Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/sH5ffav-MEHFx-dEpmj-qDCH5g0.roa
File: sH5ffav-MEHFx-dEpmj-qDCH5g0.roa (raw, json)
Hash identifier: cMuhVF8gYL97/dPky5i0xq3CGW8CsCgvFE7GsycUFgo=
Subject key identifier: B0:7E:5F:7D:AB:FE:30:41:C5:C7:E7:44:A6:68:FE:A8:30:87:E6:0D
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C23F10821436D36EBE0A3612EAA29
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/sH5ffav-MEHFx-dEpmj-qDCH5g0.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53358
IP address blocks: 2a05:f300::/29 maxlen: 64
2a12:4b40::/29 maxlen: 64
2a13:c400::/29 maxlen: 64
2a13:c800::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:23:f1:08:21:43:6d:36:eb:e0:a3:61:2e:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b07e5f7dabfe3041c5c7e744a668fea83087e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:e0:ef:50:af:96:2b:23:d0:51:00:fe:c3:
46:a0:5d:ba:87:23:65:d8:af:03:92:d2:50:b4:a8:
52:ac:7d:52:84:ad:ed:9b:da:50:a6:f0:3f:b5:50:
9e:fa:37:9e:3d:b8:ec:6f:94:4d:61:f7:a7:42:2c:
9a:c5:fa:b8:71:03:ac:35:e2:f5:3d:34:a7:3d:f8:
61:df:dc:9c:b3:93:ec:90:5f:80:60:6a:68:e1:92:
24:2d:c6:65:85:60:d9:a8:3d:62:ff:4f:69:ea:89:
f5:60:58:30:2f:f2:69:e0:e0:7b:a4:09:ff:2f:c6:
d7:f3:c9:d0:88:06:4b:cd:80:17:25:93:92:2d:39:
9f:29:7a:a8:44:71:a8:c2:5a:39:12:a9:85:26:71:
01:69:cf:62:c8:d1:e7:65:05:c8:f8:f0:fb:d5:4e:
53:15:9f:55:12:22:f1:28:17:61:29:2f:8c:50:47:
c0:eb:fa:eb:1d:21:fa:14:00:09:99:56:2a:27:79:
b4:9d:73:f3:ec:22:b7:c7:ef:a4:5f:19:39:af:95:
ab:58:b5:c0:72:12:8b:5a:30:70:82:a9:12:7b:16:
76:88:4d:f7:77:b2:d7:75:71:b9:d9:4e:bb:5f:98:
31:ee:6d:cf:ff:56:ac:39:50:5c:3c:23:c5:3c:ea:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7E:5F:7D:AB:FE:30:41:C5:C7:E7:44:A6:68:FE:A8:30:87:E6:0D
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/sH5ffav-MEHFx-dEpmj-qDCH5g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f300::/29
2a12:4b40::/29
2a13:c400::/29
2a13:c800::/29
Signature Algorithm: sha256WithRSAEncryption
35:fa:4f:92:b4:2f:cb:f5:95:e7:26:cd:24:e5:0c:2c:ab:35:
4a:9b:9a:8d:3f:35:0c:c5:ac:97:9e:43:ae:55:8c:c4:dc:e6:
f1:fb:20:cb:45:e0:40:29:5a:28:a2:29:c0:1b:dc:8a:c1:46:
11:8e:07:87:4f:83:04:a0:07:8a:38:fe:81:99:c4:8a:8b:0a:
1b:54:d4:42:19:38:89:73:5f:d5:93:23:ac:a5:fe:9d:34:44:
ea:86:6a:e9:92:b0:a0:a7:16:2c:88:81:d4:d0:90:18:28:a7:
cc:37:64:fe:13:e8:de:dc:5d:9c:17:06:a3:4d:20:4b:04:85:
e8:21:d9:d5:a2:70:13:0e:87:73:ea:0d:a2:01:34:e1:cc:44:
f6:b2:5d:c3:e3:59:88:7c:20:b0:4a:70:4c:f6:97:0c:ee:2a:
90:df:50:c4:0e:4f:fb:b1:a6:dc:1e:aa:04:84:fc:6d:ae:36:
4e:e4:13:a3:6b:03:23:ea:2d:94:54:84:a3:66:ef:81:cb:25:
4d:c4:a7:1b:be:ae:01:b0:4b:69:4a:8e:18:17:c4:f2:0e:f6:
4f:da:c7:71:4c:3b:a5:d7:76:ed:d1:59:56:48:72:fe:66:2e:
50:df:28:19:83:d2:3d:c2:a7:a8:e3:c5:89:4b:a0:c4:e4:55:
03:dc:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:31 2025 by rpki-client