Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/1-EQdHUKs6plZjTGdRa_hkmTqbHs.roa
File: 1-EQdHUKs6plZjTGdRa_hkmTqbHs.roa (raw, json)
Hash identifier: psxhnkWXw5vA/vWmFs9Vim3SWh6TXmTk8uUFRvs85RY=
Subject key identifier: F8:44:1D:1D:42:AC:EA:99:59:8D:31:9D:45:AF:E1:92:64:EA:6C:7B
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 0193B9F249B0540E9EC0E610C5C45EC930BA
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/1-EQdHUKs6plZjTGdRa_hkmTqbHs.roa
Signing time: Thu 12 Dec 2024 08:18:03 +0000
ROA not before: Thu 12 Dec 2024 08:18:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398464
IP address blocks: 2a10:d501::/32 maxlen: 32
2a10:d502::/32 maxlen: 32
2a10:d506::/32 maxlen: 32
2a10:d507::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:f2:49:b0:54:0e:9e:c0:e6:10:c5:c4:5e:c9:30:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Dec 12 08:18:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8441d1d42acea99598d319d45afe19264ea6c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:c8:54:69:11:e4:4c:e2:9f:39:a9:59:ba:
be:a6:34:fa:0d:4e:08:62:77:70:02:e6:2c:d9:3c:
1b:d2:62:d9:8f:d5:64:8a:bc:a2:50:bc:e3:90:fe:
68:9c:ca:84:c8:71:6b:17:d0:65:1a:79:d2:b6:0e:
b8:6f:b9:20:f2:48:41:8b:1d:c7:bd:73:6d:d9:50:
62:41:3b:14:98:29:ba:d1:db:df:f1:a7:cc:25:54:
43:41:e0:1e:8b:d1:ab:59:41:91:d0:04:4c:11:da:
c6:26:5c:2a:38:ee:f9:1b:8b:63:cf:0d:62:00:1e:
a1:99:f9:54:1f:f1:55:2f:fa:78:13:03:5d:1c:63:
4e:5a:bc:bc:71:9a:e6:3a:08:05:29:f4:a7:6a:e9:
db:5f:4c:13:c8:e8:14:93:b9:e2:f0:bb:ee:1a:11:
1a:c0:f4:a3:ec:8f:49:b0:fd:16:2c:8a:ae:b6:54:
08:85:d3:cc:20:41:48:84:86:a2:8e:06:a6:14:c7:
56:4d:6f:82:45:6c:be:9e:06:c2:ea:f5:3b:1c:a3:
5d:b2:e2:73:e5:a4:83:08:34:a0:5d:3f:2d:67:1e:
1a:af:15:5d:ae:66:b7:4a:31:f1:ed:0d:76:d0:bc:
36:35:02:d3:25:1d:84:bc:32:27:fd:ca:a4:8c:34:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:44:1D:1D:42:AC:EA:99:59:8D:31:9D:45:AF:E1:92:64:EA:6C:7B
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/1-EQdHUKs6plZjTGdRa_hkmTqbHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:d501::-2a10:d502:ffff:ffff:ffff:ffff:ffff:ffff
2a10:d506::/31
Signature Algorithm: sha256WithRSAEncryption
1e:8a:10:f6:79:d1:b2:c8:a3:3f:5c:5c:bb:0a:97:e4:67:c9:
2e:39:73:cc:b6:ee:36:87:a1:3f:5c:ee:6f:6e:18:d8:f6:b0:
47:e6:74:20:31:b2:14:b8:73:b9:e6:54:61:35:42:f7:74:c2:
41:59:70:3e:91:53:05:59:02:ec:38:60:82:1c:90:f8:8f:71:
f8:e9:08:47:9c:14:1c:74:42:89:ef:78:74:ac:6c:35:2f:77:
75:4e:a6:e8:56:f5:e1:88:65:cb:09:37:ed:ee:33:94:78:a1:
fd:43:84:67:90:69:96:a5:51:b9:f9:3f:82:c6:2e:69:1f:d1:
b0:2d:d3:ff:7b:ca:d5:55:df:79:7f:fe:b4:90:ad:49:fa:37:
23:d5:1e:ad:6d:d3:e5:c6:80:76:37:f8:cd:c6:0c:89:74:47:
10:80:b0:0e:d0:56:4d:5e:cc:be:24:ab:07:3a:69:be:1c:a3:
cc:50:b5:3d:c5:6a:18:0f:b5:3f:4f:19:50:93:a4:ba:3d:d8:
97:fe:09:29:18:01:84:f7:3c:5b:7f:b7:39:69:0d:1e:d3:9a:
ab:4e:97:83:e3:10:e8:8c:03:46:0c:a4:d0:58:a4:26:d1:30:
b8:d2:61:1c:be:83:cc:22:9f:5b:52:14:c2:aa:1e:fd:16:e0:
b7:87:76:c4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZO58kmwVA6ewOYQxcReyTC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTQ2ODdhYjhiMWViNmRlMWFiZDA0YTA3NjE3Yzg2ZDEx
ODUxOGQwHhcNMjQxMjEyMDgxODAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQ0MWQxZDQyYWNlYTk5NTk4ZDMxOWQ0NWFmZTE5MjY0ZWE2YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm83IVGkR5EzinzmpWbq+pjT6DU4I
YndwAuYs2Twb0mLZj9VkiryiULzjkP5onMqEyHFrF9BlGnnStg64b7kg8khBix3H
vXNt2VBiQTsUmCm60dvf8afMJVRDQeAei9GrWUGR0ARMEdrGJlwqOO75G4tjzw1i
AB6hmflUH/FVL/p4EwNdHGNOWry8cZrmOggFKfSnaunbX0wTyOgUk7ni8LvuGhEa
wPSj7I9JsP0WLIqutlQIhdPMIEFIhIaijgamFMdWTW+CRWy+ngbC6vU7HKNdsuJz
5aSDCDSgXT8tZx4arxVdrma3SjHx7Q120Lw2NQLTJR2EvDIn/cqkjDQMawIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPhEHR1CrOqZWY0xnUWv4ZJk6mx7MB8GA1UdIwQY
MBaAFObkaHq4sett4avQSgdhfIbRGFGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVSb2VyaXg2MjNocTlCS0IyRjhodEVZVVkwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZmQ1ZDItYjdjZS00YjNkLThmMmMt
MTM4YmJhYWM3ZmUyLzEvMS1FUWRIVUtzNnBsWmpUR2RSYV9oa21UcWJIcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzUvNmZkNWQyLWI3Y2UtNGIzZC04ZjJjLTEzOGJiYWFjN2Zl
Mi8xLzV1Um9lcml4NjIzaHE5QktCMkY4aHRFWVVZMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wHQQCAAIwFzAOAwUAKhDV
AQMFACoQ1QIDBQEqENUGMA0GCSqGSIb3DQEBCwUAA4IBAQAeihD2edGyyKM/XFy7
CpfkZ8kuOXPMtu42h6E/XO5vbhjY9rBH5nQgMbIUuHO55lRhNUL3dMJBWXA+kVMF
WQLsOGCCHJD4j3H46QhHnBQcdEKJ73h0rGw1L3d1TqboVvXhiGXLCTft7jOUeKH9
Q4RnkGmWpVG5+T+Cxi5pH9GwLdP/e8rVVd95f/60kK1J+jcj1R6tbdPlxoB2N/jN
xgyJdEcQgLAO0FZNXsy+JKsHOmm+HKPMULU9xWoYD7U/TxlQk6S6PdiX/gkpGAGE
9zxbf7c5aQ0e05qrTpeD4xDojANGDKTQWKQm0TC40mEcvoPMIp9bUhTCqh79FuC3
h3bE
-----END CERTIFICATE-----
Generated at Tue Dec 24 21:28:20 2024 by rpki-client on console.sobornost.net