Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/HVQcFGf5oSi5H0PASD7e2uKaCmc.roa
File: HVQcFGf5oSi5H0PASD7e2uKaCmc.roa (raw, json)
Hash identifier: vfiXQc+Uj7xWbXk2FzKwqL7N3faUh4C24NHVyLH4xko=
Subject key identifier: 1D:54:1C:14:67:F9:A1:28:B9:1F:43:C0:48:3E:DE:DA:E2:9A:0A:67
Certificate issuer: /CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Certificate serial: 072B452C
Authority key identifier: 8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/HVQcFGf5oSi5H0PASD7e2uKaCmc.roa
Signing time: Sat 01 Jan 2022 13:55:00 +0000
ROA not before: Sat 01 Jan 2022 13:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35594
IP address blocks: 2a0a:7d80:8::/48 maxlen: 48
2a0a:7d80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120276268 (0x72b452c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Validity
Not Before: Jan 1 13:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d541c1467f9a128b91f43c0483ededae29a0a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:88:c6:e9:1f:62:90:16:8e:73:8a:de:e8:
17:29:a9:79:4f:2f:26:fa:de:d5:03:f4:09:af:53:
63:c3:19:79:72:c6:3d:a3:6f:8e:54:ac:c1:e1:a1:
83:1e:cb:ad:e0:55:96:42:71:a3:50:e0:89:61:2c:
df:aa:0e:ec:99:45:73:7c:a6:be:4c:57:0a:40:be:
94:c1:c8:be:73:8f:d4:0c:31:54:d5:af:5c:06:57:
4c:67:53:f5:3c:cd:2d:d3:75:8f:a3:99:2d:31:35:
95:16:9b:fb:6c:86:47:34:f6:07:b5:4c:03:76:13:
0e:53:ab:84:b4:c7:89:af:bd:ac:bd:f4:f7:a5:00:
15:76:d3:73:b3:af:10:f0:fd:40:5a:14:44:f7:c6:
65:af:6d:72:7c:c6:ce:02:dc:cd:71:1e:49:10:20:
32:ec:ab:d4:af:5d:0b:15:f5:6b:44:7d:da:c5:41:
50:60:c8:07:07:0b:4f:f3:62:6f:e7:c9:c5:0e:79:
e5:4d:23:cf:75:34:da:05:6e:6e:b0:1b:9f:b1:93:
9b:9a:6d:5b:40:2b:a0:59:58:0a:cb:04:84:26:1c:
6a:f2:51:84:d2:86:c9:89:d5:74:60:d4:b4:90:a6:
79:3a:42:c7:f8:84:ea:fb:69:bd:89:a5:42:6d:a1:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:54:1C:14:67:F9:A1:28:B9:1F:43:C0:48:3E:DE:DA:E2:9A:0A:67
X509v3 Authority Key Identifier:
keyid:8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/HVQcFGf5oSi5H0PASD7e2uKaCmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7d80:3::/48
2a0a:7d80:8::/48
Signature Algorithm: sha256WithRSAEncryption
74:f0:c7:48:df:9d:63:5d:41:10:7c:49:39:e8:e1:69:e8:2d:
78:76:94:ea:08:08:bc:60:23:a0:db:b9:ab:96:56:7b:4b:41:
13:e4:ea:29:b1:a8:9f:b3:87:ef:cb:ba:f1:26:7d:69:d6:af:
ba:50:8b:74:02:71:f7:3c:48:b1:60:63:10:16:93:59:10:74:
69:16:7f:25:00:c1:58:da:3b:95:f0:8b:c8:fc:53:74:52:0a:
3b:7e:55:8a:c2:19:03:74:76:b8:e8:e3:ba:e9:c5:25:46:b8:
45:07:3f:a2:16:09:62:67:58:b4:86:30:ca:64:0a:54:b9:c5:
b4:64:7d:ee:48:12:3d:6e:87:7c:59:74:a7:e6:78:66:2a:0a:
b6:e1:16:15:ac:48:df:49:45:02:1d:fb:dc:67:b9:f5:12:89:
df:14:50:ee:46:7d:5d:8e:04:99:e5:6b:f1:f2:ce:4d:94:61:
55:9a:b5:d2:23:c3:93:b0:2f:a1:e9:53:52:57:83:ed:30:ae:
17:c5:8b:13:04:fa:27:47:40:81:5e:61:5b:69:18:df:31:39:
8c:d5:f7:61:38:93:b4:c4:b6:66:90:98:66:31:4c:4a:e8:d4:
47:3f:61:df:58:70:1d:07:97:11:d6:cd:d5:ae:1f:9b:07:e1:
78:ed:ae:63
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBytFLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmQwNmVmZGEyYTI3NjM4ZjM3NmNkNjkxOGRhMmJhY2IyMDFiYmVlMB4XDTIyMDEw
MTEzNTUwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQ1NDFjMTQ2N2Y5
YTEyOGI5MWY0M2MwNDgzZWRlZGFlMjlhMGE2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKSAiMbpH2KQFo5zit7oFympeU8vJvre1QP0Ca9TY8MZeXLG
PaNvjlSsweGhgx7LreBVlkJxo1DgiWEs36oO7JlFc3ymvkxXCkC+lMHIvnOP1Awx
VNWvXAZXTGdT9TzNLdN1j6OZLTE1lRab+2yGRzT2B7VMA3YTDlOrhLTHia+9rL30
96UAFXbTc7OvEPD9QFoURPfGZa9tcnzGzgLczXEeSRAgMuyr1K9dCxX1a0R92sVB
UGDIBwcLT/Nib+fJxQ555U0jz3U02gVubrAbn7GTm5ptW0AroFlYCssEhCYcavJR
hNKGyYnVdGDUtJCmeTpCx/iE6vtpvYmlQm2hG+cCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQdVBwUZ/mhKLkfQ8BIPt7a4poKZzAfBgNVHSMEGDAWgBSL0G79oqJ2OPN2
zWkY2iussgG77jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k5QnVfYUtpZGpqemRzMXBHTm9yckxJQnUtNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvOTdmOWQ1LTA4MmEtNDkyMC05MzI3LThlMzRjMTY1NWIwZC8x
L0hWUWNGR2Y1b1NpNUgwUEFTRDdlMnVLYUNtYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
OTdmOWQ1LTA4MmEtNDkyMC05MzI3LThlMzRjMTY1NWIwZC8xL2k5QnVfYUtpZGpq
emRzMXBHTm9yckxJQnUtNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoKfYAAAwMHACoKfYAACDANBgkq
hkiG9w0BAQsFAAOCAQEAdPDHSN+dY11BEHxJOejhaegteHaU6ggIvGAjoNu5q5ZW
e0tBE+TqKbGon7OH78u68SZ9adavulCLdAJx9zxIsWBjEBaTWRB0aRZ/JQDBWNo7
lfCLyPxTdFIKO35VisIZA3R2uOjjuunFJUa4RQc/ohYJYmdYtIYwymQKVLnFtGR9
7kgSPW6HfFl0p+Z4ZioKtuEWFaxI30lFAh373Ge59RKJ3xRQ7kZ9XY4EmeVr8fLO
TZRhVZq10iPDk7AvoelTUleD7TCuF8WLEwT6J0dAgV5hW2kY3zE5jNX3YTiTtMS2
ZpCYZjFMSujURz9h31hwHQeXEdbN1a4fmwfheO2uYw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:00 2025 by rpki-client