Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/htx-2B6FgVEMCp6Lb1lo3foxl9Q.roa
File: htx-2B6FgVEMCp6Lb1lo3foxl9Q.roa (raw, json)
Hash identifier: knT4LMVWJpWudct2JKDuiqo8ZCIy8Qy+G8pCMBMlt2M=
Subject key identifier: 86:DC:7E:D8:1E:85:81:51:0C:0A:9E:8B:6F:59:68:DD:FA:31:97:D4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01946AB8D897AB7388183C6225A523B63CB7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/htx-2B6FgVEMCp6Lb1lo3foxl9Q.roa
Signing time: Wed 15 Jan 2025 16:08:06 +0000
ROA not before: Wed 15 Jan 2025 16:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213576
IP address blocks: 2a0f:b244:120::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:b8:d8:97:ab:73:88:18:3c:62:25:a5:23:b6:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 15 16:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86dc7ed81e8581510c0a9e8b6f5968ddfa3197d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:53:f4:d2:c3:b1:52:21:fe:fb:f3:47:b0:
20:f6:e5:83:05:b3:b9:30:71:c6:8b:1b:c1:b4:76:
67:91:67:9f:c6:80:e6:81:9d:fc:c0:98:68:91:60:
3f:a8:a0:d3:df:d5:ae:60:3f:f4:d0:f5:72:9e:f2:
5e:4f:9d:cc:91:ce:94:fc:70:ad:87:5b:ca:5d:1c:
77:73:3b:5b:8f:58:71:2a:ff:f1:57:aa:0c:be:1b:
5c:67:70:eb:42:8d:f4:b4:b5:ed:84:33:45:0e:2b:
38:ac:36:9e:5c:4f:33:ff:49:4f:7e:1b:ed:a1:76:
cc:85:54:96:27:74:67:85:96:c4:37:5b:f8:0e:52:
e8:0f:21:ce:fa:b1:32:07:18:cb:d9:66:4c:d4:18:
6e:08:bb:a1:33:13:18:10:e7:77:e9:2e:7f:0f:29:
a9:91:cd:02:61:30:32:aa:6d:1a:ff:f0:d5:70:50:
18:c6:f5:57:0b:5f:d0:34:d9:8e:ed:95:81:1f:4c:
e1:9e:a4:b5:58:bf:34:01:9f:7c:9b:f4:32:c8:39:
5d:dd:12:08:30:ae:73:e2:5b:53:ce:69:11:f1:20:
f2:f5:1c:dc:73:8f:b7:91:e1:19:41:a4:dc:4c:7e:
11:61:02:f1:2e:c9:71:4c:d4:bd:ff:53:3c:26:08:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DC:7E:D8:1E:85:81:51:0C:0A:9E:8B:6F:59:68:DD:FA:31:97:D4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/htx-2B6FgVEMCp6Lb1lo3foxl9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:120::/44
Signature Algorithm: sha256WithRSAEncryption
85:66:b5:18:df:5d:9a:16:86:fd:a6:49:fa:b5:19:bb:2b:74:
02:55:98:20:6d:ed:c0:22:38:6c:52:06:5b:7e:0d:3d:d1:fb:
3c:87:dd:bf:48:9b:01:cf:55:cd:ca:7e:c8:68:36:9f:53:b2:
54:b9:8a:d1:ef:1a:d3:bc:3b:4f:10:0a:75:44:81:c6:eb:68:
92:64:fe:59:a2:60:4c:ea:6a:d0:47:1b:52:25:48:c5:18:80:
e4:f4:4f:91:d5:6b:d4:9a:0f:b5:a3:f1:4c:bc:b8:0e:17:44:
e5:6c:15:4e:d6:b1:65:f5:a5:41:da:4d:dc:ad:c0:93:fa:17:
b8:0b:ad:9a:db:5f:5f:df:e6:6d:02:97:dd:03:7a:19:cd:89:
da:84:18:3b:49:32:a5:dc:6e:4c:c1:0d:d4:70:ab:ec:e1:f3:
05:18:b5:c2:f3:ee:f7:a5:8c:48:db:15:b9:6b:10:a1:b1:da:
c9:e5:5f:10:5f:3c:5b:6d:c4:b4:fb:e5:e0:6b:6a:81:8d:53:
b8:87:34:30:12:05:da:78:e8:08:b5:f2:48:d6:46:15:53:cb:
58:39:2e:36:bf:90:5a:6f:8b:22:d0:69:f6:2e:be:8f:09:41:
f5:db:47:8b:8a:b7:03:d3:6e:56:64:8c:f5:55:5d:7d:ae:cb:
c5:dc:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:21:43 2025 by rpki-client