Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/PajWCIMvcFk4AhOAYqjPPCoKGSM.roa
File: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (raw, json)
Hash identifier: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=
Subject key identifier: 3D:A8:D6:08:83:2F:70:59:38:02:13:80:62:A8:CF:3C:2A:0A:19:23
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 01942747D4260D606F28764A2E7470314F39
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/PajWCIMvcFk4AhOAYqjPPCoKGSM.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47887
IP address blocks: 81.28.112.0/20 maxlen: 24
82.212.64.0/18 maxlen: 24
185.175.248.0/22 maxlen: 24
188.123.160.0/19 maxlen: 24
2a00:18d0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d4:26:0d:60:6f:28:76:4a:2e:74:70:31:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3da8d608832f70593802138062a8cf3c2a0a1923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:cd:80:53:6a:78:7f:6d:22:14:d7:33:1e:
78:65:e3:6b:65:b2:a2:31:e5:47:89:a4:aa:c9:2d:
c6:29:06:3a:02:81:fa:e1:07:92:e7:f0:c3:42:eb:
73:0c:92:dc:e1:58:a6:96:68:fd:99:ee:a4:bf:ba:
ad:25:cc:41:96:10:06:36:31:c0:d7:e9:60:c5:07:
46:6b:cd:72:83:64:7f:c3:8a:bc:39:4c:37:ca:a1:
31:1c:85:2e:ef:53:af:f3:7c:90:02:09:03:e5:73:
45:99:6f:e1:6f:3b:00:3a:69:d1:f8:f0:c5:2b:de:
1c:b7:94:a0:aa:c7:e8:3d:86:c6:fa:fc:81:0e:19:
f4:0f:a1:65:d6:bd:14:8d:28:1e:f7:3a:dd:68:00:
d0:40:df:03:80:de:4f:26:73:50:7e:da:3a:22:34:
36:88:43:6b:29:b1:01:d5:94:d3:84:fb:70:77:5e:
ab:98:15:e5:26:65:39:27:c9:e1:37:9c:d6:ae:42:
4e:67:80:53:64:51:1b:76:4f:33:fe:8c:72:ce:3e:
71:af:d0:35:3e:1f:e7:92:80:b8:ce:97:9b:ae:df:
f1:e9:63:ca:f9:47:82:ac:dd:81:90:d2:2a:26:ee:
2f:f6:c0:32:aa:6b:9b:60:db:8d:05:f9:a6:1b:9b:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:D6:08:83:2F:70:59:38:02:13:80:62:A8:CF:3C:2A:0A:19:23
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/PajWCIMvcFk4AhOAYqjPPCoKGSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
IPv6:
2a00:18d0::/32
Signature Algorithm: sha256WithRSAEncryption
16:fb:50:45:08:35:06:02:6d:09:5d:df:27:dd:4d:e4:e8:53:
ba:49:12:f4:b8:04:fa:7f:fd:9d:0f:3d:d6:56:88:41:6e:82:
13:62:48:d4:38:57:c3:2f:8d:a9:6a:6d:4e:b9:06:95:8b:bc:
e2:82:f7:f4:73:d0:31:f5:e0:b9:c6:78:74:5f:a4:90:4c:f6:
1d:db:6e:67:53:a8:ae:10:a6:ed:e4:3a:04:9f:a8:17:75:52:
25:5d:80:ec:e7:bf:5b:ed:a6:db:e8:cc:34:8b:e1:78:63:61:
7e:0e:12:b9:74:bf:6a:2e:d1:2f:a2:d7:fe:d0:4c:55:81:e9:
6a:de:ae:74:24:7d:3a:8c:b7:9d:99:89:91:2d:d5:0f:05:a0:
b7:eb:7c:97:bd:84:61:d6:9e:db:a5:26:1e:b6:d3:bb:5d:1d:
d9:db:d1:ce:a0:c1:03:5a:d1:98:c1:13:07:0c:1d:24:5c:0b:
48:8a:c9:ec:27:98:59:2a:1a:e7:f8:f6:bb:d4:0f:ee:c4:e0:
dd:44:a7:bf:3b:7c:06:d9:e6:21:37:ba:eb:bf:5c:af:1e:ae:
25:23:7b:37:b6:eb:de:6b:35:5f:60:61:c2:58:6c:4c:52:d8:
52:cd:dc:0a:eb:bb:80:20:79:59:cd:82:ea:ae:00:2b:80:09:
c0:f3:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:31 2025 by rpki-client