Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/HXnVK2ZJu8FqiC_rxE1xkG4gHno.roa
File: HXnVK2ZJu8FqiC_rxE1xkG4gHno.roa (raw, json)
Hash identifier: FVDJyHusktKjtnBMe+X9ZajdC/Nn+YfKzhtdxw6cI58=
Subject key identifier: 1D:79:D5:2B:66:49:BB:C1:6A:88:2F:EB:C4:4D:71:90:6E:20:1E:7A
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F1E7CBC08FDF40F4AFCDAFE890B9
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/HXnVK2ZJu8FqiC_rxE1xkG4gHno.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214672
IP address blocks: 2a0f:7803:f980::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f1:e7:cb:c0:8f:df:40:f4:af:cd:af:e8:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d79d52b6649bbc16a882febc44d71906e201e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:1b:b0:f3:49:bc:ad:79:63:f6:fb:7d:f7:
09:39:27:a3:3f:3c:22:57:3f:7b:91:7c:eb:73:22:
39:7e:be:cd:d0:e5:0e:a8:43:5a:af:b7:11:f1:ee:
c7:fc:25:1e:8a:7f:f2:c0:df:47:eb:28:04:e2:bd:
36:ad:9d:0f:29:81:e2:c3:bc:18:4a:49:ed:bd:6e:
87:d8:ef:5e:24:5e:86:be:cb:07:4d:fa:38:02:77:
68:8e:90:dc:9c:c2:3c:a9:a9:58:4e:56:3a:e3:bb:
68:01:5e:85:40:0d:81:a7:4b:1c:7c:35:ba:19:70:
95:2f:7b:d4:33:d9:41:dd:40:05:52:3d:e7:29:57:
44:b9:10:2e:da:c1:1f:9c:6a:9f:b9:f5:56:55:73:
2d:d1:07:98:63:02:e1:b6:6d:0c:b3:f2:ef:fb:3a:
47:40:95:c2:e0:cc:a2:98:9f:82:08:d0:6b:1f:05:
0b:91:06:25:07:ef:bc:02:23:df:a3:b7:ab:99:6e:
ea:09:00:15:5f:25:13:02:14:d9:ce:58:bf:4c:d7:
be:89:ea:47:f5:26:21:d1:87:1f:b6:3d:44:6f:d3:
d2:ec:00:12:17:2d:eb:c8:b6:a4:7e:2d:ef:3a:11:
02:67:3e:09:98:d6:91:9d:9d:87:07:bc:70:31:67:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:D5:2B:66:49:BB:C1:6A:88:2F:EB:C4:4D:71:90:6E:20:1E:7A
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/HXnVK2ZJu8FqiC_rxE1xkG4gHno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f980::/44
Signature Algorithm: sha256WithRSAEncryption
53:01:53:b2:f7:73:de:54:4a:dc:8c:e9:52:21:d1:f3:e5:94:
09:61:dd:12:2e:22:c0:80:9c:fa:85:c6:fd:7e:11:8d:ab:2a:
0e:73:f2:5b:5f:d8:dc:55:b0:1d:ca:b5:09:af:d8:0a:4a:76:
f5:da:4c:f0:c0:45:e9:d8:c6:11:47:43:0d:33:d0:10:d0:52:
cf:db:7d:57:de:c0:cf:b1:dc:df:4b:d6:d3:3c:39:46:ba:18:
ac:5f:87:62:0a:67:38:28:7e:4a:23:c7:4b:12:10:b9:0c:34:
55:6a:b5:54:2d:e1:8d:80:9c:f9:51:dd:72:ec:52:2e:6c:65:
0b:73:bc:69:eb:13:77:3b:76:59:cf:5a:70:17:8c:7b:5b:38:
4b:94:bc:4e:84:88:89:7c:23:fe:c1:aa:65:f1:59:39:f8:4f:
03:f0:82:3e:ca:2e:6c:2b:dd:cb:78:0c:95:5d:d0:99:a6:29:
b6:c0:76:4d:bc:13:4c:ab:c3:a5:f2:c8:b2:f4:43:0c:0d:84:
0b:cc:72:c3:02:f3:20:06:c0:bf:20:95:c3:e0:78:fe:2f:54:
4d:f8:7c:2a:97:f0:4c:4e:2a:5b:c8:6c:f3:a0:ea:7a:81:26:
16:21:33:bd:98:91:8c:99:37:f7:f8:b4:b9:36:42:80:bf:f2:
85:ca:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:56 2025 by rpki-client