Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/HP48JK7iXHGKfYMH4QxxwrogT8k.roa
File: HP48JK7iXHGKfYMH4QxxwrogT8k.roa (raw, json)
Hash identifier: y89ow+0zwNc2uBME9vdJusJnJ91XYviEy4pq7UNyV+4=
Subject key identifier: 1C:FE:3C:24:AE:E2:5C:71:8A:7D:83:07:E1:0C:71:C2:BA:20:4F:C9
Certificate issuer: /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial: 0B3C6729
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/HP48JK7iXHGKfYMH4QxxwrogT8k.roa
Signing time: Tue 17 May 2022 06:13:29 +0000
ROA not before: Tue 17 May 2022 06:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7480
IP address blocks: 2a09:be40:3440::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188507945 (0xb3c6729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Validity
Not Before: May 17 06:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cfe3c24aee25c718a7d8307e10c71c2ba204fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:17:34:21:f7:ef:3a:0f:6c:4c:78:6d:01:
46:8c:60:37:62:d3:63:e1:c2:27:75:fa:f2:0b:9a:
82:9f:12:2f:6a:a2:33:3e:1b:a1:ae:0f:01:67:82:
8e:bb:c4:1e:f5:f0:c8:71:2a:cc:2a:27:58:d5:ed:
0f:f8:c0:ec:60:0f:1b:02:d7:b5:74:2b:3a:b9:78:
b4:c0:7b:ea:70:ff:7c:5c:c1:06:47:75:49:bd:83:
c6:f8:bc:00:5e:87:07:94:81:0d:f8:e5:fb:4a:aa:
27:29:ae:bd:67:f2:e0:84:95:51:52:52:3e:97:68:
4b:f7:11:75:bc:71:0a:bf:0b:b6:31:0b:e0:0c:8c:
c7:6e:87:af:3c:77:c3:5e:24:54:3a:be:dd:8a:3a:
c7:4b:91:58:c3:42:16:ef:da:04:44:78:af:e3:6d:
1e:d3:33:51:07:56:2d:62:be:19:be:41:7d:4b:d5:
cd:c8:57:bb:da:86:b9:ff:fb:e4:82:3e:6e:d2:ee:
00:60:fa:be:d1:5b:f2:eb:1b:f1:6f:d2:a2:0a:77:
ed:eb:31:88:b7:a3:f7:69:a7:6b:14:22:90:25:f0:
1a:69:ad:4b:53:75:e0:c7:8b:6e:86:08:cd:d9:30:
6a:c4:64:f8:52:9c:c2:ba:94:be:e1:13:13:a1:1f:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FE:3C:24:AE:E2:5C:71:8A:7D:83:07:E1:0C:71:C2:BA:20:4F:C9
X509v3 Authority Key Identifier:
keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/HP48JK7iXHGKfYMH4QxxwrogT8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be40:3440::/44
Signature Algorithm: sha256WithRSAEncryption
85:ac:9f:cd:e0:70:ea:50:4d:71:42:d7:aa:6b:5c:49:6b:58:
03:e7:8c:20:c0:88:83:ed:65:79:6c:3c:6b:fb:19:72:c2:a4:
0b:94:3f:43:7c:28:6c:d6:2f:d3:95:ef:5a:de:9a:4b:c3:f4:
a2:c8:63:22:ab:ed:1c:ff:a9:20:a5:35:53:7e:34:c2:2b:c6:
4c:1a:7f:c6:06:a0:99:68:7f:c0:1b:9d:47:1b:6c:c5:44:5a:
a5:d0:4b:a9:df:dc:c7:ca:22:11:b5:6a:df:13:81:bf:1d:34:
12:2b:a1:00:c2:d9:68:aa:b5:f1:f4:40:ce:d8:17:cd:11:c3:
78:bc:33:ba:3d:be:da:f3:66:06:3f:e0:52:09:17:ee:5b:20:
91:50:d6:13:30:ee:75:9b:6a:d1:bb:15:a5:27:a6:78:80:fb:
d9:fa:b0:3b:eb:20:37:30:e1:fe:7a:57:ab:f0:93:eb:0d:d6:
64:5e:9e:fb:89:b5:45:a5:23:96:1d:1b:07:27:3c:b0:9f:4e:
c9:84:1a:7f:8f:b5:4c:f5:8b:95:c9:37:df:5c:91:b8:25:2d:
89:9c:ef:a9:9f:e0:49:0f:fe:66:52:b1:af:8c:b1:86:20:d0:
7d:bb:86:20:e7:d2:32:4d:12:bf:37:cd:34:44:c0:e0:83:e1:
98:fe:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:23 2025 by rpki-client