Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/hI0hX7QD6HT-IXU7O2MFqLRQn1k.roa
File: hI0hX7QD6HT-IXU7O2MFqLRQn1k.roa (raw, json)
Hash identifier: 6lRDe/mi2kPCBPDXgbXtYv2JDQ7vapBMlBj80iBSzmw=
Subject key identifier: 84:8D:21:5F:B4:03:E8:74:FE:21:75:3B:3B:63:05:A8:B4:50:9F:59
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 0193F8A86334AF8794E41FD01AFA1638A286
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/hI0hX7QD6HT-IXU7O2MFqLRQn1k.roa
Signing time: Tue 24 Dec 2024 12:33:25 +0000
ROA not before: Tue 24 Dec 2024 12:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30788
IP address blocks: 2a0a:f8c0::/29 maxlen: 29
2a0b:2a80::/29 maxlen: 29
2a0f:a380::/29 maxlen: 29
2a12:5640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:a8:63:34:af:87:94:e4:1f:d0:1a:fa:16:38:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Dec 24 12:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=848d215fb403e874fe21753b3b6305a8b4509f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:46:a8:9c:62:55:a0:e4:29:06:be:d4:bf:
22:f4:71:ff:17:c1:ac:66:c5:1a:cf:5e:8c:e8:f0:
5d:f5:22:39:68:ff:68:75:e6:44:83:3f:48:ed:55:
63:bf:62:a4:53:1b:3b:e8:69:06:19:84:fa:4c:a1:
2c:02:0b:75:88:68:e3:a8:59:c2:b8:b9:d5:32:03:
0c:b1:a5:fc:f2:84:f1:21:66:3a:c3:78:c3:22:2b:
b1:c8:79:93:b1:3a:2d:d7:79:24:df:5d:ff:50:ff:
cc:53:6c:ee:2c:c1:0d:41:01:3b:ba:64:22:ec:80:
db:4b:1f:cc:7c:94:c8:0b:6a:cf:49:89:6d:0b:55:
48:00:6d:88:3f:fa:76:23:91:d7:05:87:94:72:67:
7d:33:a6:92:d6:8c:a0:f4:97:17:34:62:dc:c1:42:
a7:34:f3:07:fd:8e:28:fb:9d:32:97:4e:a4:2a:8c:
d0:7f:3e:f3:2c:29:db:08:6b:1e:2d:ec:29:73:2f:
f2:3b:ea:25:5a:cf:5f:b6:e8:30:89:c1:c0:d2:97:
4d:ee:24:ad:1c:ce:c9:c9:a7:e2:6c:cc:ed:e9:d3:
b9:f9:e0:f8:f5:b6:f1:20:05:27:4f:54:cd:6c:15:
1c:83:98:70:e2:b0:69:c6:5a:ef:88:02:5a:54:9a:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:21:5F:B4:03:E8:74:FE:21:75:3B:3B:63:05:A8:B4:50:9F:59
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/hI0hX7QD6HT-IXU7O2MFqLRQn1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f8c0::/29
2a0b:2a80::/29
2a0f:a380::/29
2a12:5640::/29
Signature Algorithm: sha256WithRSAEncryption
54:5a:af:4b:56:dc:d2:96:bb:91:3c:16:f5:97:eb:89:57:35:
17:4b:4e:e1:46:cd:7a:f2:3a:5b:76:4a:30:09:4b:57:6f:08:
12:97:e9:d3:34:8a:d1:ff:5f:78:9c:43:c2:d5:14:49:da:d4:
ab:d3:2f:2c:a4:bc:67:8f:cf:12:52:66:54:de:4e:57:d7:ec:
c4:38:d8:66:cf:6c:b4:c0:ed:2c:72:48:df:77:9e:ed:0b:d1:
8d:82:36:9d:f4:6f:08:36:b0:90:33:03:4a:44:8f:f3:ad:6e:
55:b4:56:db:57:95:37:ff:97:41:a6:9d:f6:15:c1:a4:70:cf:
22:97:32:d1:60:7b:72:fd:ff:85:08:f9:7e:6c:ae:96:3d:a9:
f4:1e:3d:ad:e4:96:90:02:aa:fe:fd:7b:8a:94:0c:bf:4c:9f:
08:08:53:35:67:ba:87:0b:01:38:0f:cd:59:cf:3c:64:2d:40:
11:59:8a:77:e3:58:d6:cf:48:e7:df:c6:bd:09:57:4e:b1:4e:
c5:e6:a5:21:0f:c6:5b:74:dd:a6:9e:89:eb:8f:96:bd:56:a2:
f3:53:88:85:11:09:55:bc:f5:0b:9a:35:86:bc:de:86:7d:72:
43:c5:d2:1c:d2:f6:54:eb:f1:e0:ee:b9:d6:55:fe:c1:ec:68:
ef:27:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:05:36 2025 by rpki-client