Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/HUjFpkDkE9aRW0oytyocQloUy9o.roa
File: HUjFpkDkE9aRW0oytyocQloUy9o.roa (raw, json)
Hash identifier: mq8+b8jC5/4J8LuF6BxD7TMcx7W9gEcExeXo6od8rqM=
Subject key identifier: 1D:48:C5:A6:40:E4:13:D6:91:5B:4A:32:B7:2A:1C:42:5A:14:CB:DA
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 0194228DE648ECE25A23A9BE4563DD075F36
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/HUjFpkDkE9aRW0oytyocQloUy9o.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a03:3f40:d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e6:48:ec:e2:5a:23:a9:be:45:63:dd:07:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d48c5a640e413d6915b4a32b72a1c425a14cbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:4d:7d:2e:b6:57:32:c6:34:b9:06:a8:97:
fc:6b:cd:df:ce:09:3b:5e:e0:af:db:b4:d9:f5:a5:
49:43:0f:c6:0a:db:54:5a:54:d8:6c:28:6d:90:2a:
db:af:25:4e:75:ab:f2:8a:9f:d7:c9:4c:75:66:e2:
9b:af:19:4b:2b:9d:67:aa:5b:18:50:54:ea:b4:21:
10:25:c0:54:4d:55:fc:74:3c:aa:58:69:81:70:c3:
af:b7:52:7c:4c:6e:00:47:fb:f8:d7:99:32:21:4b:
a9:b0:dd:12:6c:27:98:9e:07:8a:38:e4:8d:d5:b6:
ab:da:c1:bd:74:74:85:30:93:64:84:ac:8d:e2:5f:
ab:96:3b:a3:a8:1a:d8:d3:ef:54:1d:4e:fa:c6:81:
00:0a:99:34:fd:7f:e9:58:c3:ee:04:1b:9e:56:90:
2a:72:40:4f:06:c4:b5:70:f9:12:fe:61:a1:52:22:
f7:98:f5:d0:77:5a:cf:97:d0:59:99:10:43:35:42:
27:d5:c8:ec:4f:e9:ce:61:9a:b4:03:ca:ae:14:92:
6e:27:1b:98:59:10:f1:70:49:b6:d2:a9:99:42:b9:
53:c0:5a:94:e2:38:27:5b:eb:cd:f9:e0:79:2b:38:
4d:db:a3:69:5e:24:9a:f8:76:42:fd:54:a9:af:90:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:C5:A6:40:E4:13:D6:91:5B:4A:32:B7:2A:1C:42:5A:14:CB:DA
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/HUjFpkDkE9aRW0oytyocQloUy9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:3f40:d::/48
Signature Algorithm: sha256WithRSAEncryption
42:93:83:7c:15:fe:b4:96:e1:15:13:10:1f:e5:85:28:46:61:
3b:56:c3:ba:6d:af:2a:56:78:46:ec:62:31:42:96:d4:6c:cb:
8d:87:35:84:67:5a:8f:67:dd:07:94:22:94:69:a1:2c:d0:e4:
40:83:b7:29:15:61:9b:08:ad:e7:cf:2b:66:48:6f:8a:d5:18:
8b:96:89:b9:b5:b3:27:2b:cd:e7:5a:f1:cc:a2:e2:b5:18:8a:
c5:7c:24:c8:12:2b:76:40:0a:54:c0:50:47:dd:34:c0:9b:11:
64:03:ba:b6:1b:05:95:63:77:5a:fa:b2:f1:95:f7:7d:c3:80:
df:32:e2:77:31:66:4b:08:d8:98:5a:51:8e:fb:ff:e9:41:32:
e0:30:b6:91:98:40:ad:68:20:45:64:fa:ec:da:e4:e5:c6:5c:
b2:12:4e:48:06:b3:87:b3:9d:49:0a:df:5f:d8:2a:a2:d9:85:
d5:07:28:8c:51:63:69:7b:16:92:24:f8:24:29:70:6f:20:a2:
97:78:2f:50:bc:07:a5:da:ba:e5:ee:11:83:5a:0f:1c:b5:46:
7e:86:37:b0:08:89:1d:58:7f:44:93:8e:4f:57:3e:e1:ef:f9:
36:ef:c8:9c:bc:81:05:aa:03:9a:38:9d:89:a2:dc:ef:ef:97:
dc:e1:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:13 2025 by rpki-client