Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HUqpWSt-H7Th-fb99YeJSB_2nAM.roa
File: HUqpWSt-H7Th-fb99YeJSB_2nAM.roa (raw, json)
Hash identifier: haGmR4yZjatTTWtAWm8R0gV8cddBgmw6SP0k9upu84o=
Subject key identifier: 1D:4A:A9:59:2B:7E:1F:B4:E1:F9:F6:FD:F5:87:89:48:1F:F6:9C:03
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDEB3E2A1DAC046B2741D4B9ECE0D6
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HUqpWSt-H7Th-fb99YeJSB_2nAM.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211230
IP address blocks: 2a06:e881:79ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:eb:3e:2a:1d:ac:04:6b:27:41:d4:b9:ec:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d4aa9592b7e1fb4e1f9f6fdf58789481ff69c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:50:59:34:1b:ce:17:91:cf:21:28:c0:39:
1a:e1:38:fa:db:51:bf:d9:35:3a:64:63:a9:6d:42:
37:28:de:93:4a:af:42:3b:d1:7f:b8:77:9a:56:1d:
44:46:53:94:38:42:74:b1:cd:8d:a4:03:07:bd:cb:
04:ad:00:e4:84:1f:48:67:4b:78:ee:3e:e9:5d:bb:
f5:e8:ba:63:bf:61:e3:11:15:94:6d:e9:c1:93:fb:
0e:de:6d:31:09:cf:3b:60:4f:0a:22:8e:42:16:d4:
25:5e:17:e4:1d:3f:78:cb:58:c2:08:36:11:fd:5f:
30:4e:f2:6e:21:44:f7:b2:3d:a9:4b:9a:84:44:9b:
70:9c:85:66:47:0a:b9:92:37:09:57:07:68:9f:d3:
a4:49:d4:b6:90:96:d6:67:63:40:68:5d:a9:e3:66:
8a:17:26:34:e9:5e:a1:0e:05:41:2d:48:80:ed:fa:
e8:be:4f:07:f7:b9:97:87:5c:9d:13:30:5e:47:f9:
2f:3d:af:94:39:d8:61:7c:7a:03:eb:c6:8a:b2:72:
2d:00:69:13:d4:37:99:e6:23:ae:08:c6:52:78:d3:
74:ed:d9:2d:87:dc:8f:b3:5a:9c:a1:9f:fb:64:5e:
0a:17:77:1f:5b:c3:af:e1:af:12:7c:e8:51:a0:b6:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4A:A9:59:2B:7E:1F:B4:E1:F9:F6:FD:F5:87:89:48:1F:F6:9C:03
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HUqpWSt-H7Th-fb99YeJSB_2nAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:79ff::/48
Signature Algorithm: sha256WithRSAEncryption
98:37:6e:19:c4:60:9c:41:98:fd:4a:38:cd:96:14:f5:fd:02:
78:f3:a0:77:c0:1c:34:e3:58:46:fd:95:91:65:67:fd:fb:d4:
56:c4:d2:ed:9a:53:25:49:81:cb:c8:83:11:91:1a:d3:26:f6:
77:ce:1f:6e:ee:2a:c8:0f:a3:61:28:7b:76:2d:a4:49:d9:47:
a2:f9:4f:8d:1c:66:10:20:8e:a1:73:e8:e2:fe:39:2a:f0:b9:
fb:7b:57:6b:29:eb:ab:5e:52:49:9d:b8:d0:2b:1e:5d:d9:5b:
48:ca:dc:46:d9:bb:e1:d3:9d:58:75:be:cd:16:5b:d0:56:df:
97:a5:6e:37:1e:39:f6:ee:45:61:0e:cb:ba:0c:04:d9:59:01:
eb:0b:be:e9:0e:1b:d7:c2:b2:77:c8:e2:4f:c9:39:2d:e2:90:
eb:ca:4c:1f:c7:b0:65:3a:66:df:1b:2a:f8:9e:ee:a7:bd:3f:
ad:be:30:d9:98:db:e6:4c:ec:bb:2a:84:7b:5e:a6:35:b2:27:
27:6c:e0:56:91:13:30:38:7b:5e:6e:2f:f6:c3:aa:84:b7:05:
97:c0:00:c0:d0:26:2c:da:e4:96:44:69:7f:da:2a:ea:7e:7d:
e1:5b:b2:55:a6:3d:a7:01:d1:f3:46:54:ae:f1:97:42:16:1f:
6d:c2:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:02:51 2025 by rpki-client