Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/Hk7vqIem-3HwAGqlHYUP5b68DE0.roa
File: Hk7vqIem-3HwAGqlHYUP5b68DE0.roa (raw, json)
Hash identifier: OQPGPc3onsIqST+privXdP1w5fjwBEGsZHmmuzT+pJ0=
Subject key identifier: 1E:4E:EF:A8:87:A6:FB:71:F0:00:6A:A5:1D:85:0F:E5:BE:BC:0C:4D
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 0F218C98
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/Hk7vqIem-3HwAGqlHYUP5b68DE0.roa
Signing time: Sat 01 Jan 2022 12:03:15 +0000
ROA not before: Sat 01 Jan 2022 12:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200280
IP address blocks: 2a0a:4a40:2270::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253856920 (0xf218c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 12:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e4eefa887a6fb71f0006aa51d850fe5bebc0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:12:e2:c4:61:36:48:dd:09:46:50:98:15:
32:86:d0:b3:1a:20:72:11:ec:92:56:79:bd:4a:5a:
06:07:97:52:75:5b:56:75:5b:31:3f:e6:e4:d0:01:
76:d4:cd:ff:e6:0a:d8:dd:84:57:35:64:98:b5:dc:
ec:35:13:30:be:49:83:98:3c:59:3a:ce:a8:fa:76:
24:d3:b3:4e:ca:8d:e4:25:63:70:bf:3f:d3:a0:89:
5a:12:fa:8d:cd:53:48:53:a6:b9:17:3d:1b:33:fd:
a2:92:fa:d4:91:cf:12:f9:e7:de:e9:28:b3:d8:6e:
b4:9a:a7:c6:f3:a3:8a:91:4e:00:14:65:81:be:81:
4a:fc:3e:65:2c:90:1a:f9:3c:f6:3d:48:e0:3f:cb:
dd:4d:43:41:9f:c4:76:98:b0:96:0d:83:31:f8:2f:
cd:79:b8:9d:89:d0:7b:ec:78:e7:1d:a1:94:a2:90:
20:de:62:c9:27:b5:a5:eb:0b:c2:42:ec:07:b9:af:
d8:51:1e:bf:4b:f5:68:eb:67:7d:6e:bc:47:4a:eb:
2d:89:d6:06:73:18:da:ed:80:86:b6:56:c8:a9:9a:
44:ca:c4:d3:87:6b:1b:cc:c6:bb:6f:63:a2:35:1e:
64:70:9f:79:c0:8f:39:46:06:b0:95:5b:fc:11:1a:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:EF:A8:87:A6:FB:71:F0:00:6A:A5:1D:85:0F:E5:BE:BC:0C:4D
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/Hk7vqIem-3HwAGqlHYUP5b68DE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4a40:2270::/44
Signature Algorithm: sha256WithRSAEncryption
9d:01:c4:ba:6d:31:a8:28:0f:e2:79:a2:d1:4a:56:98:1b:6b:
e9:ca:8d:07:f5:69:49:30:8b:40:3f:06:e5:0a:da:31:4f:0c:
e0:d4:9d:53:52:09:c7:da:e5:cb:88:10:d1:b3:3c:1c:1b:a6:
ad:d2:23:e3:a8:d1:7e:51:eb:16:e8:77:9b:96:74:b2:e2:37:
0e:a0:21:ca:34:a8:38:79:54:f2:94:f0:a2:3e:ef:5a:5e:c0:
40:52:3e:56:97:62:c5:9b:8f:d0:cd:f9:66:7a:fa:a0:97:c1:
c6:31:4d:97:a3:65:ee:41:5b:df:35:59:77:7b:af:c1:9a:c8:
97:61:7c:6d:2f:d9:35:85:9d:64:39:a5:1a:9f:25:cc:f4:d1:
ef:44:55:bd:09:3d:02:21:b9:06:99:83:da:3e:aa:5b:a4:ec:
16:3d:36:c7:46:e0:9c:d1:f1:1d:45:6e:31:3f:2a:37:39:9b:
e6:3d:43:3d:ed:36:10:24:39:f0:62:38:85:e0:df:75:78:3b:
e3:ba:17:03:3a:5d:50:26:fb:99:85:6b:b6:fb:ae:ba:ee:ab:
f1:2a:a0:3f:a7:3f:34:3a:0f:83:28:a0:07:d0:58:9c:54:e1:
1e:f2:bf:46:cf:4f:c1:56:97:ed:fe:02:1f:b2:00:9c:20:30:
e4:0e:42:cd
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEDyGMmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDc3M2YzMmQzY2I0ZTEzZTQzZjEwYTNkYzQyMmYxZjMyNzFiZmJhMB4XDTIyMDEw
MTEyMDMxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWU0ZWVmYTg4N2E2
ZmI3MWYwMDA2YWE1MWQ4NTBmZTViZWJjMGM0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKP+EuLEYTZI3QlGUJgVMobQsxogchHsklZ5vUpaBgeXUnVb
VnVbMT/m5NABdtTN/+YK2N2EVzVkmLXc7DUTML5Jg5g8WTrOqPp2JNOzTsqN5CVj
cL8/06CJWhL6jc1TSFOmuRc9GzP9opL61JHPEvnn3ukos9hutJqnxvOjipFOABRl
gb6BSvw+ZSyQGvk89j1I4D/L3U1DQZ/Edpiwlg2DMfgvzXm4nYnQe+x45x2hlKKQ
IN5iySe1pesLwkLsB7mv2FEev0v1aOtnfW68R0rrLYnWBnMY2u2AhrZWyKmaRMrE
04drG8zGu29jojUeZHCfecCPOUYGsJVb/BEaIlsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQeTu+oh6b7cfAAaqUdhQ/lvrwMTTAfBgNVHSMEGDAWgBQQdz8y08tOE+Q/
EKPcQi8fMnG/ujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VIY19NdFBMVGhQa1B4Q2ozRUl2SHpKeHY3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvMDljYWZkLTY4YmMtNDFhMi04YmFiLTgwYjg0ZTRmMjBjOS8x
L0hrN3ZxSWVtLTNId0FHcWxIWVVQNWI2OERFMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
MDljYWZkLTY4YmMtNDFhMi04YmFiLTgwYjg0ZTRmMjBjOS8xL0VIY19NdFBMVGhQ
a1B4Q2ozRUl2SHpKeHY3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoKSkAicDANBgkqhkiG9w0BAQsF
AAOCAQEAnQHEum0xqCgP4nmi0UpWmBtr6cqNB/VpSTCLQD8G5QraMU8M4NSdU1IJ
x9rly4gQ0bM8HBumrdIj46jRflHrFuh3m5Z0suI3DqAhyjSoOHlU8pTwoj7vWl7A
QFI+VpdixZuP0M35Znr6oJfBxjFNl6Nl7kFb3zVZd3uvwZrIl2F8bS/ZNYWdZDml
Gp8lzPTR70RVvQk9AiG5BpmD2j6qW6TsFj02x0bgnNHxHUVuMT8qNzmb5j1DPe02
ECQ58GI4heDfdXg747oXAzpdUCb7mYVrtvuuuu6r8SqgP6c/NDoPgyigB9BYnFTh
HvK/Rs9PwVaX7f4CH7IAnCAw5A5CzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:26 2025 by rpki-client