Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_-HMXn2dFJFjHnDX02X3jXsvTuE.roa
File: _-HMXn2dFJFjHnDX02X3jXsvTuE.roa (raw, json)
Hash identifier: 950Pau/15bEtJz/9f38/x/dssbyMI162p74dxhgpdyw=
Subject key identifier: FF:E1:CC:5E:7D:9D:14:91:63:1E:70:D7:D3:65:F7:8D:7B:2F:4E:E1
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0193DB60A3C845318907EC375A52323E90D6
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_-HMXn2dFJFjHnDX02X3jXsvTuE.roa
Signing time: Wed 18 Dec 2024 20:06:03 +0000
ROA not before: Wed 18 Dec 2024 20:06:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215787
IP address blocks: 2a0d:2146:bde0::/43 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:db:60:a3:c8:45:31:89:07:ec:37:5a:52:32:3e:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Dec 18 20:06:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffe1cc5e7d9d1491631e70d7d365f78d7b2f4ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:c8:b2:a2:4a:d0:4b:36:d8:f1:b7:45:63:
c8:c8:23:fc:79:bf:1e:fa:0b:8c:37:09:94:f4:d0:
3b:83:3b:1d:18:e2:d5:48:d9:3f:af:5d:f9:35:05:
63:82:ff:5d:94:3e:11:0f:79:26:e5:80:ac:e0:ef:
80:2e:5a:0a:a1:66:22:35:af:79:55:48:ea:40:83:
9e:48:c9:37:f6:cd:b0:b1:f7:33:9a:e4:a3:e2:20:
22:31:66:fc:5f:ae:17:df:18:60:4d:8a:4b:60:76:
92:d5:57:30:60:4b:d4:18:9c:11:c1:61:85:4a:13:
f4:df:03:82:01:46:45:6a:98:6b:ea:a8:3d:1e:37:
ca:31:7f:99:e8:53:e1:c8:3e:3b:84:1c:87:52:ab:
a1:ee:54:73:f4:e7:80:c1:12:ce:ab:df:b6:7b:d7:
39:d8:8d:85:88:72:e2:cb:35:da:cf:99:e3:71:41:
92:38:df:12:3d:86:39:83:c9:8d:7b:27:ab:ed:49:
5d:21:b5:e7:29:17:67:5a:2a:4b:41:ce:7d:68:38:
4f:96:e5:00:fa:df:8a:d9:61:23:dd:95:34:83:f8:
c5:d1:1a:2d:a7:94:59:05:d3:78:ef:26:47:15:93:
9e:75:fe:aa:0f:a2:9b:e5:5f:38:43:a7:03:d7:fc:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:CC:5E:7D:9D:14:91:63:1E:70:D7:D3:65:F7:8D:7B:2F:4E:E1
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_-HMXn2dFJFjHnDX02X3jXsvTuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:bde0::/43
Signature Algorithm: sha256WithRSAEncryption
5f:18:b6:72:61:88:7c:28:a0:d0:02:30:a9:45:75:e3:15:6c:
d1:b3:85:4b:89:59:20:18:2c:c8:9c:69:93:cf:a9:95:d2:02:
2e:b0:55:bd:24:1f:40:a2:5d:e0:24:81:a2:c7:ce:1d:89:c9:
74:98:11:a5:bf:41:5a:aa:ee:64:f9:de:91:34:c3:90:7a:d9:
fd:03:01:e3:06:d9:9b:c5:72:04:51:ce:0c:e7:3a:fb:35:d7:
b4:65:53:15:44:9b:7e:b9:72:f6:a2:83:c8:41:30:55:ed:97:
a5:78:b6:cd:06:e6:69:c6:a9:f7:68:ba:24:5e:b7:84:5c:9d:
d6:e0:d9:a7:59:ec:6e:f4:d4:81:43:94:1e:26:56:cf:28:d1:
8f:ac:57:77:6e:60:96:0b:12:71:9f:c3:e5:bb:64:f2:2e:5b:
e8:7f:b9:de:13:da:2c:95:8f:84:7b:14:00:12:ff:24:e1:ef:
f8:85:6c:bc:f4:6c:2d:5a:4f:ed:4c:24:5d:46:90:45:f9:a9:
c8:87:26:33:2d:d4:6e:e7:b1:9b:1c:77:ca:ed:2c:15:ce:49:
2f:ea:1e:1e:ad:23:31:ec:07:cd:74:e0:d1:97:48:23:d5:52:
dd:5a:f3:14:dc:35:bb:ff:f9:72:ca:67:28:25:66:ae:97:a9:
69:8e:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:25 2025 by rpki-client