Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/UdTz9ESnCBONhFhPnKTJSPAPKew.roa
File: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (raw, json)
Hash identifier: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=
Subject key identifier: 51:D4:F3:F4:44:A7:08:13:8D:84:58:4F:9C:A4:C9:48:F0:0F:29:EC
Certificate issuer: /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial: 019421B239CDFBD234BA9D16930F2CAA5CD7
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/UdTz9ESnCBONhFhPnKTJSPAPKew.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 160.78.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:39:cd:fb:d2:34:ba:9d:16:93:0f:2c:aa:5c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51d4f3f444a708138d84584f9ca4c948f00f29ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:fa:51:11:e5:8e:67:d5:0d:82:a2:70:60:
48:fb:80:64:a5:a5:78:2b:ca:b5:30:16:82:63:91:
a6:30:04:e4:2d:b0:9b:19:d1:35:a1:65:40:c3:ab:
d0:34:5e:a6:62:75:81:fd:bc:4a:37:2a:7c:95:87:
f2:73:87:69:95:23:89:ff:2d:97:02:ce:23:72:62:
ba:58:db:03:83:46:65:8f:25:4c:ba:61:a7:9d:7b:
da:79:e5:a1:30:15:d8:f4:69:da:9b:ad:21:c6:56:
5a:b4:f5:d6:93:0f:09:b4:d7:ad:03:5c:b3:5c:7a:
04:76:32:a0:f8:5f:02:c3:03:7f:a1:5a:a7:35:bc:
c4:b0:ac:a1:d0:f2:79:56:19:1c:05:21:86:14:3c:
59:2f:1d:12:2f:0e:c2:40:18:7a:18:6a:e4:cb:22:
5e:c5:88:27:6c:2b:d8:59:13:90:58:32:f2:5b:cf:
3b:82:77:df:a3:37:d1:d5:2e:ad:6f:d4:4c:31:f4:
d6:fc:71:36:c5:af:c8:23:20:46:94:bd:6e:14:b6:
5d:ba:23:36:d5:e8:cf:97:9e:7c:e9:40:2c:3c:81:
cc:84:ef:79:51:c3:15:9f:47:8d:62:99:b1:1f:c5:
31:9f:9c:64:31:ee:60:63:8b:41:c8:cf:d7:cc:44:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D4:F3:F4:44:A7:08:13:8D:84:58:4F:9C:A4:C9:48:F0:0F:29:EC
X509v3 Authority Key Identifier:
keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/UdTz9ESnCBONhFhPnKTJSPAPKew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:af:13:51:5e:8e:dc:6c:f3:66:d4:85:7d:31:98:30:ae:3d:
b5:44:9a:67:07:b9:97:54:8a:88:ce:38:0b:a2:d4:88:14:04:
61:07:0b:62:37:44:eb:ef:f1:28:fa:e1:de:f0:17:e7:84:fe:
37:c1:e6:7f:7c:3d:93:f4:e3:a0:48:d6:00:95:db:38:67:54:
5a:6a:c6:ac:d1:34:20:2e:cc:df:d4:3b:62:07:ac:74:d8:da:
7a:ae:7f:4d:f5:3c:f9:32:b4:e9:69:2a:8f:e9:ed:88:b2:21:
d1:18:5b:6a:c9:8d:d1:0d:6d:7e:5d:78:0d:65:c5:26:08:45:
0a:43:4a:cc:17:6c:d3:6d:10:bb:77:a6:7f:55:d1:19:b9:60:
b2:d5:58:58:01:db:93:4f:c2:f2:3c:43:28:2f:4f:86:45:f7:
4d:a6:ff:ce:49:4f:a0:68:af:c0:8a:f0:33:8b:8a:7a:24:a4:
89:46:82:3f:4d:d9:98:60:28:a9:10:5f:22:34:9c:16:28:b0:
c7:98:52:a8:04:7e:42:3c:68:22:74:d0:4d:c8:e9:2d:3f:f4:
9d:b3:ea:e9:ae:4a:9a:71:a0:29:b7:e7:44:09:3c:a9:3c:9d:
5d:12:ec:0c:5c:11:0b:da:ee:0d:8e:50:6c:17:89:7c:3a:da:
23:1d:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:25 2025 by rpki-client