Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hnuqfuqQFfls7WsQI7eQEfSUik0.roa
File: hnuqfuqQFfls7WsQI7eQEfSUik0.roa (raw, json)
Hash identifier: 4glBckXjWMe5XR/kJnErYQjsYivbggBDZAVbZrhZteQ=
Subject key identifier: 86:7B:AA:7E:EA:90:15:F9:6C:ED:6B:10:23:B7:90:11:F4:94:8A:4D
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 019427B56CB4062434531C8F1EFADFB01288
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hnuqfuqQFfls7WsQI7eQEfSUik0.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208545
IP address blocks: 2a01:170:1050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6c:b4:06:24:34:53:1c:8f:1e:fa:df:b0:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=867baa7eea9015f96ced6b1023b79011f4948a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:31:52:c6:6a:8b:d1:23:a0:98:e9:b8:e8:30:
ee:c7:a4:5d:c8:16:cf:62:c5:3c:9a:a2:c4:88:85:
7c:d9:31:5d:ff:8e:89:a4:2b:05:d6:94:81:c2:da:
42:dc:c2:46:70:c9:40:f7:53:d5:f3:b4:57:9d:24:
1c:b9:43:80:0a:05:e7:07:b7:0a:e1:66:5f:e5:1a:
f8:a3:e8:35:80:69:0b:c0:0e:ee:00:91:96:0d:10:
d9:88:40:3a:ba:42:72:b2:7e:eb:ce:e6:a0:9e:80:
d5:62:b6:15:dd:4b:5d:a5:ca:68:27:68:0b:fc:30:
3c:44:e8:bb:83:98:fc:a4:65:3f:d3:23:a9:d2:f8:
8e:c0:6d:1d:1a:16:90:c5:1f:56:75:24:2f:aa:28:
87:2f:10:5c:d0:0b:ec:fa:d1:b0:8f:c7:21:b1:7d:
43:d8:76:2e:dd:ab:68:2b:97:a0:0e:8c:0a:94:2a:
a5:28:3f:91:ac:79:07:8c:8a:33:02:c1:36:bd:d1:
4e:8d:e7:dd:c4:06:60:42:c8:9a:7b:d0:99:20:0a:
0a:dd:04:2c:37:41:cf:0a:8e:b3:71:24:56:a0:c2:
af:34:25:d9:fa:45:64:a5:44:b9:30:61:44:56:ce:
b8:21:26:d1:ee:79:59:f6:c3:69:c4:3b:09:e7:fe:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:AA:7E:EA:90:15:F9:6C:ED:6B:10:23:B7:90:11:F4:94:8A:4D
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/hnuqfuqQFfls7WsQI7eQEfSUik0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:170:1050::/48
Signature Algorithm: sha256WithRSAEncryption
7a:07:48:27:df:34:3c:38:cb:e9:81:a6:20:17:84:5c:6d:21:
9b:7a:17:aa:62:cd:e9:41:60:1f:d1:5a:63:51:de:0f:34:98:
2d:53:53:ad:35:6d:3f:62:9e:70:a9:aa:bc:ae:fc:45:62:73:
76:10:6f:66:df:9d:9c:2d:bc:be:e9:42:82:b3:59:a0:35:08:
0e:03:e5:95:5a:61:49:fc:be:69:f0:38:78:20:de:bb:9a:ff:
db:1b:9f:61:26:14:bd:b5:1b:92:1c:60:05:29:33:95:d2:c2:
30:21:41:d3:6c:b3:d6:2c:37:6d:bb:b1:44:04:3b:ad:9a:04:
0a:c1:a6:d0:ba:aa:77:2c:bf:19:fc:60:06:1a:d5:de:71:c5:
66:05:84:5b:31:17:8c:71:71:60:1f:50:99:73:f5:7a:0a:c0:
ed:b6:7e:33:ec:7c:3f:32:d8:51:c3:bd:8f:56:42:00:9d:60:
dc:9a:e7:74:7c:1d:89:3b:02:12:fe:71:38:bb:d4:6e:a1:15:
01:3e:f5:ce:61:14:4c:1d:33:53:b2:45:16:ef:cc:5d:e8:ea:
73:d0:2b:0b:e1:a4:05:64:c6:2b:37:04:80:9a:5b:99:ef:5e:
b1:50:77:3d:cc:84:1f:5c:88:f5:a9:04:a3:24:b9:c2:8a:c7:
48:b4:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:41 2025 by rpki-client