Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa
File: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (raw, json)
Hash identifier: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=
Subject key identifier: 3F:19:F8:67:46:DD:5A:65:9C:93:98:DD:1F:51:5A:B9:E0:6C:39:FD
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019422FB6DB0C2E078D743867DAC7BAA605F
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203600
IP address blocks: 2a06:e540::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6d:b0:c2:e0:78:d7:43:86:7d:ac:7b:aa:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f19f86746dd5a659c9398dd1f515ab9e06c39fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:37:08:a9:45:ac:28:b1:3b:10:7a:4e:e8:
dc:76:4a:40:a6:84:67:d0:05:6a:dd:af:4a:e9:25:
b1:0c:56:62:1a:0a:00:0b:0b:88:5f:99:76:19:d4:
87:12:a6:a4:95:dd:38:85:b0:f1:35:78:bc:87:8a:
92:4b:a6:8a:a2:50:f8:82:e2:e4:b1:84:8c:ea:e4:
17:43:f5:51:59:a6:29:e1:ca:ed:be:5c:84:37:aa:
78:8c:b1:d1:a1:69:58:65:bb:a4:5e:98:25:8c:e2:
6a:35:10:17:20:cb:dc:50:e8:be:5e:68:96:38:76:
db:46:9b:00:e1:22:53:6f:86:ee:4f:35:a0:7c:3b:
97:b5:f3:8f:0f:88:96:f1:0c:24:85:5c:77:10:29:
11:40:2c:ee:c3:08:76:12:e5:b8:20:ce:7b:71:cf:
6b:10:ad:3e:b0:92:b0:b2:22:69:19:f6:de:dd:1a:
a9:65:91:2f:e8:c8:36:cd:d7:2a:e6:2d:63:7f:69:
28:55:04:e8:0b:68:ad:1d:d5:24:dd:60:f4:e7:94:
f2:31:53:12:8b:bb:8a:46:da:bc:c2:d3:85:3a:54:
b5:f5:44:7d:b9:8b:fa:4e:2e:cd:c3:c1:bf:18:14:
11:3a:13:33:9a:33:db:e9:cf:81:ce:f1:d6:20:cd:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:F8:67:46:DD:5A:65:9C:93:98:DD:1F:51:5A:B9:E0:6C:39:FD
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e540::/29
Signature Algorithm: sha256WithRSAEncryption
54:5d:01:61:c0:57:85:e1:46:8e:51:fd:71:ea:31:bb:64:81:
32:63:78:3a:a4:fc:12:35:79:38:76:14:f2:0a:e2:e4:e3:52:
da:4d:8e:38:2c:f6:56:48:31:84:c5:94:b7:0e:63:82:13:67:
d0:ac:d9:d9:6c:73:15:ad:14:9e:4e:7e:12:43:dd:3b:db:05:
be:6f:d6:5c:82:b3:0f:fc:c1:54:f4:2f:25:6f:23:78:9f:41:
d8:9c:9e:2a:c8:a1:5a:3b:b4:19:4c:bc:54:3c:43:6e:83:e6:
d7:4c:95:33:d8:1c:e6:4a:59:a3:13:fc:67:99:61:57:fe:27:
92:62:21:33:25:2f:64:84:05:2a:fd:ea:8d:47:bf:5d:61:79:
cc:40:66:da:ff:73:89:65:69:0a:56:19:8d:c2:e8:0e:5c:91:
7b:63:73:0a:96:96:08:1a:4d:ca:66:e9:be:26:b1:78:b2:69:
da:9b:0e:17:6c:25:77:0f:5b:ab:d4:90:1a:a5:47:fb:79:84:
4c:98:b3:34:4f:15:27:e9:71:e2:80:45:17:4d:64:ce:7b:43:
86:cb:23:54:f5:fc:bd:d2:9a:b7:5c:cd:3d:25:a7:61:9f:74:
7f:a2:03:c1:66:30:95:8e:e9:88:d6:10:e1:66:02:3d:20:43:
e0:2f:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:10 2025 by rpki-client