Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HfuaXVo3KbRCv-VlYyoOWCR8emE.roa
File: HfuaXVo3KbRCv-VlYyoOWCR8emE.roa (raw, json)
Hash identifier: eP/lpNhL3bT2EGlF2+tCnq3AP3IIVueA0/4SP5b/Sr4=
Subject key identifier: 1D:FB:9A:5D:5A:37:29:B4:42:BF:E5:65:63:2A:0E:58:24:7C:7A:61
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE210B69031FF88F3B935001443CC
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HfuaXVo3KbRCv-VlYyoOWCR8emE.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210370
IP address blocks: 2a0e:aa07:e02c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e2:10:b6:90:31:ff:88:f3:b9:35:00:14:43:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dfb9a5d5a3729b442bfe565632a0e58247c7a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:ad:76:01:6f:bb:92:66:61:1c:b2:74:2c:
78:57:ec:90:2c:e0:2a:bd:ad:a4:b8:f7:60:05:1c:
bc:48:48:08:e7:28:10:10:a7:c9:b0:d2:c1:b8:39:
88:42:81:bd:a0:dd:79:40:d0:09:39:08:5d:6d:9c:
30:d3:44:4c:95:a3:16:64:9a:21:d1:79:6f:d0:9f:
5e:d6:05:65:0c:e9:a4:ce:01:60:6d:af:05:1c:93:
66:c5:99:d9:9a:c8:c2:e5:a9:10:eb:2c:5b:3e:44:
04:24:41:8e:fb:f4:d6:2c:4a:97:e6:97:fc:2d:18:
5f:0d:3d:2d:68:29:a9:20:29:e8:36:38:dc:9d:20:
5c:22:f1:bc:e9:9c:46:d3:97:46:af:5d:89:5a:59:
c5:cd:a5:0d:66:ee:7d:63:0b:28:99:c3:83:be:9a:
46:34:39:39:05:ba:8e:84:97:f7:58:aa:2b:1f:3f:
dd:1a:43:c9:98:a9:fe:8d:fe:0d:55:42:e5:5e:b5:
72:a0:e5:75:b0:dc:81:03:aa:ef:d6:93:e9:39:10:
a5:4a:f3:6d:80:73:7b:ae:b3:11:0c:c5:57:ac:93:
37:3a:84:5d:8b:e3:23:a5:7a:47:ad:9c:90:5d:62:
09:9e:bd:04:3d:2d:af:ad:f4:2f:20:f7:8d:00:97:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FB:9A:5D:5A:37:29:B4:42:BF:E5:65:63:2A:0E:58:24:7C:7A:61
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HfuaXVo3KbRCv-VlYyoOWCR8emE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e02c::/48
Signature Algorithm: sha256WithRSAEncryption
89:d3:23:65:fd:9a:09:52:62:09:ac:f6:26:8a:c5:b8:04:5d:
e9:0c:a6:e1:12:d1:31:ff:17:37:0d:ca:e5:e1:ab:ea:65:d6:
28:5f:0f:59:c1:6b:98:48:98:7a:30:3d:1e:10:87:65:67:dc:
6b:7b:ec:89:6c:4f:91:e9:8c:dd:b9:af:23:3e:14:15:33:29:
83:b1:f2:ed:50:6c:c3:c8:51:3c:26:98:5b:da:57:25:7a:5e:
0c:97:8b:45:c2:b5:d3:b5:49:14:1b:27:00:7b:4c:00:61:59:
2f:d5:6b:a2:45:56:17:e0:7f:cc:92:b4:e2:d6:3d:26:0e:68:
b8:da:52:90:c8:dc:68:53:ef:53:98:48:a3:6c:10:59:19:c1:
a5:3e:8a:d3:72:03:c1:c5:e1:d1:91:dc:6b:8e:d9:a2:09:31:
25:4d:d6:c7:0d:df:56:6b:df:8c:c3:01:73:7e:1f:b6:7b:a5:
aa:81:d9:c0:26:c4:d0:b4:b5:86:93:57:fd:49:9f:5a:80:0c:
98:28:3c:08:46:d6:6b:31:ba:d7:6e:07:39:1f:6f:18:f0:21:
78:1f:b5:bc:c5:11:4c:f1:84:a8:8c:39:fb:38:97:5f:53:70:
2f:4d:f3:d8:4b:2e:3d:03:be:0f:b8:95:74:24:a9:ba:a8:f4:
56:d1:ee:08
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljuIQtpAx/4jzuTUAFEPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGZiOWE1ZDVhMzcyOWI0NDJiZmU1NjU2MzJhMGU1ODI0N2M3YTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP+tdgFvu5JmYRyydCx4V+yQLOAq
va2kuPdgBRy8SEgI5ygQEKfJsNLBuDmIQoG9oN15QNAJOQhdbZww00RMlaMWZJoh
0Xlv0J9e1gVlDOmkzgFgba8FHJNmxZnZmsjC5akQ6yxbPkQEJEGO+/TWLEqX5pf8
LRhfDT0taCmpICnoNjjcnSBcIvG86ZxG05dGr12JWlnFzaUNZu59YwsomcODvppG
NDk5BbqOhJf3WKorHz/dGkPJmKn+jf4NVULlXrVyoOV1sNyBA6rv1pPpORClSvNt
gHN7rrMRDMVXrJM3OoRdi+MjpXpHrZyQXWIJnr0EPS2vrfQvIPeNAJegXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB37ml1aNym0Qr/lZWMqDlgkfHphMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvSGZ1YVhWbzNLYlJDdi1WbFl5b09XQ1I4ZW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+As
MA0GCSqGSIb3DQEBCwUAA4IBAQCJ0yNl/ZoJUmIJrPYmisW4BF3pDKbhEtEx/xc3
Dcrl4avqZdYoXw9ZwWuYSJh6MD0eEIdlZ9xre+yJbE+R6Yzdua8jPhQVMymDsfLt
UGzDyFE8Jphb2lclel4Ml4tFwrXTtUkUGycAe0wAYVkv1WuiRVYX4H/MkrTi1j0m
Dmi42lKQyNxoU+9TmEijbBBZGcGlPorTcgPBxeHRkdxrjtmiCTElTdbHDd9Wa9+M
wwFzfh+2e6WqgdnAJsTQtLWGk1f9SZ9agAyYKDwIRtZrMbrXbgc5H28Y8CF4H7W8
xRFM8YSojDn7OJdfU3AvTfPYSy49A74PuJV0JKm6qPRW0e4I
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:01 2025 by rpki-client