01:ec:ee:a0:a8:85:07:5e:36:11:e3:
4b:ca:9b:59:f8:80:35:e3:9f:4d:79:20:a6:a2:e1:
bf:30:9a:e1:eb:2c:fa:72:0b:11:fb:63:5b:6a:0d:
ca:5a:dc:84:28:46:c3:63:57:9e:25:ba:a0:12:8b:
60:b1:6f:e0:d7:e8:e2:99:ba:e1:e6:37:3a:36:fb:
38:59:22:7a:76:76:9b:93:69:7d:44:87:fb:80:bc:
73:e5:9a:ec:6d:0b:37:4c:35:c5:12:53:0a:82:28:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:04:E9:66:AB:0C:1C:CB:98:83:D3:84:62:B0:EB:64:9B:3B:22:B9
X509v3 Authority Key Identifier:
keyid:6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/HgTpZqsMHMuYg9OEYrDrZJs7Irk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/be7Ke5hYwt5sy0Hl013geVx57ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d44:f000::/40
Signature Algorithm: sha256WithRSAEncryption
20:29:af:b7:2f:8a:6f:79:85:2f:1c:70:d9:9c:ca:ec:7d:df:
b7:b3:e2:3e:21:20:28:e7:2d:c5:ae:bd:82:a3:6e:a5:36:6f:
81:b8:b2:e9:ac:20:33:1e:4a:55:3f:ed:2a:65:4d:c0:96:71:
b3:57:e4:ec:99:8f:95:97:b1:42:dc:f6:43:08:50:47:82:87:
6d:e7:18:95:98:f0:10:2f:6a:42:0b:96:52:e9:ea:69:30:2d:
85:0f:05:49:86:2e:be:75:ef:8a:72:0c:b3:e7:3a:c2:79:ee:
d0:f7:73:3e:81:9a:0f:d1:c9:49:e4:a5:d2:00:e5:53:6f:64:
41:2b:d2:04:99:0a:95:84:49:d1:d9:3f:6f:d4:dd:28:3e:47:
92:89:b3:46:32:a6:7b:24:0f:51:21:6b:09:82:80:2e:9f:59:
91:3c:af:21:6f:e2:40:c1:42:f8:7a:1d:ab:16:f2:da:91:80:
13:5a:a2:95:ab:f9:d2:4e:39:4f:f6:4a:0f:8c:29:ca:cb:c2:
99:bd:94:58:2c:68:d3:99:4c:e2:8f:47:0b:17:06:1b:32:24:
00:87:7e:84:d3:b5:dc:92:03:0e:a6:4b:b4:55:ce:a5:b7:0d:
4c:8f:7f:73:49:1e:9e:8f:3e:41:fb:7f:b6:82:00:ec:a3:0d:
99:8f:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:46 2025 by rpki-client