Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/hYytgwsUvkz8YKRRhUAfJUBuZUY.roa
File: hYytgwsUvkz8YKRRhUAfJUBuZUY.roa (raw, json)
Hash identifier: HXl9mDiPSMeZATnRmHs2sYzYTKl8E5DBUIjjrVg17Ao=
Subject key identifier: 85:8C:AD:83:0B:14:BE:4C:FC:60:A4:51:85:40:1F:25:40:6E:65:46
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 0194214427E8F8AE0996A626C8D15C8EFAE6
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/hYytgwsUvkz8YKRRhUAfJUBuZUY.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394144
IP address blocks: 2a0e:7580::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:27:e8:f8:ae:09:96:a6:26:c8:d1:5c:8e:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=858cad830b14be4cfc60a45185401f25406e6546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:25:6f:65:69:5a:8e:6b:b0:c9:53:63:d8:
54:98:68:0c:22:e6:f3:79:b2:8d:e9:e0:f9:5b:a1:
6c:2a:17:32:b6:d9:26:19:5a:be:d8:98:d0:3f:59:
85:ea:6c:ec:74:8b:96:26:67:1d:67:a1:21:97:71:
20:6d:ab:c7:0f:44:ed:5d:62:df:f4:02:a0:37:4f:
fa:fb:7f:d6:e3:cf:30:b1:ef:fd:3a:85:67:90:0a:
89:eb:9e:8a:4f:9e:fe:43:89:c5:50:db:d9:3d:87:
5f:dd:37:1c:36:46:0b:52:99:dd:f3:36:42:32:d2:
fa:bd:52:37:64:fd:62:29:51:fc:22:b6:94:22:75:
3d:0d:78:4e:2d:ec:e0:52:55:78:d0:8a:9c:c2:2e:
6f:fa:32:89:f0:92:77:31:97:f4:3c:36:33:cd:78:
1e:8b:6b:6b:26:0f:98:b2:fa:d8:9a:92:16:a7:e3:
c4:32:91:e7:b8:f9:53:b8:43:46:b1:40:1a:8b:e9:
c2:67:b3:0e:80:e2:6c:6a:7d:98:e5:86:ab:cd:c3:
0b:64:89:65:34:95:54:31:9b:d5:93:0e:c1:35:42:
03:71:f5:5e:b3:94:5c:b6:b0:71:85:74:9f:c8:24:
cf:dd:d4:38:79:da:4a:00:35:59:45:54:9e:c0:07:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:AD:83:0B:14:BE:4C:FC:60:A4:51:85:40:1F:25:40:6E:65:46
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/hYytgwsUvkz8YKRRhUAfJUBuZUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7580::/29
Signature Algorithm: sha256WithRSAEncryption
44:47:0d:07:2e:ed:51:41:88:a3:65:ac:97:57:77:e8:4a:a9:
5b:d3:0d:17:17:63:ff:91:33:f7:ea:b7:5a:d6:49:bc:c9:73:
fa:5d:62:9a:7c:13:b1:ee:7e:dd:f6:7f:5a:5a:05:69:76:58:
1d:19:5d:fe:a4:d5:a3:72:3d:34:42:02:16:06:cf:d5:ff:f8:
3d:50:a2:4f:6e:36:f8:1b:46:e6:45:c2:b2:33:5d:39:a7:5e:
cd:49:3b:f6:c4:09:8a:42:a7:28:3b:91:f7:de:93:8f:e6:bc:
53:f9:dd:b4:f6:81:b9:f2:1e:17:7e:bb:3d:5a:50:6c:00:4a:
08:21:bd:c5:61:de:6e:53:86:be:6c:e9:cb:81:a2:65:ba:2f:
05:31:e4:12:b7:71:91:e9:aa:4e:ef:5d:f2:21:16:f5:23:76:
94:fe:ee:e6:87:b1:a0:b9:f2:90:c4:e7:7c:8e:65:a9:54:98:
d5:f3:a5:e5:e0:99:c6:8d:0d:15:15:39:02:19:d0:cb:d1:e9:
cd:68:b0:59:f8:bd:10:8c:d8:dd:9c:a2:9a:b3:29:56:7c:62:
50:25:a5:5b:55:be:79:4a:a6:cc:f4:06:56:89:9a:4c:50:dd:
d3:b3:20:7a:f2:b8:f5:1c:d4:be:a1:da:f8:ad:1e:43:43:58:
5c:39:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:51 2025 by rpki-client on console.sobornost.net