Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/huVpaDuOyP7YO_hg-K93nMNZjQI.roa
File: huVpaDuOyP7YO_hg-K93nMNZjQI.roa (raw, json)
Hash identifier: kb027+6ralND9X0aHEkf2xrhEHp9EQN+J7LlYr7HG58=
Subject key identifier: 86:E5:69:68:3B:8E:C8:FE:D8:3B:F8:60:F8:AF:77:9C:C3:59:8D:02
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 0194807CBEA856926315AF10E877625C1893
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/huVpaDuOyP7YO_hg-K93nMNZjQI.roa
Signing time: Sun 19 Jan 2025 21:34:06 +0000
ROA not before: Sun 19 Jan 2025 21:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213915
IP address blocks: 2a07:2486:4ff0::/44 maxlen: 44
2a07:2486:4ff0::/48 maxlen: 48
2a07:2486:4ff1::/48 maxlen: 48
2a07:2486:4ff2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:80:7c:be:a8:56:92:63:15:af:10:e8:77:62:5c:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jan 19 21:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86e569683b8ec8fed83bf860f8af779cc3598d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:fe:71:69:f9:44:f6:d4:7a:e5:2e:1f:2a:
d8:7d:f2:c8:69:d5:80:63:b1:21:30:0d:52:a7:49:
02:8c:ee:0c:b7:ed:40:db:4b:65:a0:9e:aa:fb:4d:
ed:3e:63:82:87:02:4b:79:a8:68:79:95:64:23:5c:
4d:bf:12:7c:fb:98:91:46:75:21:44:10:60:8d:91:
e1:de:11:64:e6:3d:7e:0d:45:9c:40:0e:e9:65:50:
09:2e:68:1b:c8:7b:ea:55:6b:06:0c:ef:d7:74:02:
e5:44:14:79:57:d8:9a:83:01:31:4d:27:15:97:de:
38:65:44:fb:7f:a0:fc:1a:01:de:ee:a9:af:16:c6:
9d:21:79:be:77:3f:69:d5:b3:ae:a6:11:a3:21:25:
21:02:c8:99:9f:fb:29:7a:bd:bd:dc:4c:5f:29:88:
71:2a:77:65:0a:4a:2e:0a:b2:19:1e:63:d8:5d:2e:
06:44:8c:8f:88:64:a2:bc:d7:79:1b:20:e1:94:17:
1d:eb:62:ce:37:43:24:3a:09:54:54:e9:9b:5d:5a:
cd:cd:8e:a6:58:c4:31:f5:9d:c4:6d:2d:28:00:47:
8f:b4:fb:76:29:ad:ea:16:72:3b:9b:58:14:b7:cb:
9f:fe:04:c9:8e:fd:b1:19:90:1a:af:75:73:a2:25:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:69:68:3B:8E:C8:FE:D8:3B:F8:60:F8:AF:77:9C:C3:59:8D:02
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/huVpaDuOyP7YO_hg-K93nMNZjQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:4ff0::/44
Signature Algorithm: sha256WithRSAEncryption
99:e9:a7:1d:d3:32:62:f9:33:d6:1b:e6:4b:e6:48:b7:6b:b4:
34:a0:16:40:d3:6d:87:84:63:6a:d8:ce:2f:d0:8f:82:13:5d:
20:c4:83:4d:89:f0:dc:3c:29:d1:69:f2:0e:b5:0c:b8:24:d6:
7e:77:ce:d6:ae:c3:bf:8b:27:01:0b:e8:50:32:4d:fd:ff:2c:
fa:53:9f:96:72:51:22:03:c4:82:98:1d:0b:2b:a5:0f:63:1d:
21:7f:46:13:65:d7:91:d1:b9:dc:8a:34:38:2d:ac:e7:73:96:
4e:4e:9f:6c:f2:d8:a4:dd:1e:3f:a7:1e:80:e8:d0:19:69:44:
0e:3d:56:ad:91:b5:4e:46:6b:9c:f3:9e:30:3c:a2:64:7b:97:
38:40:eb:48:7d:25:a4:f2:cc:ea:a0:23:78:76:47:2f:06:4a:
75:f7:39:32:6e:1b:05:5b:a1:d1:bd:e8:20:a3:bf:80:b2:f1:
01:67:83:21:ae:18:e3:29:5c:3e:39:94:cf:56:b2:f0:31:8a:
6b:8f:f4:ab:66:d4:c1:fc:98:a4:17:56:1b:9f:ad:ab:af:df:
47:5e:50:ec:8b:e3:e6:a9:d0:b6:23:8e:ad:79:e3:12:7a:9c:
df:56:75:96:e0:b2:9b:fd:72:7b:1e:c1:f9:15:b6:9a:94:94:
ee:79:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:21:10 2025 by rpki-client