Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/PBiom43THD1F1SBGVmDFN9WwnMo.roa
File: PBiom43THD1F1SBGVmDFN9WwnMo.roa (raw, json)
Hash identifier: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=
Subject key identifier: 3C:18:A8:9B:8D:D3:1C:3D:45:D5:20:46:56:60:C5:37:D5:B0:9C:CA
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F3D514B9AFCB23A9D79343B39723F
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/PBiom43THD1F1SBGVmDFN9WwnMo.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44325
IP address blocks: 2001:1af0:9000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3d:51:4b:9a:fc:b2:3a:9d:79:34:3b:39:72:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c18a89b8dd31c3d45d520465660c537d5b09cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:46:21:60:b4:06:75:39:71:60:45:e2:a4:
89:88:9a:f2:c3:6b:49:fe:3e:11:41:db:74:87:c5:
0c:47:2a:11:48:b4:a6:fd:06:09:65:e8:9e:5a:79:
ba:9f:ea:d0:55:04:fd:51:1d:65:c8:0e:0d:79:24:
a8:6e:9f:7f:c3:37:df:72:17:21:69:32:ed:bf:99:
db:a1:33:ea:20:83:3c:88:42:0d:13:78:cc:da:20:
2b:ba:d8:53:88:50:aa:e1:60:f7:b7:9b:70:e9:b3:
9a:71:6e:f5:e6:a4:24:96:9d:ba:b3:fb:a2:24:a8:
e3:8e:04:b5:9d:65:76:60:38:25:8a:df:8f:12:9b:
ec:cb:ad:4f:45:ad:ce:b8:76:8d:ae:e9:19:cc:86:
70:29:c5:8d:c1:9e:3f:86:ef:54:cf:83:f9:8d:27:
7f:b1:40:e5:f9:f0:96:a5:43:29:ac:0e:ca:1e:44:
1b:ab:11:a6:34:53:42:8b:b0:ca:ac:0a:e8:48:29:
7c:4e:d3:ea:bc:ad:63:c1:64:20:36:78:22:f9:75:
f3:99:36:95:1d:81:44:e7:41:e3:6c:69:f8:25:69:
89:bd:d3:b8:eb:26:2b:ae:7e:a0:c8:73:40:84:92:
d9:f3:e1:3e:48:01:1e:02:13:99:d7:a3:19:70:ad:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:18:A8:9B:8D:D3:1C:3D:45:D5:20:46:56:60:C5:37:D5:B0:9C:CA
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/PBiom43THD1F1SBGVmDFN9WwnMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1af0:9000::/48
Signature Algorithm: sha256WithRSAEncryption
9b:9e:18:6e:b6:ca:96:e9:49:bc:f6:94:5d:fc:ff:77:79:b8:
20:83:62:d9:73:8a:7a:78:02:91:99:f7:8e:d7:bb:c7:46:4f:
63:6f:07:a9:49:f8:6f:7f:b9:6d:36:02:71:d2:12:62:59:f0:
df:b4:ca:00:bd:2d:d0:a5:06:d9:0e:9e:90:ce:02:2c:ad:43:
3b:22:73:de:ed:02:c8:98:bc:bc:fc:db:d2:1e:4d:63:66:54:
8e:18:8c:d9:54:cb:b8:56:96:ef:35:b1:0e:23:9c:83:b4:69:
cc:ec:99:e0:e0:1b:a8:a5:38:19:f0:54:ba:fb:d1:a1:7f:d5:
9c:ff:ca:17:72:0f:b5:fa:94:2d:07:0c:dc:34:14:a8:05:be:
ac:7b:0e:c1:66:31:53:2f:6d:bf:01:e9:87:3f:ea:a0:d0:70:
cc:8c:46:47:51:19:5d:4b:07:64:d1:1f:9d:7e:6c:8d:e3:22:
e7:75:f2:57:0f:5a:72:c1:b3:bf:7c:20:e6:1a:52:24:32:28:
47:09:06:d4:e1:38:ec:c1:91:95:84:a8:71:1a:c0:02:e5:d6:
a5:66:f7:be:8e:e7:67:3b:dc:23:b6:4b:ad:04:e9:cc:9c:e0:
09:59:65:f5:a2:77:3f:4e:70:dd:6d:01:ed:18:7f:d4:c6:5f:
e5:49:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:46 2025 by rpki-client