Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/hWa7zoDvakApxf9g-2Pqz-UceHQ.roa
File: hWa7zoDvakApxf9g-2Pqz-UceHQ.roa (raw, json)
Hash identifier: 1mr4tjCdaqiDQJsjky4PMY0/V4k34D5roHsYggpGIPk=
Subject key identifier: 85:66:BB:CE:80:EF:6A:40:29:C5:FF:60:FB:63:EA:CF:E5:1C:78:74
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 02FA5C58
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/hWa7zoDvakApxf9g-2Pqz-UceHQ.roa
Signing time: Sat 01 Jan 2022 16:03:38 +0000
ROA not before: Sat 01 Jan 2022 16:03:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211579
IP address blocks: 2a0e:46c4:2400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49962072 (0x2fa5c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 16:03:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8566bbce80ef6a4029c5ff60fb63eacfe51c7874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e2:e0:76:b1:0f:d0:96:3c:33:05:9a:2c:2b:
ee:a1:cd:7e:6f:66:ce:ba:1c:8d:6e:d2:9c:8a:27:
5d:91:c1:8d:46:26:ee:60:5a:20:ef:44:de:e7:76:
65:67:79:83:43:64:be:73:dc:3b:17:0e:d9:ae:26:
b3:ba:70:84:e7:57:9b:49:82:8a:1b:80:0c:ee:93:
4f:eb:7c:ba:a6:78:fb:71:31:a9:4c:13:50:2b:e1:
87:aa:20:ab:fd:2c:74:de:33:0c:fa:5f:ae:e3:d6:
7f:c0:91:5e:38:60:e0:fb:9d:5d:c7:91:94:08:e2:
f6:56:be:80:a6:9b:ad:f1:0f:35:8f:99:aa:21:cb:
93:60:fc:db:22:e4:4e:67:ea:44:08:bb:b4:9e:6f:
7c:d4:da:fa:85:4e:68:0b:98:db:bd:13:b1:bd:72:
8a:54:34:5e:77:33:82:cb:85:3c:7f:5a:d5:75:c7:
61:9e:43:ae:d8:65:67:9d:18:33:f5:7d:76:4b:81:
f7:ec:fd:8f:5d:01:c7:a1:22:ed:fc:8d:93:41:dd:
59:72:60:c2:b4:63:ad:b1:b7:1c:eb:ff:86:c7:91:
7d:6f:79:e1:14:57:fe:e5:f0:e4:ae:e6:87:21:ce:
cd:07:f9:a6:e0:26:d0:96:d0:35:94:eb:1b:13:61:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:BB:CE:80:EF:6A:40:29:C5:FF:60:FB:63:EA:CF:E5:1C:78:74
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/hWa7zoDvakApxf9g-2Pqz-UceHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2400::/40
Signature Algorithm: sha256WithRSAEncryption
17:8f:26:20:c8:3e:06:8d:6b:e8:3a:76:07:01:83:75:f0:e4:
19:9b:0f:f5:df:0b:c1:22:dd:c9:9a:dc:22:72:41:31:1a:a7:
26:43:2d:a3:47:f1:34:78:6f:43:6e:aa:24:31:48:ae:df:e6:
71:d5:b8:cd:58:04:7a:e8:e0:ac:4a:b8:ce:ed:b3:97:48:1d:
41:a6:b4:0d:22:91:3b:60:92:dc:ae:68:86:3a:12:1d:96:07:
a3:b5:ab:14:ca:fb:96:77:55:d4:23:44:81:03:03:1d:7b:8b:
ad:53:0d:7f:f7:cd:47:55:b5:19:42:a0:bf:37:4d:29:4d:e5:
da:fb:2a:13:81:d8:c7:c7:0e:85:d5:4f:29:29:e4:4e:1c:3a:
be:4d:31:04:bc:fc:77:1e:61:d6:e4:e8:1c:2f:54:12:e6:ed:
0e:50:89:0f:0a:97:f1:cc:2d:5d:36:20:df:2d:7e:c5:b6:57:
18:43:f4:01:e9:1b:c3:80:a4:a0:64:2e:30:cf:3e:e2:06:bd:
34:2f:22:39:88:e1:e6:8f:f6:98:9d:2d:c3:11:e5:e2:99:60:
84:d5:ef:34:8c:e3:e3:2b:04:eb:d8:6f:51:07:9c:09:dc:e9:
fe:2e:b6:7c:91:29:74:b3:0f:da:de:8c:8d:e4:b3:42:b3:45:
db:8e:e3:65
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEAvpcWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzBlNTQ1MGQxNDg2NzgwYWJhNTRmMDQ1ZWM0ODAyZjE5ZjBiNGY3MB4XDTIyMDEw
MTE2MDMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU2NmJiY2U4MGVm
NmE0MDI5YzVmZjYwZmI2M2VhY2ZlNTFjNzg3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOXi4HaxD9CWPDMFmiwr7qHNfm9mzrocjW7SnIonXZHBjUYm
7mBaIO9E3ud2ZWd5g0NkvnPcOxcO2a4ms7pwhOdXm0mCihuADO6TT+t8uqZ4+3Ex
qUwTUCvhh6ogq/0sdN4zDPpfruPWf8CRXjhg4PudXceRlAji9la+gKabrfEPNY+Z
qiHLk2D82yLkTmfqRAi7tJ5vfNTa+oVOaAuY270Tsb1yilQ0XnczgsuFPH9a1XXH
YZ5DrthlZ50YM/V9dkuB9+z9j10Bx6Ei7fyNk0HdWXJgwrRjrbG3HOv/hseRfW95
4RRX/uXw5K7mhyHOzQf5puAm0JbQNZTrGxNhAL0CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBSFZrvOgO9qQCnF/2D7Y+rP5Rx4dDAfBgNVHSMEGDAWgBQ3DlRQ0UhngKul
TwRexIAvGfC09zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L053NVVVTkZJWjRDcnBVOEVYc1NBTHhud3RQYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvZjBmNzBjLTA2ZTctNDFhYy1hMmI4LTg1OGRjZTU3ZmNkYi8x
L2hXYTd6b0R2YWtBcHhmOWctMlBxei1VY2VIUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
ZjBmNzBjLTA2ZTctNDFhYy1hMmI4LTg1OGRjZTU3ZmNkYi8xL053NVVVTkZJWjRD
cnBVOEVYc1NBTHhud3RQYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoORsQkMA0GCSqGSIb3DQEBCwUA
A4IBAQAXjyYgyD4GjWvoOnYHAYN18OQZmw/13wvBIt3JmtwickExGqcmQy2jR/E0
eG9DbqokMUiu3+Zx1bjNWAR66OCsSrjO7bOXSB1BprQNIpE7YJLcrmiGOhIdlgej
tasUyvuWd1XUI0SBAwMde4utUw1/981HVbUZQqC/N00pTeXa+yoTgdjHxw6F1U8p
KeROHDq+TTEEvPx3HmHW5OgcL1QS5u0OUIkPCpfxzC1dNiDfLX7FtlcYQ/QB6RvD
gKSgZC4wzz7iBr00LyI5iOHmj/aYnS3DEeXimWCE1e80jOPjKwTr2G9RB5wJ3On+
LrZ8kSl0sw/a3oyN5LNCs0XbjuNl
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:08 2025 by rpki-client