Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/h1ukNoxF9DJUl37AyGab6Erc1Gg.roa
File: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (raw, json)
Hash identifier: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=
Subject key identifier: 87:5B:A4:36:8C:45:F4:32:54:97:7E:C0:C8:66:9B:E8:4A:DC:D4:68
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0194228D1311107CC422CD5F927E1CF23CC4
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/h1ukNoxF9DJUl37AyGab6Erc1Gg.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205267
IP address blocks: 2a12:4946:4040::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:13:11:10:7c:c4:22:cd:5f:92:7e:1c:f2:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=875ba4368c45f43254977ec0c8669be84adcd468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:11:6f:d5:c2:c2:b4:c5:36:47:54:ec:82:ec:
86:1c:b5:90:05:c2:49:89:eb:6c:6c:c2:d2:6b:92:
1e:7b:53:f6:e0:71:1c:10:69:2f:33:cc:55:63:c4:
22:23:e8:69:20:b7:35:d4:a4:81:44:ee:ec:8f:37:
11:6d:48:e1:5d:c3:dd:68:e2:cb:43:f9:22:fc:cc:
0c:42:a9:44:b9:d6:9b:0f:e8:ba:fd:bb:ce:26:f3:
8f:13:e7:1e:6c:86:a3:6d:2e:45:02:6f:90:f6:f5:
bb:68:12:90:64:4b:cb:96:07:17:a6:05:c7:17:17:
be:81:4b:3f:b8:10:b1:3b:b7:5d:6b:58:31:6b:ac:
7c:95:77:ab:3e:0f:65:ef:fc:a2:f2:b2:52:75:65:
e0:5c:37:b3:00:93:c9:f0:80:8f:4f:ba:6a:31:e0:
68:dc:fa:f2:0f:ac:05:79:8a:fd:7e:94:78:a4:4f:
0f:8a:70:a4:b9:8d:71:01:42:c3:e5:9f:b2:07:65:
14:e7:2b:91:94:e5:8c:74:e9:66:3f:c2:78:e1:ac:
d6:ee:18:85:5e:98:6f:05:43:12:8b:07:2e:e3:19:
24:fb:28:cd:29:df:d4:13:ea:01:e0:65:28:c4:a0:
dd:c4:85:9c:4b:5c:cb:16:da:f9:90:ed:1f:9b:29:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5B:A4:36:8C:45:F4:32:54:97:7E:C0:C8:66:9B:E8:4A:DC:D4:68
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/h1ukNoxF9DJUl37AyGab6Erc1Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4946:4040::/44
Signature Algorithm: sha256WithRSAEncryption
1b:9d:fe:6a:21:df:3c:db:c1:c0:df:5c:e4:67:30:a8:b2:c6:
6c:c5:a7:88:65:fc:24:91:fd:b6:27:2b:58:23:61:cd:50:61:
a1:64:3e:58:36:2d:9a:73:8f:a7:40:36:15:ed:d2:ba:20:64:
0c:af:55:82:f8:b0:ce:bc:db:c3:ea:87:01:d1:fc:fd:2c:17:
e8:80:e0:12:1d:9a:1e:c2:da:cc:89:f9:de:7a:75:ae:d5:56:
90:08:a9:c1:ef:06:3e:b8:28:9f:e1:46:f0:37:16:eb:77:07:
df:fd:f1:49:0e:32:b6:50:31:fa:9b:c5:81:c5:f0:0b:af:e0:
f9:29:dd:10:ef:06:f1:f9:f9:12:7f:f5:5e:ca:46:58:81:df:
0e:0d:7f:f1:0f:e3:9b:03:99:8b:34:1a:52:4c:fd:90:3b:89:
de:03:cb:92:15:71:b9:4b:51:67:56:d7:14:93:0d:8c:c6:fa:
37:a4:5d:cd:e3:51:15:c9:6d:bd:40:34:5c:01:33:b0:41:80:
f3:ac:d0:e0:6f:8c:3a:42:24:0d:32:b9:f3:4a:d5:05:03:e7:
a1:c6:98:85:d6:08:a5:4d:f1:14:a4:0e:3b:be:f8:be:64:fd:
8b:42:42:4a:1d:72:8a:4b:af:0e:63:d1:18:ae:d1:d1:74:15:
52:15:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:24 2025 by rpki-client