Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RHI-i2uafV8N_eWLXJ8X2o0vN5k.roa
File: RHI-i2uafV8N_eWLXJ8X2o0vN5k.roa (raw, json)
Hash identifier: tlqyQbZW16iCnIjXBs6v2y3iG3+zs+XV22Y2M6JTrF8=
Subject key identifier: 44:72:3E:8B:6B:9A:7D:5F:0D:FD:E5:8B:5C:9F:17:DA:8D:2F:37:99
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195DCFDB8A5ED0557D86B7B286E9C8A1CBB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RHI-i2uafV8N_eWLXJ8X2o0vN5k.roa
Signing time: Fri 28 Mar 2025 13:42:50 +0000
ROA not before: Fri 28 Mar 2025 13:42:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62513
IP address blocks: 2a0e:c785:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:fd:b8:a5:ed:05:57:d8:6b:7b:28:6e:9c:8a:1c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 28 13:42:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44723e8b6b9a7d5f0dfde58b5c9f17da8d2f3799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:ec:ef:d4:46:cb:4e:7c:b0:3d:07:7e:99:
f1:d1:79:ad:00:68:59:cd:39:73:35:c9:1e:ca:94:
6a:7b:0d:ad:23:c5:0e:55:ac:54:ba:44:86:b8:bb:
9a:e3:6a:68:f5:81:c9:bb:56:a4:0d:c4:4f:57:0c:
1c:b8:ce:6f:93:5b:9c:bd:7a:b4:d3:05:4b:31:c8:
33:ad:e0:01:f8:a9:21:1e:71:ed:33:70:a5:c6:c0:
e3:9f:a7:87:31:06:b0:33:47:db:d9:d2:31:74:91:
2d:73:0c:f0:97:44:f5:34:52:2c:d6:e3:8c:2d:15:
dd:8c:cd:06:26:51:b3:e2:45:7e:60:c8:83:18:f9:
e4:b9:e0:07:9e:7b:f3:84:1c:6c:00:f2:57:27:03:
cd:ca:af:e4:46:fb:c7:30:a9:52:9d:3e:19:e2:c7:
81:7a:91:ad:5b:6c:dc:71:8e:c0:a3:97:ea:a0:40:
a0:e4:6c:d3:65:26:46:ee:24:58:1e:13:a2:7f:ae:
be:66:99:44:14:74:01:4d:b0:eb:72:f7:01:ee:54:
7d:e3:b8:0b:90:27:10:ce:33:b5:52:c9:e5:3c:2f:
b1:a5:b9:c1:1f:2a:87:44:d6:bb:75:43:64:4c:92:
7d:2f:ab:48:66:0e:fc:0d:fa:5a:03:b5:89:89:4b:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:3E:8B:6B:9A:7D:5F:0D:FD:E5:8B:5C:9F:17:DA:8D:2F:37:99
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RHI-i2uafV8N_eWLXJ8X2o0vN5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c785:2::/48
Signature Algorithm: sha256WithRSAEncryption
44:78:21:27:30:ac:fd:0d:29:ca:73:aa:d8:35:b2:eb:2c:ba:
96:fb:f2:d1:ce:6f:6a:91:35:68:a9:6e:9d:26:cd:ba:b8:f6:
d3:22:46:0d:79:19:30:d2:2a:ab:3b:1b:54:11:55:d6:d5:ee:
a4:f8:8d:ed:4c:6d:6d:67:ec:bf:83:57:c7:4d:7d:c1:34:17:
8c:b1:ea:fa:70:93:a6:93:a7:41:fe:ab:35:54:eb:2a:b9:cf:
b3:f9:bc:cb:71:3a:27:c9:7a:7c:a9:ae:22:de:46:4f:6a:29:
f5:f6:dd:5e:e6:de:69:1d:16:36:bf:66:d9:f6:78:b9:b2:ab:
c2:0f:e5:52:47:c0:bf:51:6e:ed:b8:c0:18:3b:64:f1:5a:5c:
fa:78:b8:9e:a8:ef:73:f5:3c:85:fa:b0:8e:fa:fb:42:5d:4a:
29:8c:ed:02:6e:02:d3:46:73:af:45:49:38:f1:f3:4d:5b:a8:
64:9c:ac:6a:7f:20:a1:80:c0:ba:62:f5:1a:91:1d:da:df:c4:
a9:e4:dc:94:4e:d5:60:bd:bf:f8:06:4d:a3:8e:91:f7:89:36:
ee:d5:ab:6e:81:c7:bf:7d:79:8a:1b:f7:96:05:f3:3b:2b:9a:
cc:95:e5:ea:d5:eb:63:0c:90:d9:9a:e2:c7:c0:17:35:1f:58:
2b:8b:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:59:29 2025 by rpki-client