Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HxMPlvMBvH3c24bfq-uR1B2Xdwg.roa
File: HxMPlvMBvH3c24bfq-uR1B2Xdwg.roa (raw, json)
Hash identifier: XToC/JrnPYkvBvj4fXCtw8JxGxqCAWAeUk2cMLf0dms=
Subject key identifier: 1F:13:0F:96:F3:01:BC:7D:DC:DB:86:DF:AB:EB:91:D4:1D:97:77:08
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0193341AC5BB9FA714F7520FD4FC67EE68E0
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HxMPlvMBvH3c24bfq-uR1B2Xdwg.roa
Signing time: Sat 16 Nov 2024 08:33:09 +0000
ROA not before: Sat 16 Nov 2024 08:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214168
IP address blocks: 2a0d:7340::/29 maxlen: 29
2a0d:9440::/29 maxlen: 29
2a0f:9480::/29 maxlen: 29
2a10:5d40::/29 maxlen: 29
2a10:9580::/29 maxlen: 29
2a11:26c0::/29 maxlen: 29
2a11:2b40::/29 maxlen: 29
2a11:3d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:1a:c5:bb:9f:a7:14:f7:52:0f:d4:fc:67:ee:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Nov 16 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f130f96f301bc7ddcdb86dfabeb91d41d977708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:06:44:30:16:ce:09:9e:8a:46:c8:d8:02:
ef:2c:0f:80:d1:35:c3:82:24:fb:78:f5:f7:d9:50:
11:69:bb:71:88:23:9e:36:9b:5e:56:45:33:90:3e:
bb:5e:31:c9:41:8d:69:31:9b:c9:9b:b1:f4:5b:63:
81:12:f5:49:04:94:38:9f:a8:72:ce:11:8e:90:a9:
cc:9c:02:c0:4f:c6:44:de:44:df:81:1c:cc:c2:e5:
be:ea:5f:5f:0b:a8:c6:3c:2c:e1:b5:33:36:a8:51:
9a:56:bf:29:a8:64:65:ee:f7:33:0c:8b:c8:c4:31:
2a:84:60:40:43:6d:b0:7a:39:06:85:8a:1d:c3:7f:
68:ea:de:1d:a6:d1:4a:e8:59:d5:d9:8d:a7:eb:a2:
24:ed:9b:ba:5c:8e:fa:20:41:b2:05:f0:37:aa:61:
62:ba:49:97:89:5e:9e:a4:b6:0f:29:6b:64:28:95:
0b:4b:59:a9:35:bd:91:de:10:3e:a3:24:db:37:01:
1a:62:69:57:f7:2b:94:e7:dd:39:1e:e1:bc:80:e7:
ec:4d:d2:ab:2a:46:68:1a:13:60:a9:d5:71:c4:90:
d6:4c:01:a7:9e:e7:65:7c:4e:25:a3:79:1f:5c:f0:
63:b2:49:8d:0c:50:75:b1:53:99:ec:fa:17:27:9c:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:0F:96:F3:01:BC:7D:DC:DB:86:DF:AB:EB:91:D4:1D:97:77:08
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HxMPlvMBvH3c24bfq-uR1B2Xdwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7340::/29
2a0d:9440::/29
2a0f:9480::/29
2a10:5d40::/29
2a10:9580::/29
2a11:26c0::/29
2a11:2b40::/29
2a11:3d40::/29
Signature Algorithm: sha256WithRSAEncryption
76:d1:7c:93:b9:2d:dc:e3:c1:bc:e0:41:16:28:42:b0:7e:b5:
67:04:a0:71:a9:9d:8d:4b:12:7f:b4:3c:db:b5:99:dd:74:6b:
50:6f:f8:45:ee:43:c1:10:8d:18:e2:2a:9d:cf:b5:f6:07:57:
af:3b:70:dc:1a:1e:40:2a:3e:31:05:82:1d:b4:38:6c:23:56:
e1:ad:8c:e8:57:9e:ed:2d:a6:b3:0d:42:8f:19:0f:2a:53:2a:
37:fb:ab:45:b5:2c:93:f7:4d:a1:b6:1f:ad:9f:73:8a:5e:10:
39:a0:21:76:7c:81:56:2c:9f:cd:e0:a1:25:be:96:6c:c1:8f:
a8:ba:d0:e8:2c:43:b8:ef:c7:a9:ee:59:86:3d:8a:8e:91:bf:
93:2a:32:6a:e1:c1:5c:cd:4f:5a:53:7d:06:29:47:53:5f:97:
a1:2a:51:7e:54:30:c5:e2:ae:5e:53:7b:59:b9:15:02:9b:ac:
bc:8b:e4:52:dc:7a:3e:d2:52:f0:b0:01:83:ce:62:d7:02:a0:
0f:fe:13:09:95:54:01:61:e4:42:52:50:1e:52:b1:52:67:16:
f1:7d:eb:e3:50:8c:76:53:e5:ed:60:e7:d6:66:e7:81:5d:3a:
9a:61:05:ed:54:c4:d5:16:85:b9:a4:62:4f:d2:14:c7:94:61:
a6:83:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:19 2025 by rpki-client