Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/PBeiTxVVl13KulRPara1RXYVicA.roa
File: PBeiTxVVl13KulRPara1RXYVicA.roa (raw, json)
Hash identifier: RXsTBTBPcZfgBdF/8hAfnipircCVtF7KKV+ZAN7eFr0=
Subject key identifier: 3C:17:A2:4F:15:55:97:5D:CA:BA:54:4F:6A:B6:B5:45:76:15:89:C0
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 019426D96478F4EDFAF1AA85298980AEEE5D
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/PBeiTxVVl13KulRPara1RXYVicA.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210874
IP address blocks: 45.10.100.0/22 maxlen: 22
2a0e:3700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:64:78:f4:ed:fa:f1:aa:85:29:89:80:ae:ee:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c17a24f1555975dcaba544f6ab6b545761589c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:fa:74:cb:df:3a:79:5b:fb:29:23:fc:c4:
46:df:dc:25:3b:d2:3e:fc:47:d5:10:42:c2:69:fe:
54:1b:b6:cf:f6:f7:d2:4f:c0:0a:f0:5a:7d:79:49:
3d:a2:06:a7:ce:19:23:fc:3d:bd:bf:3a:86:d3:ee:
57:22:47:a3:bc:d9:02:7a:8d:ce:0e:80:97:1c:da:
e9:0b:aa:fe:cb:9e:46:4e:7b:cd:e5:8c:3e:57:b8:
28:e0:5e:99:c5:46:c5:70:a1:54:78:73:a7:af:07:
86:e2:22:ea:e3:c1:67:a6:57:40:69:db:0e:0f:6e:
5c:26:b7:9b:08:92:4f:e0:af:07:98:95:57:25:7e:
06:05:eb:83:3a:31:00:bb:39:2c:34:5d:94:4d:fb:
98:9d:bc:78:d8:41:5c:ac:69:0f:83:5a:0d:f0:07:
bc:65:6f:e8:e8:76:8d:0b:7d:19:f8:c3:43:a8:bc:
f8:4b:8c:d0:2b:c8:4d:db:8d:c4:43:2b:56:9c:9b:
68:ee:e0:9f:bb:f5:b9:59:9b:d4:29:13:93:cc:fc:
4a:d5:80:05:3b:ce:a4:44:7c:30:bf:11:51:84:ae:
f2:39:25:81:d0:be:f1:f5:cb:24:92:12:e9:d2:53:
78:2c:fe:62:7d:c2:d1:e9:53:61:26:da:e4:72:76:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:A2:4F:15:55:97:5D:CA:BA:54:4F:6A:B6:B5:45:76:15:89:C0
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/PBeiTxVVl13KulRPara1RXYVicA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.100.0/22
IPv6:
2a0e:3700::/29
Signature Algorithm: sha256WithRSAEncryption
6a:60:a2:78:82:b5:29:34:16:21:15:58:21:37:14:71:47:17:
29:56:51:ab:e8:07:9f:58:69:6b:8a:16:f7:0a:cf:83:92:39:
bb:44:ee:ad:83:21:55:30:89:26:b6:75:ae:e8:c1:3c:17:f4:
6f:8a:0b:1b:ee:da:3c:8d:b2:24:1f:63:06:7a:ba:80:8f:5b:
af:9b:5e:0b:c1:1a:f0:5d:05:87:38:6d:b6:54:6a:56:b5:4a:
26:df:9b:ef:77:3d:86:df:48:35:79:e9:5b:ba:f1:a2:79:7c:
8a:86:61:b8:2d:db:cc:4a:00:c7:63:68:37:e8:f1:9a:14:be:
0d:90:d6:30:30:0b:9f:fd:ce:68:24:ca:1c:99:8c:d1:46:1e:
7e:37:91:0a:1e:94:7e:55:f4:7b:e8:e6:11:d1:ae:c3:d1:5b:
b7:41:a0:17:6b:a0:ea:b6:2d:76:4c:e6:49:0a:20:76:f1:0d:
5b:a4:2c:d2:d6:68:69:2d:e0:da:b5:aa:e9:22:81:a0:9d:3e:
64:8c:cf:c8:ee:0d:35:c4:10:45:b1:2c:10:8c:41:a1:ba:59:
fc:a7:83:8c:f6:44:25:67:41:1b:26:d3:e3:70:d3:a4:b8:10:
b9:15:5a:4f:52:65:e0:43:c6:ee:90:40:7d:bf:b3:34:70:a7:
e5:57:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:11:11 2025 by rpki-client