Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/4HldC-BuP_OL1Gp9cmvX33qX9tY.roa
File: 4HldC-BuP_OL1Gp9cmvX33qX9tY.roa (raw, json)
Hash identifier: 37iNOu5iCq7ettgnyctc1sra9wnkXBFf1Y1Rbdwh7yc=
Subject key identifier: E0:79:5D:0B:E0:6E:3F:F3:8B:D4:6A:7D:72:6B:D7:DF:7A:97:F6:D6
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 03DFB996
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/4HldC-BuP_OL1Gp9cmvX33qX9tY.roa
Signing time: Sat 01 Jan 2022 00:57:09 +0000
ROA not before: Sat 01 Jan 2022 00:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49340
IP address blocks: 2a00:1c78:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64993686 (0x3dfb996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 1 00:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0795d0be06e3ff38bd46a7d726bd7df7a97f6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:ba:f8:fa:71:5c:15:ab:5e:89:bc:76:0e:
b6:24:6f:42:d9:93:be:d9:76:ca:23:9c:0e:6b:13:
09:a7:77:ff:d6:30:39:f9:58:da:ec:d9:e6:8f:fa:
ca:b5:fa:bd:ac:a4:44:99:81:10:4d:2a:03:a7:70:
c7:6c:15:0a:a6:a7:94:a1:15:ee:e9:94:2f:1d:d6:
03:84:2a:54:5e:4f:2b:b7:2a:e2:8e:a2:b3:88:4d:
a4:cb:05:cb:35:8b:c6:0a:25:de:19:07:fc:24:e7:
af:1c:81:2c:e9:ad:dc:07:b8:a7:53:6f:bd:ef:4e:
27:7c:e0:34:31:9a:10:8d:27:bd:6b:20:41:d7:cc:
f9:bb:48:1e:a9:73:3c:14:30:12:af:5b:bd:e9:2e:
19:6d:66:d9:86:31:d0:2e:04:4f:06:d1:a8:4a:7f:
97:19:cc:7b:42:5e:91:51:e1:83:5b:36:e1:db:1f:
5b:a4:62:cb:9f:b1:52:9d:e3:86:15:c1:43:5c:0f:
c3:de:a8:6e:89:20:d1:ca:65:5c:33:a4:fd:78:3a:
22:6c:e3:9d:12:7e:98:0d:8d:76:bf:c7:05:e1:01:
0c:64:b8:55:26:ed:98:9a:b7:db:b9:0d:ce:10:4a:
18:29:d4:56:fb:15:f8:47:80:f0:9d:27:ba:d4:83:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:79:5D:0B:E0:6E:3F:F3:8B:D4:6A:7D:72:6B:D7:DF:7A:97:F6:D6
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/4HldC-BuP_OL1Gp9cmvX33qX9tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1c78:1::/48
Signature Algorithm: sha256WithRSAEncryption
5a:17:bd:92:4f:0b:1e:77:b2:fb:72:90:b6:96:f8:b4:06:a5:
13:23:93:fe:ec:ab:33:c0:f0:fd:3c:fa:c2:1c:9a:ab:84:f3:
0f:fe:ca:7d:12:4b:f3:2b:08:91:d8:09:5e:5b:99:89:7b:d6:
bc:a3:a0:8f:33:4f:5f:5a:5e:94:66:4a:95:b2:be:29:3a:ba:
a7:47:03:95:5b:26:e3:bb:02:1c:3a:38:7e:09:e2:d2:58:2c:
6a:3a:03:31:ef:f4:e5:cb:e4:7d:84:a7:ba:6f:1e:cb:28:01:
f5:12:9a:32:64:f8:fc:1b:15:75:83:32:9f:cc:ac:20:01:52:
5a:25:96:28:18:6e:1b:b8:87:75:12:f1:92:72:3e:b3:df:aa:
2c:90:7c:d3:af:ef:5c:a1:c0:a5:52:32:f6:57:de:1f:01:5b:
a2:d5:eb:86:89:11:94:ac:63:b8:f0:c8:b7:90:c8:13:c9:9d:
60:cf:43:9c:d6:cf:18:8c:05:b6:53:b2:61:b3:bd:1f:1f:ac:
3b:5d:f6:2a:74:8a:98:b5:a6:ae:cd:e8:b8:46:01:0d:52:a7:
cb:3d:04:93:88:61:2d:eb:6d:4e:26:3b:2b:80:61:78:91:3d:
a6:09:19:d1:6a:24:a9:3f:bd:27:35:52:51:94:62:04:91:74:
b6:79:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:24:21 2025 by rpki-client