Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/PFjd2yWfyUqACNexTKNE7uw-CUw.roa
File: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (raw, json)
Hash identifier: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=
Subject key identifier: 3C:58:DD:DB:25:9F:C9:4A:80:08:D7:B1:4C:A3:44:EE:EC:3E:09:4C
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 01941FFA37FC851B2634A7AAA608068A0F55
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/PFjd2yWfyUqACNexTKNE7uw-CUw.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207411
IP address blocks: 2001:678:c38::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:fc:85:1b:26:34:a7:aa:a6:08:06:8a:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c58dddb259fc94a8008d7b14ca344eeec3e094c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:15:67:c5:11:ea:44:0b:aa:64:10:73:1b:
4d:8a:82:86:18:d9:b3:92:e8:81:f3:9c:09:31:16:
67:1a:4e:66:58:77:10:0c:2e:7c:b9:64:08:34:7c:
ab:b6:69:95:69:69:3a:59:25:7a:c2:11:32:32:46:
10:2f:c8:59:01:d9:40:12:e9:60:61:ed:94:7c:cf:
39:00:7d:80:35:cd:49:4b:6c:ab:9d:6f:b9:30:a4:
95:ae:89:42:dc:e8:bf:1c:aa:06:37:07:ae:e3:72:
b7:33:53:fd:2d:56:8f:13:57:a5:66:b1:24:a2:04:
aa:59:f4:de:47:6a:b6:a5:0d:b7:d9:21:ef:05:b4:
0b:5d:1a:5d:42:c6:68:49:07:5a:fe:28:a5:16:9a:
8b:10:74:af:82:46:0e:f5:16:85:83:42:4f:75:55:
cf:91:55:fa:18:de:93:0e:c1:4e:c7:51:44:2f:57:
24:b6:ee:d8:e0:b8:4d:4f:ab:33:a4:87:67:01:8e:
1a:64:9b:ef:76:d5:34:a6:da:44:5a:5e:c5:13:f5:
d6:0a:68:29:ef:81:43:3b:89:d6:17:aa:6f:48:83:
61:5d:9e:6c:09:90:71:04:36:aa:36:35:6d:70:34:
f4:e2:3b:61:b5:fb:cf:90:a4:28:6a:8b:c7:35:5f:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:58:DD:DB:25:9F:C9:4A:80:08:D7:B1:4C:A3:44:EE:EC:3E:09:4C
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/PFjd2yWfyUqACNexTKNE7uw-CUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c38::/48
Signature Algorithm: sha256WithRSAEncryption
32:5a:2e:85:1e:cd:73:99:8c:a8:4f:59:8a:42:28:21:bf:63:
61:08:75:03:dd:2f:96:2a:39:d1:13:c2:9e:6e:45:a5:c8:fc:
d6:08:5d:b2:95:1e:57:95:4e:4b:fa:06:53:cb:7b:a6:54:94:
9a:a7:7f:b8:0f:57:97:d3:4d:9e:56:92:e7:7c:db:36:19:2d:
8d:f5:b5:19:d6:47:e7:76:76:06:a3:c4:8a:26:b3:32:5b:0d:
c1:42:38:bf:a9:21:95:f3:f4:16:21:d3:28:1e:37:fd:ad:b8:
43:cb:ce:c7:f1:0e:2d:af:87:1a:97:70:9f:3d:6f:3e:ce:68:
6d:1b:5a:c4:43:d9:65:13:f9:ab:a9:34:5d:58:00:e7:4b:82:
df:7f:aa:cf:37:11:89:4c:f6:cf:78:c3:1f:3e:a2:3c:f2:40:
c9:b8:7c:fc:99:14:bb:c9:69:55:4c:da:e3:cb:98:3b:92:49:
da:5f:da:04:7a:e9:41:df:05:92:bc:b3:5f:62:3c:b5:b0:15:
6b:e5:93:0d:74:af:05:84:93:7f:8b:d0:c7:dd:61:f8:ea:f9:
df:2d:fe:42:af:f1:ef:62:ad:a8:40:8f:bf:58:d0:fb:f6:d6:
f6:65:55:e3:c9:c2:b7:42:b9:12:e1:1b:da:b9:13:38:b6:15:
5f:78:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:10 2025 by rpki-client