Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/pGzRbO_F0LsjPyCl5sKVkyT75Bo.roa
File: pGzRbO_F0LsjPyCl5sKVkyT75Bo.roa (raw, json)
Hash identifier: yG1El46aKYr6nMZGPVYpfh94NvWlqZDwSjkT1AEwnpU=
Subject key identifier: A4:6C:D1:6C:EF:C5:D0:BB:23:3F:20:A5:E6:C2:95:93:24:FB:E4:1A
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019425FD42F7298C852542DE7441CCA2E1F3
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/pGzRbO_F0LsjPyCl5sKVkyT75Bo.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 2a09:9340:1800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:42:f7:29:8c:85:25:42:de:74:41:cc:a2:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a46cd16cefc5d0bb233f20a5e6c2959324fbe41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:36:a3:e7:e5:7e:af:c4:de:6d:d4:b8:a4:
28:48:a5:ca:0b:23:0d:31:90:b7:09:fb:c6:58:8e:
92:47:ba:46:8b:58:ac:01:a3:39:b0:6e:0f:6b:34:
b1:c9:72:d9:27:9a:b2:82:97:ab:ed:98:61:95:bb:
f5:ef:d6:52:91:f2:7c:ee:45:19:e6:97:05:5c:d3:
d4:eb:a4:0a:7c:89:5b:e9:50:58:27:e0:0a:21:c2:
bc:ea:f7:be:a5:25:e2:69:26:85:dc:c3:22:7c:22:
fd:a9:a5:a3:47:7d:ba:8c:6c:00:4d:e7:9f:28:4c:
9d:58:8b:16:60:b4:bc:b1:54:a2:c3:3f:b3:d0:66:
0d:e6:73:55:ac:94:13:ae:c0:7f:09:ee:60:19:96:
ad:59:df:10:fc:53:ab:51:61:0e:e3:c0:df:f0:0b:
18:62:65:f6:38:dd:d6:b4:73:47:94:72:0a:c5:22:
5e:58:45:b0:c2:f7:38:42:67:e2:ba:89:3b:25:ba:
09:6b:1c:b9:1c:ce:87:de:de:57:95:ba:8e:34:04:
af:82:7c:a9:48:27:ec:3c:be:af:b0:1b:2f:3c:78:
3e:74:8d:18:52:3a:f7:12:eb:02:b5:3a:44:4c:e2:
29:b9:f0:77:03:5f:2f:2a:74:dc:6f:83:ee:af:49:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:D1:6C:EF:C5:D0:BB:23:3F:20:A5:E6:C2:95:93:24:FB:E4:1A
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/pGzRbO_F0LsjPyCl5sKVkyT75Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9340:1800::/37
Signature Algorithm: sha256WithRSAEncryption
32:55:37:3b:28:b1:13:4e:b5:99:10:26:20:3e:c3:b7:74:ae:
14:10:97:4b:93:ac:61:12:f8:27:54:49:96:c3:29:01:dc:eb:
eb:35:09:b8:bc:4d:04:d2:68:07:f6:31:2e:35:d1:ae:64:90:
b4:41:b7:ee:6f:31:e8:5e:a9:a8:f9:ac:19:ee:ff:8d:19:e1:
e8:3b:ff:6b:18:9b:cd:54:c2:e3:ee:7c:da:80:3e:c8:da:a6:
82:31:76:c3:18:0b:8e:49:d4:fc:47:ca:8c:54:37:73:b6:9e:
23:86:49:9b:32:cf:ba:e6:dc:7b:28:77:dc:8d:7c:c2:4c:24:
3a:54:4e:ba:b4:98:77:49:91:79:bc:77:85:04:aa:a9:27:0a:
c2:17:eb:67:c2:83:d6:7a:c1:a8:4e:29:27:6a:f9:75:c8:23:
f9:33:90:5c:d0:50:40:49:7c:8b:74:26:a7:17:b7:f2:5d:21:
21:91:ef:05:d4:ea:8d:57:94:7d:81:76:96:5b:a2:10:21:d9:
33:71:4d:56:e8:df:dd:64:a2:e7:2f:9b:8f:b0:66:79:a7:32:
f9:aa:77:3f:19:88:54:8e:27:79:42:ec:36:f9:bf:8d:85:a4:
9a:00:fa:eb:0d:55:75:d8:76:3a:e5:db:08:4e:08:e3:af:bc:
4c:a8:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:57 2025 by rpki-client