Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hb7840lEc873mcjl1Yv2Kc0a1WA.roa
File: Hb7840lEc873mcjl1Yv2Kc0a1WA.roa (raw, json)
Hash identifier: sFjysadmi+6JrRVkuv7s1IAdtMej3DPQSdjVe+UeNDk=
Subject key identifier: 1D:BE:FC:E3:49:44:73:CE:F7:99:C8:E5:D5:8B:F6:29:CD:1A:D5:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522583A3C2B547BA22E61C42E3A03AA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hb7840lEc873mcjl1Yv2Kc0a1WA.roa
Signing time: Thu 02 Jan 2025 03:49:55 +0000
ROA not before: Thu 02 Jan 2025 03:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211972
IP address blocks: 2a0e:97c0:130::/44 maxlen: 48
2a0e:b107:100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:58:3a:3c:2b:54:7b:a2:2e:61:c4:2e:3a:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dbefce3494473cef799c8e5d58bf629cd1ad560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:ec:70:cb:40:0a:a3:97:20:1e:44:91:ba:
3b:63:12:c0:04:a7:57:6a:bc:17:48:e6:b2:e9:9a:
54:a0:2d:2b:f2:15:5f:d5:7d:89:d1:4b:07:6c:eb:
7b:78:32:75:71:74:4c:fd:3f:6b:ce:78:c5:ff:7f:
e0:0c:49:a2:74:74:df:e9:d4:9d:0b:36:8f:b0:f7:
da:c4:26:61:97:1c:df:13:bb:28:c0:97:d6:b6:77:
46:f3:a6:0d:56:cc:44:fc:ca:7a:63:0c:e4:e6:74:
a9:2e:7a:e6:76:8f:f1:3f:57:86:98:68:4c:98:79:
5d:01:5d:6b:92:34:05:90:ef:70:1d:38:75:07:d1:
e2:74:5c:f7:12:5d:a9:db:2f:7c:b8:bf:b3:97:25:
c6:db:b4:7b:04:1c:1e:70:c7:a6:16:ae:29:e6:bf:
f1:f9:2a:cf:4a:08:5c:b3:28:9c:9a:ba:f2:53:2f:
e6:92:bf:02:06:bd:2c:9e:19:31:dd:93:dd:da:ae:
d4:5e:90:e2:1a:69:2e:51:2c:c5:74:5e:f5:1b:35:
95:78:55:c2:37:de:2c:5f:3c:d2:53:1f:41:c1:93:
99:c8:c0:22:b6:3e:c1:95:76:4f:27:a7:59:16:fa:
12:69:e2:3a:25:eb:40:cb:4b:02:98:e9:2c:e8:90:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:FC:E3:49:44:73:CE:F7:99:C8:E5:D5:8B:F6:29:CD:1A:D5:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hb7840lEc873mcjl1Yv2Kc0a1WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:130::/44
2a0e:b107:100::/44
Signature Algorithm: sha256WithRSAEncryption
00:0a:e6:c3:13:e6:fc:8e:db:19:b1:ae:76:77:c8:09:f2:36:
20:9e:54:f7:a1:9c:6f:8e:61:8b:63:da:e2:a4:01:b5:9e:84:
0b:6f:67:fc:47:a9:b1:8d:66:9e:5a:31:a1:ba:50:a9:c4:99:
59:09:a1:df:be:be:47:b3:d6:22:24:00:0d:b3:88:c3:05:60:
5e:69:44:18:e7:34:27:3c:fc:5d:01:39:1e:f7:55:46:29:eb:
e2:3c:73:09:c2:69:84:93:39:ce:44:4c:44:c8:a3:b5:96:f5:
6d:23:a6:d0:91:ce:cc:58:7c:d4:ba:87:01:b5:c2:eb:24:16:
fb:0a:5b:d8:65:2d:5a:9e:1f:54:7c:1e:e0:6e:d7:a9:8b:18:
4b:82:9c:22:99:e9:99:07:3a:70:21:6a:c8:8a:15:8b:2e:ce:
df:13:5e:24:08:75:17:15:44:f4:21:45:4f:b6:21:6d:9a:ea:
ed:dc:da:a4:55:1c:05:ef:bb:fd:97:9c:0d:7b:f8:6c:14:30:
76:52:cc:e6:37:22:60:fa:51:2d:31:f5:0a:22:fc:a3:00:bf:
e4:3b:81:89:a6:4b:ce:e7:04:ca:c0:59:24:6e:62:8a:76:0e:
96:9b:44:c9:8e:6d:59:19:ec:9a:13:b2:f4:14:f8:bb:af:45:
e0:84:c5:3f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIlg6PCtUe6IuYcQuOgOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGJlZmNlMzQ5NDQ3M2NlZjc5OWM4ZTVkNThiZjYyOWNkMWFkNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQnscMtACqOXIB5Ekbo7YxLABKdX
arwXSOay6ZpUoC0r8hVf1X2J0UsHbOt7eDJ1cXRM/T9rznjF/3/gDEmidHTf6dSd
CzaPsPfaxCZhlxzfE7sowJfWtndG86YNVsxE/Mp6Ywzk5nSpLnrmdo/xP1eGmGhM
mHldAV1rkjQFkO9wHTh1B9HidFz3El2p2y98uL+zlyXG27R7BBwecMemFq4p5r/x
+SrPSghcsyicmrryUy/mkr8CBr0snhkx3ZPd2q7UXpDiGmkuUSzFdF71GzWVeFXC
N94sXzzSUx9BwZOZyMAitj7BlXZPJ6dZFvoSaeI6JetAy0sCmOks6JCVjwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB2+/ONJRHPO95nI5dWL9inNGtVgMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSGI3ODQwbEVjODczbWNqbDFZdjJLYzBhMVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAEw
AwcEKg6xBwEAMA0GCSqGSIb3DQEBCwUAA4IBAQAACubDE+b8jtsZsa52d8gJ8jYg
nlT3oZxvjmGLY9ripAG1noQLb2f8R6mxjWaeWjGhulCpxJlZCaHfvr5Hs9YiJAAN
s4jDBWBeaUQY5zQnPPxdATke91VGKeviPHMJwmmEkznORExEyKO1lvVtI6bQkc7M
WHzUuocBtcLrJBb7ClvYZS1anh9UfB7gbtepixhLgpwimemZBzpwIWrIihWLLs7f
E14kCHUXFUT0IUVPtiFtmurt3NqkVRwF77v9l5wNe/hsFDB2UszmNyJg+lEtMfUK
IvyjAL/kO4GJpkvO5wTKwFkkbmKKdg6Wm0TJjm1ZGeyaE7L0FPi7r0XghMU/
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:23:29 2025 by rpki-client