Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hcQLmrNciqgNqflPYYnYJiRGcbU.roa
File: hcQLmrNciqgNqflPYYnYJiRGcbU.roa (raw, json)
Hash identifier: JlgE233OlBboYNesjokHA0dRTovZHpqeGVBMD0d2qps=
Subject key identifier: 85:C4:0B:9A:B3:5C:8A:A8:0D:A9:F9:4F:61:89:D8:26:24:46:71:B5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522876CB0E229B99C6CA00D5A4619D1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hcQLmrNciqgNqflPYYnYJiRGcbU.roa
Signing time: Thu 02 Jan 2025 03:50:07 +0000
ROA not before: Thu 02 Jan 2025 03:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215444
IP address blocks: 2a0e:97c0:f10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:87:6c:b0:e2:29:b9:9c:6c:a0:0d:5a:46:19:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85c40b9ab35c8aa80da9f94f6189d826244671b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:33:5e:5c:03:30:b8:47:14:71:c7:b8:b4:
46:78:e6:4d:d5:a4:f5:6d:50:6d:c2:f1:92:7c:ba:
8b:19:db:d1:0c:5e:88:d8:9c:90:80:78:f2:fb:37:
c1:6f:4a:4c:35:dd:ab:62:bd:c2:5c:f2:61:cf:85:
c7:19:9d:f0:f9:e6:28:bf:88:93:83:cc:86:47:9c:
b9:b4:58:c8:06:c7:82:71:09:6c:cf:16:d2:92:48:
9d:85:dc:5e:1b:d8:9c:4c:12:85:69:82:f2:b4:fc:
fa:28:1e:1c:c3:c4:4c:6e:1d:2e:99:25:2e:3a:30:
9a:f9:15:28:df:ca:10:cc:9c:4a:1c:53:21:d9:ff:
c9:59:ee:89:a5:df:88:d0:3f:24:37:61:0a:20:ea:
7d:61:51:16:25:08:74:da:4a:8f:c7:65:b6:b1:6a:
e5:9e:53:73:10:73:08:36:9a:aa:41:3a:2c:c9:7a:
b5:11:bb:03:17:37:d2:e1:26:50:c4:b8:75:19:5b:
08:06:4d:42:c3:8e:e1:6b:b7:cd:2c:90:6a:81:70:
87:42:c8:c4:81:8a:47:64:03:4a:d1:d4:f3:23:2b:
48:10:47:37:92:31:aa:bc:4b:a9:07:c7:9d:21:79:
44:f5:89:f9:d8:92:4c:fc:05:47:0b:06:f3:27:41:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C4:0B:9A:B3:5C:8A:A8:0D:A9:F9:4F:61:89:D8:26:24:46:71:B5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hcQLmrNciqgNqflPYYnYJiRGcbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:f10::/44
Signature Algorithm: sha256WithRSAEncryption
2c:fa:2f:89:11:1a:d8:49:9e:b3:b6:ec:c2:29:ba:b9:0a:e0:
a4:48:b0:d1:bf:9c:2e:9f:43:58:e2:a5:48:6a:75:b6:4b:c0:
1d:8b:ce:ee:7d:bc:f9:51:2f:f6:7d:96:63:a3:79:a3:eb:62:
0b:df:c8:4c:0f:d2:1d:6c:d2:b2:b4:ce:b2:7d:55:26:0f:be:
81:7f:d4:95:a8:9a:e6:8e:69:58:e0:7d:5d:14:71:1a:39:b3:
42:b1:a7:60:83:3b:47:7c:2e:a0:52:fc:02:f3:e3:48:69:eb:
c8:96:82:97:3d:43:3a:5e:b8:e3:e7:1c:7d:6e:83:30:68:ed:
a8:e0:bc:aa:bc:81:34:b3:51:e7:c3:a6:1c:97:2a:6e:41:dd:
ea:f1:15:1f:81:92:8e:4f:c3:c9:c3:fa:ad:f2:11:ca:28:9b:
43:7e:4b:4f:fc:f0:b1:94:ab:0b:3e:86:f1:57:f2:a7:40:ca:
8a:f4:01:b9:ed:09:48:10:ab:cd:0c:ba:c6:ef:a7:8a:b5:77:
9c:1a:a6:e5:82:7a:80:7f:2a:88:f8:0b:ff:5b:b0:ac:17:77:
7f:28:a2:fe:0a:3b:be:fe:4e:ba:4d:22:8b:6e:99:68:f7:22:
f9:9f:eb:d1:6b:a3:28:78:bd:c8:4d:8f:5b:6a:fd:be:f6:1f:
bb:bd:bc:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIodssOIpuZxsoA1aRhnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWM0MGI5YWIzNWM4YWE4MGRhOWY5NGY2MTg5ZDgyNjI0NDY3MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroIzXlwDMLhHFHHHuLRGeOZN1aT1
bVBtwvGSfLqLGdvRDF6I2JyQgHjy+zfBb0pMNd2rYr3CXPJhz4XHGZ3w+eYov4iT
g8yGR5y5tFjIBseCcQlszxbSkkidhdxeG9icTBKFaYLytPz6KB4cw8RMbh0umSUu
OjCa+RUo38oQzJxKHFMh2f/JWe6Jpd+I0D8kN2EKIOp9YVEWJQh02kqPx2W2sWrl
nlNzEHMINpqqQTosyXq1EbsDFzfS4SZQxLh1GVsIBk1Cw47ha7fNLJBqgXCHQsjE
gYpHZANK0dTzIytIEEc3kjGqvEupB8edIXlE9Yn52JJM/AVHCwbzJ0Hy8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIXEC5qzXIqoDan5T2GJ2CYkRnG1MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaGNRTG1yTmNpcWdOcWZsUFlZbllKaVJHY2JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwA8Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAs+i+JERrYSZ6ztuzCKbq5CuCkSLDRv5wun0NY
4qVIanW2S8Adi87ufbz5US/2fZZjo3mj62IL38hMD9IdbNKytM6yfVUmD76Bf9SV
qJrmjmlY4H1dFHEaObNCsadggztHfC6gUvwC8+NIaevIloKXPUM6Xrjj5xx9boMw
aO2o4LyqvIE0s1Hnw6YclypuQd3q8RUfgZKOT8PJw/qt8hHKKJtDfktP/PCxlKsL
PobxV/KnQMqK9AG57QlIEKvNDLrG76eKtXecGqblgnqAfyqI+Av/W7CsF3d/KKL+
Cju+/k66TSKLbplo9yL5n+vRa6MoeL3ITY9bav2+9h+7vbyF
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:11 2025 by rpki-client