Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/HR0XymDjYe2DRNyUZVbZqFsvTwE.roa
File: HR0XymDjYe2DRNyUZVbZqFsvTwE.roa (raw, json)
Hash identifier: pR8njP8dU7BytaQQCqlISJPDZn6JuoxV9zI68zcZufg=
Subject key identifier: 1D:1D:17:CA:60:E3:61:ED:83:44:DC:94:65:56:D9:A8:5B:2F:4F:01
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427462C02E26462BC629B386D3C886E62
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/HR0XymDjYe2DRNyUZVbZqFsvTwE.roa
Signing time: Thu 02 Jan 2025 13:48:17 +0000
ROA not before: Thu 02 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 2a0d:2585::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:2c:02:e2:64:62:bc:62:9b:38:6d:3c:88:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d1d17ca60e361ed8344dc946556d9a85b2f4f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:ee:94:d4:8c:e9:76:06:08:9a:a1:71:18:
9e:cf:95:d7:19:aa:4a:b4:e7:50:44:db:a3:53:cb:
a4:90:8e:58:89:99:83:90:30:14:18:fc:3c:b1:1e:
68:53:e6:96:56:e5:5f:fb:7b:80:91:69:9b:98:8b:
1d:09:5d:60:43:5d:23:99:19:3c:4b:5e:35:86:5b:
3d:4d:ee:fd:a6:35:f6:c7:c5:47:9e:a4:4f:ee:f8:
39:b6:44:a8:49:11:28:44:dc:d7:0c:6f:17:51:af:
97:fe:bc:db:af:4e:80:89:1f:ad:0b:f5:a8:9d:8e:
d5:e9:ef:3f:7d:5a:2b:2c:24:a0:f7:00:dd:86:f2:
b2:56:0a:30:84:d3:86:38:d8:3c:c8:fe:53:79:b8:
93:b6:07:3b:ce:5c:b1:ca:9a:e2:95:49:a8:44:31:
fe:aa:b0:1c:cb:22:b8:e6:7c:1b:22:54:4f:79:38:
9a:db:e6:84:b0:a1:57:42:f8:04:9b:55:2c:5b:a7:
46:7b:0f:3a:bd:f2:39:0f:c1:8a:e0:eb:1d:14:ea:
b1:63:c6:be:3b:c9:9f:48:ae:57:a5:59:16:1a:17:
74:88:df:ea:7f:8c:bc:11:98:ef:55:c6:57:77:ea:
c1:9b:07:39:a7:ff:9e:64:21:df:27:84:5c:82:ca:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1D:17:CA:60:E3:61:ED:83:44:DC:94:65:56:D9:A8:5B:2F:4F:01
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/HR0XymDjYe2DRNyUZVbZqFsvTwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2585::/32
Signature Algorithm: sha256WithRSAEncryption
78:cd:a0:de:6a:73:77:de:11:5c:6f:00:9a:21:3d:31:00:45:
db:32:18:97:35:58:ef:08:c6:70:7a:06:d8:49:8f:2b:2b:e6:
55:7d:e9:54:19:84:23:0a:38:8b:73:ec:40:17:7a:0e:07:dd:
c5:3c:ab:b9:b2:f0:d8:19:77:73:4f:e4:cc:5f:49:9c:c7:fe:
8d:a8:91:67:bd:48:4e:01:79:02:78:a2:03:e1:8b:13:22:8a:
7d:23:3c:69:ea:54:f5:d8:ea:c9:3b:fd:f3:d0:69:9c:71:ab:
3c:cc:79:6b:d7:ff:74:22:46:1a:de:79:e4:a0:0c:1e:0e:cc:
ed:d2:c6:ac:0d:5c:ab:f9:e5:08:4b:45:b2:84:45:22:d5:09:
d4:a9:be:58:51:bc:1f:58:54:d3:a1:fc:66:ad:40:d3:44:09:
86:1f:6f:92:6c:e7:1e:dc:31:d2:42:7f:26:4e:30:d2:ba:77:
96:e4:eb:b0:7f:15:f6:25:10:c3:43:ce:c1:65:65:d9:d6:87:
8c:6c:36:58:11:b8:ed:87:1a:ef:7e:2b:bf:8e:18:33:f6:67:
b1:07:04:04:e2:bf:1f:e8:43:9c:c2:3b:ac:46:e6:94:a2:13:
1d:4a:aa:66:78:e3:9d:b0:70:19:8b:09:49:b4:be:9e:97:0d:
93:d8:04:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnRiwC4mRivGKbOG08iG5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjUwMTAyMTM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDFkMTdjYTYwZTM2MWVkODM0NGRjOTQ2NTU2ZDlhODViMmY0ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0vulNSM6XYGCJqhcRiez5XXGapK
tOdQRNujU8ukkI5YiZmDkDAUGPw8sR5oU+aWVuVf+3uAkWmbmIsdCV1gQ10jmRk8
S141hls9Te79pjX2x8VHnqRP7vg5tkSoSREoRNzXDG8XUa+X/rzbr06AiR+tC/Wo
nY7V6e8/fVorLCSg9wDdhvKyVgowhNOGONg8yP5TebiTtgc7zlyxyprilUmoRDH+
qrAcyyK45nwbIlRPeTia2+aEsKFXQvgEm1UsW6dGew86vfI5D8GK4OsdFOqxY8a+
O8mfSK5XpVkWGhd0iN/qf4y8EZjvVcZXd+rBmwc5p/+eZCHfJ4RcgsoNCwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB0dF8pg42Htg0TclGVW2ahbL08BMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvSFIwWHltRGpZZTJEUk55VVpWYlpxRnN2VHdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg0lhTAN
BgkqhkiG9w0BAQsFAAOCAQEAeM2g3mpzd94RXG8AmiE9MQBF2zIYlzVY7wjGcHoG
2EmPKyvmVX3pVBmEIwo4i3PsQBd6DgfdxTyrubLw2Bl3c0/kzF9JnMf+jaiRZ71I
TgF5AniiA+GLEyKKfSM8aepU9djqyTv989BpnHGrPMx5a9f/dCJGGt555KAMHg7M
7dLGrA1cq/nlCEtFsoRFItUJ1Km+WFG8H1hU06H8Zq1A00QJhh9vkmznHtwx0kJ/
Jk4w0rp3luTrsH8V9iUQw0POwWVl2daHjGw2WBG47Yca734rv44YM/ZnsQcEBOK/
H+hDnMI7rEbmlKITHUqqZnjjnbBwGYsJSbS+npcNk9gE4w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:55 2025 by rpki-client