Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa
File: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (raw, json)
Hash identifier: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=
Subject key identifier: 1F:D6:01:2D:36:15:5C:A0:13:E5:68:47:7E:40:9C:7D:AA:C8:4B:76
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019427B5DAD09335C51AA599A44CA0E5B623
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:ec01::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:da:d0:93:35:c5:1a:a5:99:a4:4c:a0:e5:b6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd6012d36155ca013e568477e409c7daac84b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:d2:d8:46:4e:41:22:34:f3:01:8a:4b:cb:
26:d3:20:ad:10:1d:bb:14:2c:b5:3c:6b:f5:18:c1:
be:de:47:85:1d:9a:9b:1f:68:09:bd:2d:66:3e:d4:
38:1b:64:17:66:c0:f0:56:af:32:e8:aa:28:90:af:
40:67:3f:97:4c:7c:83:3b:53:57:55:12:54:46:66:
f3:fd:74:05:69:e4:a3:cb:3e:21:58:51:7d:9b:1c:
27:62:52:ae:81:b1:1a:7c:42:53:23:0a:56:bf:98:
ff:96:23:b3:2e:54:3d:e7:05:84:de:f2:ce:7e:36:
0a:c8:43:a4:70:1d:b7:4e:f2:d2:ec:58:6a:b3:04:
29:b4:0e:9b:02:e2:8f:20:50:e0:d2:a6:24:c9:31:
37:9a:b0:50:40:56:c7:18:4d:c4:f8:e0:56:16:19:
04:78:e0:3a:22:c6:bb:bc:12:f4:49:03:68:aa:34:
0f:84:a0:fe:ba:d4:f6:4e:68:01:ce:87:7e:40:ba:
33:1a:42:36:7b:ee:c2:8e:d6:01:44:cb:ff:1e:2b:
33:08:ff:4d:ca:35:07:c4:6a:d3:0f:e6:38:6a:5a:
21:6d:99:f0:c5:4f:7c:63:d3:3b:08:c8:ca:44:a6:
12:ff:e5:a2:8e:57:45:19:4a:9b:52:8c:f7:2c:10:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:01:2D:36:15:5C:A0:13:E5:68:47:7E:40:9C:7D:AA:C8:4B:76
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ec01::/32
Signature Algorithm: sha256WithRSAEncryption
07:6e:1c:67:f8:43:45:82:fd:7f:6e:f2:25:e9:ed:00:d1:6b:
b4:92:44:af:aa:34:89:6e:e3:b8:44:e3:fc:af:8d:0d:86:54:
34:ed:6c:95:38:8a:af:07:3e:19:ba:21:22:36:c4:c8:34:86:
fd:47:0d:dc:a1:50:91:5c:7d:8e:8b:56:fa:fb:c1:91:69:eb:
03:ba:fa:60:6d:76:8b:d3:b8:e6:34:38:4d:40:08:d5:08:f1:
7f:7e:d2:99:d6:07:71:68:c4:47:8c:f5:6c:44:25:b9:56:f9:
e6:51:6b:09:9b:2c:9b:e8:34:71:ba:64:4e:d6:fc:2d:df:ed:
e1:88:64:b1:6e:10:ec:3d:3a:c6:49:6a:be:55:5a:10:04:1b:
21:e2:a4:dc:bd:0e:bd:46:ee:2f:4e:1b:c5:e0:a8:c4:52:b3:
75:d3:49:06:4e:c7:83:e7:cf:36:1d:4b:48:6f:d9:1c:fc:ae:
fa:67:83:49:fe:91:f3:34:8b:96:f8:04:f9:31:7b:c8:93:f7:
57:f5:8e:b1:99:ca:28:ac:b9:d9:05:d8:86:6d:52:fa:74:c6:
0c:0a:df:a0:e0:22:87:70:78:29:15:08:16:f3:68:58:4c:0e:
c2:9b:d4:2b:b0:bf:df:40:9d:3f:81:38:be:4b:dc:42:5d:cc:
a7:f9:1c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:07:35 2025 by rpki-client