Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/H0T0W0xTBnh83HIo130u3lMx0z8.roa
File: H0T0W0xTBnh83HIo130u3lMx0z8.roa (raw, json)
Hash identifier: EnvalVHH06GgGOutMJeFEacXQsa/Sw9Z2kcRlIH1HNM=
Subject key identifier: 1F:44:F4:5B:4C:53:06:78:7C:DC:72:28:D7:7D:2E:DE:53:31:D3:3F
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 0194228DE1C97B9AC79DFF67EA51DAB72D2B
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/H0T0W0xTBnh83HIo130u3lMx0z8.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 2a00:1ca8:45::/48 maxlen: 48
2a00:1ca8:9c::/48 maxlen: 48
2a00:1ca8:d3::/48 maxlen: 48
2a00:1ca8:d4::/48 maxlen: 48
2a03:3f40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:c9:7b:9a:c7:9d:ff:67:ea:51:da:b7:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f44f45b4c5306787cdc7228d77d2ede5331d33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:2f:c5:69:f6:a6:c0:5d:38:38:5b:a0:d0:
6d:cd:f6:98:94:5f:c3:7a:c6:2f:d3:44:b2:83:8a:
08:6f:18:0e:82:cd:b7:8e:37:a7:88:f1:e7:1a:8e:
aa:b2:02:d9:dc:3d:ce:aa:dd:73:7f:96:f0:83:58:
ed:40:c0:3b:69:15:b8:63:de:b8:30:89:58:c4:91:
6d:a6:92:61:75:63:ce:d9:d9:08:c2:cf:06:f1:d2:
03:1d:4c:80:42:3f:41:39:e7:5d:35:08:57:62:dc:
d4:15:7c:1b:8c:0a:0e:66:d9:28:f8:d2:ed:fa:be:
4c:a5:d9:03:6f:41:46:e4:24:9c:99:8a:d4:97:70:
09:34:3d:d5:c6:f8:48:38:41:cb:fd:99:14:f8:e1:
f4:d3:88:b9:21:02:c2:53:f8:32:ae:36:3c:1c:e1:
40:a4:e3:1b:10:02:cd:aa:60:85:c6:1a:07:4e:fc:
99:2e:0f:1f:54:41:71:bb:f3:bb:58:e3:7c:c3:11:
64:6c:4a:1a:71:d1:b8:50:e8:ad:d3:01:66:44:1f:
3e:61:ad:b8:67:29:e9:57:be:c0:45:c0:b5:3b:9d:
8a:dc:41:ad:59:47:4c:cd:5f:cf:82:d9:6e:4b:b5:
78:c1:27:19:d2:db:32:07:2b:57:64:f0:11:67:a1:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:F4:5B:4C:53:06:78:7C:DC:72:28:D7:7D:2E:DE:53:31:D3:3F
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/H0T0W0xTBnh83HIo130u3lMx0z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1ca8:45::/48
2a00:1ca8:9c::/48
2a00:1ca8:d3::-2a00:1ca8:d4:ffff:ffff:ffff:ffff:ffff
2a03:3f40:2::/48
Signature Algorithm: sha256WithRSAEncryption
0e:9b:1f:13:08:4d:01:a4:32:c8:f8:60:cc:4d:49:10:6d:67:
fb:b6:5a:4d:7b:18:cc:e8:a2:c1:ee:90:26:1f:7c:07:44:54:
4c:5d:3f:84:bc:9f:b2:4d:15:06:47:bd:48:17:24:e5:34:22:
f2:55:4f:6b:82:fd:0c:8b:f3:e7:c8:7c:90:37:fd:c6:87:50:
21:da:26:10:95:95:c6:6b:35:61:52:db:00:13:6c:dc:37:95:
18:b5:4c:e6:75:e1:97:a7:89:6a:ac:78:41:d4:0c:08:eb:39:
5c:f1:db:c5:f1:39:ee:3a:b8:c9:0c:c7:f2:95:b4:7f:df:9d:
53:50:f6:50:36:17:09:00:cf:d9:b6:e0:b4:c1:33:44:7a:34:
81:c4:54:fc:76:5c:1e:ee:14:3b:5c:b5:fe:2e:59:05:c7:f1:
f9:15:5a:67:ae:a8:f1:96:9d:64:68:4e:43:44:3a:e9:4c:0a:
cf:1e:fb:f5:b4:5d:52:51:ea:29:35:ac:5d:e5:29:18:8f:fe:
5f:e6:b4:f8:7e:55:d9:2d:78:df:cf:ef:7a:2c:6a:7c:83:06:
86:c0:d1:65:24:10:da:e2:8f:01:0e:f5:23:41:c9:8a:ef:e5:
5c:66:fd:c5:73:d0:40:89:b9:72:97:f4:a0:f2:0e:c5:46:2c:
0f:1e:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:03 2025 by rpki-client