Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/PTqvLbs-crQCXH75GKZKj2e3XH4.roa
File: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (raw, json)
Hash identifier: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=
Subject key identifier: 3D:3A:AF:2D:BB:3E:72:B4:02:5C:7E:F9:18:A6:4A:8F:67:B7:5C:7E
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01941FFA5E576558681A507E6017FC59529B
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/PTqvLbs-crQCXH75GKZKj2e3XH4.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205063
IP address blocks: 94.127.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5e:57:65:58:68:1a:50:7e:60:17:fc:59:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3aaf2dbb3e72b4025c7ef918a64a8f67b75c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f8:1b:97:42:06:a1:15:2a:15:a8:e6:9e:c3:
42:7e:61:23:87:5a:16:98:b3:ae:79:cb:7a:42:ee:
b4:1d:43:83:29:3d:c1:81:64:43:61:82:aa:5a:25:
4e:5b:bc:cc:0b:db:7b:8b:07:77:a9:9e:a3:34:9f:
98:e0:f9:07:9e:d6:42:ec:8a:05:8a:bf:89:9b:4e:
ca:08:6a:f2:1f:8d:6b:ff:ec:47:c1:a4:4c:7d:5b:
5f:ab:47:c3:2f:b0:2a:65:b5:b5:ad:18:1a:05:e6:
82:63:f1:01:c8:8a:38:b2:fd:69:58:11:35:9e:0b:
4b:09:9c:67:2f:a6:be:04:41:e5:16:78:ca:26:a5:
77:00:a8:ff:dc:6e:7e:a3:9b:6f:06:d2:7d:29:29:
64:07:79:94:d9:16:80:04:37:61:c2:7a:2a:6d:98:
4c:54:57:76:e1:9e:68:f1:d2:a7:a8:a6:67:94:d1:
a7:02:4b:aa:b3:f2:64:85:e0:45:87:a3:f9:01:5c:
05:bf:99:16:48:a1:d7:67:f6:8e:3e:85:48:57:5b:
5a:28:7a:46:52:cc:96:96:df:d5:f2:7b:2f:58:c7:
9f:9c:6c:b6:f8:3e:ce:50:f7:f7:0e:f9:ee:cd:0a:
7d:00:65:4a:f7:5d:34:2d:f6:af:4c:9e:bf:d7:8b:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:AF:2D:BB:3E:72:B4:02:5C:7E:F9:18:A6:4A:8F:67:B7:5C:7E
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/PTqvLbs-crQCXH75GKZKj2e3XH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:52:6c:aa:b1:06:b8:90:eb:5c:15:f3:f0:34:15:8b:1f:5b:
86:46:67:e5:1f:63:43:b4:d2:f0:01:ae:25:dc:3a:da:88:4d:
71:89:62:32:3d:e0:9b:10:f9:06:4d:9d:e1:a1:3e:20:40:35:
a7:ce:9f:cc:4b:43:59:28:9d:c6:68:35:b5:0e:c6:b0:19:47:
0d:90:76:cd:d9:4e:75:08:1c:f3:79:5e:76:18:73:61:d3:7e:
10:bc:7b:94:d0:1d:69:ec:1a:2b:d1:a0:e0:94:4a:79:31:f3:
62:d8:46:41:3a:5d:b9:4e:67:68:ab:b5:44:dc:dd:c0:2a:b7:
31:7a:0e:b3:52:5a:10:14:f4:37:e8:6a:17:e3:85:b2:37:67:
fe:6e:15:71:d0:2d:44:0d:de:d0:7d:52:d8:6c:c3:05:34:9a:
2a:4e:90:c9:f6:77:d8:10:78:a0:c2:8a:d2:52:0b:90:26:f7:
63:fa:0c:0b:2f:64:26:28:7a:45:c8:39:1d:0b:e2:90:01:84:
c3:82:d6:f5:84:f1:ff:d4:91:85:6e:d7:1a:39:2b:02:c3:d0:
6a:ca:71:34:f5:1c:4d:bd:29:5a:c1:55:b0:90:76:50:d4:40:
28:3c:da:90:66:8c:47:24:17:84:f0:b0:36:c8:eb:2e:85:27:
b3:b3:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:31 2025 by rpki-client