Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/HlFyF1djEZf_k1EHhEWHQqXVIJU.roa
File: HlFyF1djEZf_k1EHhEWHQqXVIJU.roa (raw, json)
Hash identifier: oGETrzJP5rBL/wFTTuS9i5IgA2F645pTZwcsAZEHRcE=
Subject key identifier: 1E:51:72:17:57:63:11:97:FF:93:51:07:84:45:87:42:A5:D5:20:95
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 01851A1228296F2155605AD629F9FF11DC56
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/HlFyF1djEZf_k1EHhEWHQqXVIJU.roa
Signing time: Fri 16 Dec 2022 08:34:35 +0000
ROA not before: Fri 16 Dec 2022 08:34:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2001:67c:2ccc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:12:28:29:6f:21:55:60:5a:d6:29:f9:ff:11:dc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Dec 16 08:34:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e51721757631197ff93510784458742a5d52095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:00:28:c9:2e:47:8f:eb:8c:d8:b1:37:0f:c2:
73:ca:fc:43:c3:6a:20:43:bb:bb:f5:5b:16:c3:b2:
43:28:62:a2:61:78:6a:ff:75:93:07:4e:12:e5:2d:
d7:d3:aa:7c:cb:c1:60:78:ff:95:7e:ac:6c:ec:05:
da:1a:fd:47:3e:08:d7:b4:01:39:51:a5:2a:43:08:
88:fa:db:e0:71:0e:f5:54:77:05:9d:59:a2:b3:5a:
0e:8f:3e:6c:72:5c:26:05:eb:18:5b:3d:3b:87:37:
1e:7c:b7:5f:ff:0a:7e:51:24:4d:98:74:c4:72:75:
ce:b3:02:03:49:b8:91:44:32:93:af:c2:5f:40:0a:
90:b8:58:3d:eb:5e:0a:69:0a:e4:b6:30:d8:4b:6a:
82:1b:4b:90:4f:ef:e7:74:15:b5:46:92:d2:fc:95:
88:21:0d:95:5a:f9:65:e5:f5:07:97:0a:37:52:a2:
c7:bb:c2:08:3f:5a:c7:a2:11:60:f3:42:4a:83:13:
56:53:e3:b6:7e:5d:b0:f8:c5:c5:b5:40:24:2f:15:
0a:eb:a6:fa:78:e6:d9:91:d2:b7:1b:6f:89:5a:06:
d4:1a:81:e1:3d:ad:33:6e:08:45:cf:ef:e2:c8:24:
7b:e4:e4:fe:36:8d:7f:f4:ec:01:12:9f:a3:06:9e:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:72:17:57:63:11:97:FF:93:51:07:84:45:87:42:A5:D5:20:95
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/HlFyF1djEZf_k1EHhEWHQqXVIJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ccc::/48
Signature Algorithm: sha256WithRSAEncryption
91:b0:fe:14:da:8b:96:cf:a1:82:77:ba:db:f1:69:40:13:28:
6f:9c:a9:f1:32:d0:ec:b3:93:b1:01:c6:40:a2:ee:58:ef:ca:
1d:5d:a5:b5:dc:a4:3e:5a:11:3f:6f:44:b3:2d:3f:da:0a:15:
b8:72:27:e6:33:92:bd:dc:50:19:f8:43:7d:95:83:ef:78:7c:
e1:e6:46:7b:49:f4:2c:a5:76:7c:41:be:31:48:f4:b1:b5:df:
72:b4:d5:b7:2a:35:ac:32:da:80:a0:23:0b:fc:dd:12:ca:61:
6f:a7:1d:60:38:28:c0:b9:53:c4:a8:61:91:ae:0e:14:1a:e4:
ef:4b:ca:fe:1a:d3:75:46:00:04:6d:14:56:75:19:5a:01:a7:
8d:c0:63:a1:6a:1a:6e:9a:fb:c6:7c:df:f0:63:81:65:c6:bf:
40:42:cb:d8:01:55:fd:84:3e:ba:33:8c:77:1e:db:71:1b:3b:
14:9d:d9:86:e5:75:4c:c5:f4:6b:a6:0a:10:ee:26:6c:70:f8:
89:41:57:10:9b:6c:da:13:12:95:c9:e2:7a:77:b7:d2:d7:8a:
cd:3b:85:d6:32:9a:1f:80:a1:ec:f4:4f:0e:8b:bf:cd:58:ef:
62:70:18:c8:32:73:b7:68:20:b0:60:ec:dc:d4:d2:74:80:eb:
e1:9f:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:43 2025 by rpki-client