Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/pzjmaLlAYg1GtB1-BPGxf_97w2k.roa
File: pzjmaLlAYg1GtB1-BPGxf_97w2k.roa (raw, json)
Hash identifier: TucPjnv7DB9fKhYA4FsUC+p2EKxC7XMfjGbXhyo7OXY=
Subject key identifier: A7:38:E6:68:B9:40:62:0D:46:B4:1D:7E:04:F1:B1:7F:FF:7B:C3:69
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 019422201349CBD039905E1AE26D99CAD45B
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/pzjmaLlAYg1GtB1-BPGxf_97w2k.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47866
IP address blocks: 146.0.25.0/24 maxlen: 24
146.0.26.0/23 maxlen: 23
146.0.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:13:49:cb:d0:39:90:5e:1a:e2:6d:99:ca:d4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a738e668b940620d46b41d7e04f1b17fff7bc369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:df:12:ca:00:e7:51:c7:32:3b:f8:21:ac:0c:
5a:34:cf:67:05:d9:d0:80:ca:44:b1:5f:f0:3e:41:
86:14:97:0b:f3:d1:93:00:ef:db:45:1d:99:00:68:
a0:8f:15:9a:8d:63:69:8e:8d:ff:a3:bf:b1:20:28:
e0:6d:b9:7f:e6:0c:14:45:18:07:15:ac:71:6d:2f:
3d:f3:ce:9a:8b:a9:ea:d0:4a:6c:e6:7f:96:72:f0:
58:16:a7:e8:17:94:d1:88:72:4e:52:b1:fe:d6:a8:
59:44:55:14:c6:32:a0:f2:6e:3e:6c:9d:75:07:51:
f4:ca:7b:6d:6b:12:c1:29:ee:20:78:19:d1:48:0a:
42:e1:4b:46:37:4e:13:c4:fd:8c:06:f4:79:a9:81:
e4:16:85:ce:bd:8e:4f:c8:7e:45:c1:b9:7d:39:78:
8c:34:1a:94:29:03:9f:3d:e0:5e:c4:56:ab:37:53:
20:e2:e1:20:9b:2a:a0:ba:9a:ee:17:3c:69:4b:97:
e9:69:67:df:e5:ac:04:2d:e0:6d:5b:6b:5d:35:72:
d3:66:93:0e:f8:9e:1b:f1:1b:97:55:7a:8d:0f:51:
44:61:31:fa:7c:68:70:04:80:fd:75:be:f1:44:d4:
e9:11:cd:70:b4:81:05:96:6b:9d:59:68:1e:b0:b2:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:E6:68:B9:40:62:0D:46:B4:1D:7E:04:F1:B1:7F:FF:7B:C3:69
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/pzjmaLlAYg1GtB1-BPGxf_97w2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.25.0-146.0.31.255
Signature Algorithm: sha256WithRSAEncryption
aa:db:16:5b:08:b9:30:52:07:99:cc:ca:73:36:2c:dd:4c:94:
38:91:dd:74:fa:f5:e8:c7:ce:4f:a8:cf:33:d8:ee:3d:55:2a:
cc:3e:96:d5:b7:36:ea:38:fd:eb:b5:f9:f8:d1:79:f5:11:65:
1a:67:3e:d6:66:04:9d:88:29:be:07:b5:f5:bf:9a:8e:f9:90:
51:4b:da:f6:3f:f8:33:dd:0d:e9:85:93:d8:bc:20:ef:f1:0e:
9d:b0:fb:83:fc:1a:ae:c4:e0:f1:46:02:08:b1:dd:b9:91:1b:
46:51:39:38:58:02:94:6e:3c:d8:36:a2:16:a2:d4:13:d7:44:
b6:70:09:e3:26:15:ae:ef:fd:d0:04:f8:15:30:e1:c7:68:8f:
8f:1e:61:ff:af:62:59:9e:f0:40:e4:ee:51:95:da:7c:3e:27:
70:04:02:ac:7f:ed:7b:36:b3:aa:0c:b3:56:ad:ed:02:1a:ec:
46:65:30:39:ff:86:d2:f9:35:09:61:23:0f:2c:de:d0:29:f7:
89:92:b8:e1:66:e1:a5:66:cd:23:df:e0:e8:25:18:23:43:f3:
a8:4e:b0:8d:65:e0:55:78:0b:a1:58:57:55:55:ef:c0:e0:ce:
d4:fc:06:e7:0d:56:c5:83:a2:05:24:f3:f6:a3:b6:91:90:d1:
9f:18:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:28 2025 by rpki-client