Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/hE2ePAizZlQUV6uXdZuzIjMthNQ.roa
File: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (raw, json)
Hash identifier: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=
Subject key identifier: 84:4D:9E:3C:08:B3:66:54:14:57:AB:97:75:9B:B3:22:33:2D:84:D4
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 01941FFA1C66A01A7A4E4478FA02554B75FD
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/hE2ePAizZlQUV6uXdZuzIjMthNQ.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213210
IP address blocks: 2001:678:9b4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:66:a0:1a:7a:4e:44:78:fa:02:55:4b:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=844d9e3c08b366541457ab97759bb322332d84d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:d9:d5:27:b4:36:85:63:81:3f:43:7e:68:
b9:3c:94:2e:b6:5d:c2:6e:33:2d:3d:cf:6c:6d:b7:
e6:49:6a:42:fa:e8:9d:b9:97:09:f4:be:3d:27:ad:
f4:c0:f6:0f:6c:2f:9f:58:10:7e:b4:23:33:98:7b:
cd:6c:3a:ab:49:6f:9f:5d:98:85:3a:1a:56:b7:25:
7e:35:1c:3c:dd:3c:03:91:0d:56:51:e3:f6:09:e9:
e0:d6:d9:02:19:02:e0:38:1f:a0:cc:66:8d:30:02:
c4:54:b2:18:bc:3b:c4:b3:37:b0:2c:5d:35:c9:3b:
e2:76:a7:f3:65:6f:8d:06:4b:fb:bd:d7:0c:54:31:
b2:21:bb:32:a3:e2:af:d3:e8:e9:88:41:26:a3:ea:
d6:4d:cd:a7:8a:c9:41:0b:af:3e:d6:5c:6d:d8:e0:
54:36:60:af:97:28:3d:c8:0c:e6:d9:27:6a:e4:6d:
2a:8f:37:4f:ba:31:c2:b2:1d:f9:d2:89:ee:53:37:
65:8e:a7:9d:09:9b:91:f5:47:af:cf:21:08:46:6c:
78:72:16:97:c4:c2:8b:c8:5e:13:fc:99:c6:10:38:
a4:bc:3f:70:4c:7f:21:a2:6b:20:6a:34:b1:8f:74:
2d:8f:b3:44:5e:81:09:4e:74:2d:e0:bc:79:ac:39:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4D:9E:3C:08:B3:66:54:14:57:AB:97:75:9B:B3:22:33:2D:84:D4
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/hE2ePAizZlQUV6uXdZuzIjMthNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9b4::/48
Signature Algorithm: sha256WithRSAEncryption
47:f0:d0:4a:1e:f2:0e:b8:14:dd:01:5a:cd:8a:c7:67:8f:98:
4e:ce:da:6d:83:40:f8:88:b0:0e:7a:e5:a7:d0:43:a3:c7:15:
67:8a:d0:24:84:c7:38:00:45:61:26:79:78:7e:78:57:5d:d3:
09:ae:30:69:59:c4:4f:00:f9:48:d0:61:d9:2c:3a:fd:d6:15:
71:50:8d:0b:ff:de:79:a0:45:02:cc:c4:3a:97:42:55:19:ec:
df:82:81:9d:81:80:68:2f:1e:bb:49:1e:6b:1d:37:58:af:b0:
aa:ae:cc:d0:aa:43:12:6d:b5:de:0d:d4:8f:b2:21:c9:f2:29:
90:c1:1b:07:d2:7b:5e:98:f0:eb:67:f0:5d:b0:6a:ff:d8:f8:
fd:6b:f8:88:9e:69:96:7c:10:f3:8d:0b:01:80:91:05:fe:10:
70:b6:f0:43:d0:b6:58:9e:27:e8:05:70:6e:2d:ca:61:b7:bb:
4c:74:6b:64:79:d9:a4:0d:5a:7e:c4:9b:ea:c2:54:1c:98:dd:
ae:82:97:42:33:50:b2:49:a4:96:a5:20:37:f1:2f:3f:fe:00:
53:c1:26:fa:a2:d6:30:66:32:f8:f4:a4:8c:f6:47:ea:43:78:
8a:79:7e:8f:64:f5:54:f7:88:f5:d1:f8:be:48:48:fa:15:c4:
ca:d9:5e:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+hxmoBp6TkR4+gJVS3X9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTI4NTRhODQwMGQ4Yzg3ZWE0ZGU3YTIyZmRmMWJmNTc0
YTkwMzEwHhcNMjUwMTAxMDM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDRkOWUzYzA4YjM2NjU0MTQ1N2FiOTc3NTliYjMyMjMzMmQ4NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dnZ1Se0NoVjgT9Dfmi5PJQutl3C
bjMtPc9sbbfmSWpC+uiduZcJ9L49J630wPYPbC+fWBB+tCMzmHvNbDqrSW+fXZiF
OhpWtyV+NRw83TwDkQ1WUeP2Ceng1tkCGQLgOB+gzGaNMALEVLIYvDvEszewLF01
yTvidqfzZW+NBkv7vdcMVDGyIbsyo+Kv0+jpiEEmo+rWTc2nislBC68+1lxt2OBU
NmCvlyg9yAzm2Sdq5G0qjzdPujHCsh350onuUzdljqedCZuR9UevzyEIRmx4chaX
xMKLyF4T/JnGEDikvD9wTH8homsgajSxj3Qtj7NEXoEJTnQt4Lx5rDm6gQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIRNnjwIs2ZUFFerl3WbsyIzLYTUMB8GA1UdIwQY
MBaAFDoShUqEANjIfqTeeiL98b9XSpAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMt
NjgyOWQ2OGUyYTU0LzEvaEUyZVBBaXpabFFVVjZ1WGRadXpJak10aE5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMtNjgyOWQ2OGUyYTU0
LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAm0
MA0GCSqGSIb3DQEBCwUAA4IBAQBH8NBKHvIOuBTdAVrNisdnj5hOztptg0D4iLAO
euWn0EOjxxVnitAkhMc4AEVhJnl4fnhXXdMJrjBpWcRPAPlI0GHZLDr91hVxUI0L
/955oEUCzMQ6l0JVGezfgoGdgYBoLx67SR5rHTdYr7CqrszQqkMSbbXeDdSPsiHJ
8imQwRsH0ntemPDrZ/BdsGr/2Pj9a/iInmmWfBDzjQsBgJEF/hBwtvBD0LZYnifo
BXBuLcpht7tMdGtkedmkDVp+xJvqwlQcmN2ugpdCM1CySaSWpSA38S8//gBTwSb6
otYwZjL49KSM9kfqQ3iKeX6PZPVU94j10fi+SEj6FcTK2V6d
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:41 2025 by rpki-client