Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/HHW8_KabBwkh6LVEy__S-IfCKeo.roa
File: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (raw, json)
Hash identifier: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=
Subject key identifier: 1C:75:BC:FC:A6:9B:07:09:21:E8:B5:44:CB:FF:D2:F8:87:C2:29:EA
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 01942444B4B5948C307C0E0DEFE3C828EE78
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/HHW8_KabBwkh6LVEy__S-IfCKeo.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199429
IP address blocks: 2001:67c:11d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b4:b5:94:8c:30:7c:0e:0d:ef:e3:c8:28:ee:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c75bcfca69b070921e8b544cbffd2f887c229ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:8f:c1:f3:15:f2:36:51:2e:5c:07:04:0a:
af:f1:46:8e:8f:41:08:a3:c9:45:6a:f5:e1:00:0e:
04:bc:4f:15:85:22:a4:d1:c9:69:0b:a9:47:b4:7c:
36:f5:9f:e8:6d:c0:22:27:9e:19:3c:8d:69:16:84:
05:3a:b6:39:39:c9:64:80:ec:66:9d:9c:29:4f:51:
23:82:50:32:85:be:b7:b5:3a:1c:70:b6:da:60:f9:
95:ce:23:9b:5b:23:26:aa:5a:0b:d2:d7:7b:85:b8:
27:dd:cc:87:37:86:8b:2f:c5:d0:23:1b:e9:b4:2e:
99:45:e4:61:47:54:6d:58:81:2d:44:56:6f:cd:81:
e6:24:5b:ed:14:a2:b9:ae:a4:06:cf:0f:36:da:7f:
0e:c8:bf:3f:40:bf:f6:3c:a1:3d:99:43:ba:04:fc:
3a:b5:30:01:f7:c8:9a:26:72:74:16:d3:3c:e4:ac:
78:c8:85:6f:41:a6:4d:37:7a:e7:ca:99:92:22:f3:
49:6d:68:1f:97:c6:b4:ec:44:71:84:8e:64:12:48:
ad:54:df:40:e2:f8:5e:51:30:88:e4:e4:e5:8f:77:
e6:75:3b:68:24:a5:0a:fc:91:00:bd:0e:a4:bc:0d:
e4:c2:06:59:78:db:d5:00:bd:47:38:31:9a:05:97:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:75:BC:FC:A6:9B:07:09:21:E8:B5:44:CB:FF:D2:F8:87:C2:29:EA
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/HHW8_KabBwkh6LVEy__S-IfCKeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:11d0::/48
Signature Algorithm: sha256WithRSAEncryption
64:ce:9b:7d:2c:93:67:a2:e7:8d:93:9b:9c:87:b4:ef:1b:94:
d4:75:3b:ea:27:ec:b7:9f:2a:e8:88:9b:e3:11:5b:e6:74:a5:
27:0d:90:ad:01:70:29:e5:b7:02:3b:ad:83:8e:8a:8d:f5:f9:
bc:dc:8c:c8:fa:e9:5c:49:67:75:87:15:e5:97:f0:ba:6a:bb:
0d:fc:b7:3f:90:b3:dc:4e:f2:7d:1e:b0:6c:0f:c8:37:f7:fd:
c3:da:a8:9b:ad:4b:37:65:92:4d:f6:11:43:d4:73:2a:cd:93:
d7:36:94:66:d4:37:e2:9d:c1:fd:a6:dc:66:28:69:37:24:f5:
55:0a:92:b7:a3:c2:75:c3:dd:3f:3c:57:8e:b4:ea:b9:83:18:
8e:82:c3:3a:f5:47:b5:52:f3:56:9f:10:95:11:7c:ce:ba:78:
95:b6:db:87:2a:d5:3c:27:35:38:aa:23:7e:d0:32:a6:6f:ca:
d6:89:40:79:a2:bd:ab:2c:07:31:0a:cc:b6:f3:9c:d6:7c:fc:
f2:c8:4d:8f:72:39:8f:2e:a6:1d:b4:92:dc:e8:4d:54:fe:31:
dd:7a:54:ab:36:d9:d3:e4:09:0e:34:99:59:11:f3:8d:ea:4c:
55:07:e0:7c:e1:2b:bd:99:49:cb:b0:7f:7a:da:41:c8:8d:12:
0c:94:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:01:38 2025 by rpki-client