Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/HpPZDRcVDo6r1NI1oOyIvSG3oZw.roa
File: HpPZDRcVDo6r1NI1oOyIvSG3oZw.roa (raw, json)
Hash identifier: w8QJFS739qX5AyZbm5He/UQog5R7UuRs7Y7inpiSCo8=
Subject key identifier: 1E:93:D9:0D:17:15:0E:8E:AB:D4:D2:35:A0:EC:88:BD:21:B7:A1:9C
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 092A60E6
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/HpPZDRcVDo6r1NI1oOyIvSG3oZw.roa
Signing time: Sat 30 Apr 2022 07:19:04 +0000
ROA not before: Sat 30 Apr 2022 07:19:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210107
IP address blocks: 2a10:f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153772262 (0x92a60e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Apr 30 07:19:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e93d90d17150e8eabd4d235a0ec88bd21b7a19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:89:a9:d1:b6:99:95:5c:51:c2:65:70:3b:
d8:ce:c6:33:6d:8d:e0:f8:34:6f:66:c1:97:d4:49:
88:0f:ef:61:75:07:a1:c6:a1:16:20:33:8d:b5:8d:
58:c3:27:80:00:8b:53:d9:b0:17:7a:7a:20:27:84:
a6:d6:6b:a6:cb:8a:f5:03:d2:36:b8:e8:f6:08:c7:
97:fd:9a:d2:57:b4:59:f6:5f:b9:cb:71:a2:15:33:
b9:ea:ec:fb:6d:10:15:44:c9:e3:ef:d6:87:52:6f:
f2:37:60:6b:8d:6a:78:06:29:16:83:77:4e:8a:e0:
f4:35:07:95:ec:0b:8e:e4:a7:a6:5b:60:eb:f5:33:
10:d3:33:a9:06:12:98:99:8e:0a:cc:6a:fa:0b:3b:
c8:ed:ab:9e:a1:28:7f:1b:c7:ea:22:75:be:c7:cb:
a5:83:48:74:f1:d7:52:87:b1:76:46:3d:e9:46:f6:
88:47:3a:bd:86:67:71:f0:aa:65:0d:6e:df:16:20:
8b:70:30:40:7a:3b:03:cb:48:a5:fa:c8:70:fa:80:
a5:33:ec:13:6a:eb:87:31:0f:69:bd:0f:f6:ee:7f:
c6:05:29:ea:19:f0:75:eb:69:4a:31:18:a9:51:36:
17:67:e0:86:33:29:a9:6c:a9:3f:30:b3:a0:6c:43:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:93:D9:0D:17:15:0E:8E:AB:D4:D2:35:A0:EC:88:BD:21:B7:A1:9C
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/HpPZDRcVDo6r1NI1oOyIvSG3oZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:f40::/29
Signature Algorithm: sha256WithRSAEncryption
85:72:43:41:5b:61:94:62:d4:33:dc:8c:6c:b5:19:93:17:4a:
7a:bb:06:ed:91:c7:56:19:bf:58:bd:be:f4:7b:24:ca:64:66:
ca:4f:cf:94:78:9a:72:79:5b:7e:1a:37:5f:35:e3:31:87:bd:
61:db:3d:65:46:ea:cb:3b:1f:fd:2b:ce:f5:52:9f:56:c0:ae:
59:2f:6e:0d:84:cc:da:f2:ed:e4:c4:71:5a:e8:58:b8:02:a4:
f1:95:16:df:e5:e0:8c:98:ad:ec:05:a8:e8:0e:8a:0e:13:96:
6f:ae:47:1f:c8:4a:08:18:d5:9a:5f:e3:d0:81:4f:48:bb:46:
19:be:26:ae:a8:cf:7a:dd:a8:2a:45:21:43:bb:a3:de:e3:57:
70:f5:9d:2f:d8:2a:ef:26:8a:10:1d:8d:ab:d8:2f:fe:d5:05:
76:ac:5a:00:5c:47:40:79:2b:11:9e:df:15:1d:64:0e:f7:c7:
62:65:c6:ec:3c:a0:d5:9d:c8:90:a6:16:02:57:59:9e:67:6b:
01:15:f5:ce:49:9b:1e:0d:7e:7a:45:1c:c0:e5:30:18:75:14:
1f:33:a7:6d:00:d7:0a:d5:19:1e:ab:77:82:79:44:bc:a6:59:
7d:79:4c:b4:2f:b9:bf:81:fd:fa:e2:d7:01:d3:30:47:63:34:
e7:bf:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:34 2025 by rpki-client