Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/HuUJ4an1lzuk0Zl-2Dtmyy8Fuxc.roa
File: HuUJ4an1lzuk0Zl-2Dtmyy8Fuxc.roa (raw, json)
Hash identifier: 8/2ZUB6pcQ1PFOKgfBSHKb6IF/cDmqiYjaH3FZtpLIs=
Subject key identifier: 1E:E5:09:E1:A9:F5:97:3B:A4:D1:99:7E:D8:3B:66:CB:2F:05:BB:17
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01946403672239B31B1C055DD5C7647EE982
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/HuUJ4an1lzuk0Zl-2Dtmyy8Fuxc.roa
Signing time: Tue 14 Jan 2025 08:52:12 +0000
ROA not before: Tue 14 Jan 2025 08:52:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:6284::/32 maxlen: 32
2a09:e5c0::/32 maxlen: 32
2a09:e5c1::/32 maxlen: 32
2a09:e5c2::/32 maxlen: 32
2a09:e5c3::/32 maxlen: 32
2a09:e5c4::/32 maxlen: 32
2a09:e5c5::/32 maxlen: 32
2a09:e5c6::/32 maxlen: 32
2a0e:b140::/29 maxlen: 29
2a10:4103::/32 maxlen: 32
2a10:4104::/32 maxlen: 32
2a12:a343::/32 maxlen: 32
2a12:a344::/32 maxlen: 32
2a12:a346::/32 maxlen: 32
2a13:93c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:03:67:22:39:b3:1b:1c:05:5d:d5:c7:64:7e:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 14 08:52:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee509e1a9f5973ba4d1997ed83b66cb2f05bb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:fa:24:8a:d2:a6:9b:3b:5f:97:3f:c7:e7:
b6:de:53:27:e0:41:da:18:8c:63:cf:6c:17:e0:14:
ea:10:11:44:61:5d:c3:73:5f:ab:fe:7a:c1:13:99:
04:3a:f5:85:54:03:aa:be:37:6f:e8:27:6f:67:23:
c2:b5:32:98:33:03:61:09:5b:ef:b4:77:50:00:96:
a1:fd:91:62:c8:5e:d0:72:15:8d:a9:e8:ee:2c:4a:
c9:e9:d4:c2:af:b6:a8:20:19:fc:75:ee:dd:c3:c2:
f7:f5:ab:8f:58:0d:fa:d9:7b:bc:0c:6a:cb:b0:ea:
27:bb:04:e7:6c:0d:17:9c:17:ed:5b:f7:0d:28:24:
11:fb:c0:68:84:b1:67:8c:77:d7:7f:f5:41:8a:08:
51:6a:56:7f:c5:9b:fe:00:c3:bc:fc:c6:f8:23:42:
51:c9:91:09:30:6d:61:ef:d9:22:e3:f2:c2:28:c9:
aa:53:92:91:b4:76:79:f1:d7:a2:ea:58:a4:fc:fd:
1c:b4:ea:2c:8a:ab:2b:25:c6:6a:38:d4:54:fe:0b:
c1:fc:f0:3c:e5:b0:dd:89:13:47:6d:b6:1e:40:be:
37:64:19:fa:b0:80:05:58:4e:65:2e:14:84:96:4e:
ea:bf:d7:6d:18:c4:f8:cf:7a:52:75:61:fc:83:bc:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:09:E1:A9:F5:97:3B:A4:D1:99:7E:D8:3B:66:CB:2F:05:BB:17
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/HuUJ4an1lzuk0Zl-2Dtmyy8Fuxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6284::/32
2a09:e5c0::-2a09:e5c6:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b140::/29
2a10:4103::-2a10:4104:ffff:ffff:ffff:ffff:ffff:ffff
2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
2a12:a346::/32
2a13:93c0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:53:a8:df:ad:ba:99:50:cb:25:94:1e:0a:25:8d:c3:9e:94:
17:e6:ae:54:d2:fb:ed:8b:59:0a:ff:67:a5:89:30:6e:cf:b5:
a1:44:da:df:fa:f1:fb:a5:8b:2a:72:5e:4a:20:67:be:06:8d:
e4:6c:12:4e:de:b4:83:f4:17:b3:00:c1:88:69:c5:d4:08:eb:
40:ae:1a:0b:82:cb:97:f4:36:cc:22:23:df:2a:79:09:b7:93:
8e:98:37:a1:96:9a:a4:30:46:ab:c5:f9:0c:e5:b0:aa:a6:72:
80:34:64:df:c8:70:00:8b:4c:c6:62:46:06:e0:c2:b6:52:c6:
7b:c2:69:4b:43:5b:00:98:c6:5d:c6:cc:02:ce:cb:04:24:84:
f8:a4:c6:f8:3f:09:c3:04:03:76:59:68:ef:4b:71:c4:a3:21:
09:c2:3c:f2:0b:e9:86:70:6c:b2:f8:ea:2f:70:1d:44:18:d3:
d5:5b:16:7c:aa:33:c9:d3:70:45:9a:3c:61:a9:30:f7:61:a4:
d0:62:ae:9c:54:13:f8:d2:0c:76:51:ea:e5:f8:28:af:7a:e9:
5c:a4:87:be:d1:99:71:48:e1:9d:84:fb:22:50:f3:73:0e:5b:
56:6e:8c:71:46:61:d3:aa:5f:de:73:73:f1:92:ad:a6:f0:7d:
46:5f:c7:0c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZRkA2ciObMbHAVd1cdkfumCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwMTE0MDg1MjEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWU1MDllMWE5ZjU5NzNiYTRkMTk5N2VkODNiNjZjYjJmMDViYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzT6JIrSpps7X5c/x+e23lMn4EHa
GIxjz2wX4BTqEBFEYV3Dc1+r/nrBE5kEOvWFVAOqvjdv6CdvZyPCtTKYMwNhCVvv
tHdQAJah/ZFiyF7QchWNqejuLErJ6dTCr7aoIBn8de7dw8L39auPWA362Xu8DGrL
sOonuwTnbA0XnBftW/cNKCQR+8BohLFnjHfXf/VBighRalZ/xZv+AMO8/Mb4I0JR
yZEJMG1h79ki4/LCKMmqU5KRtHZ58dei6lik/P0ctOosiqsrJcZqONRU/gvB/PA8
5bDdiRNHbbYeQL43ZBn6sIAFWE5lLhSElk7qv9dtGMT4z3pSdWH8g7z9gwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFB7lCeGp9Zc7pNGZftg7ZssvBbsXMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvSHVVSjRhbjFsenVrMFpsLTJEdG15eThGdXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAwUAKglihDAO
AwUGKgnlwAMFACoJ5cYDBQMqDrFAMA4DBQAqEEEDAwUAKhBBBDAOAwUAKhKjQwMF
ACoSo0QDBQAqEqNGAwUAKhOTwDANBgkqhkiG9w0BAQsFAAOCAQEAw1Oo3626mVDL
JZQeCiWNw56UF+auVNL77YtZCv9npYkwbs+1oUTa3/rx+6WLKnJeSiBnvgaN5GwS
Tt60g/QXswDBiGnF1AjrQK4aC4LLl/Q2zCIj3yp5CbeTjpg3oZaapDBGq8X5DOWw
qqZygDRk38hwAItMxmJGBuDCtlLGe8JpS0NbAJjGXcbMAs7LBCSE+KTG+D8JwwQD
dllo70txxKMhCcI88gvphnBssvjqL3AdRBjT1VsWfKozydNwRZo8Yakw92Gk0GKu
nFQT+NIMdlHq5fgor3rpXKSHvtGZcUjhnYT7IlDzcw5bVm6McUZh06pf3nNz8ZKt
pvB9Rl/HDA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:01 2025 by rpki-client