Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa
File: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (raw, json)
Hash identifier: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=
Subject key identifier: 3D:B1:5B:1C:02:8F:2F:12:58:4B:54:17:C6:BB:14:C6:D0:78:B3:EA
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019427B50383283E665367A8755E22FAF42B
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa
Signing time: Thu 02 Jan 2025 15:49:21 +0000
ROA not before: Thu 02 Jan 2025 15:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51862
IP address blocks: 46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
2a02:2478::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:03:83:28:3e:66:53:67:a8:75:5e:22:fa:f4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 2 15:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3db15b1c028f2f12584b5417c6bb14c6d078b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:27:a2:31:b0:53:d7:97:b4:e1:1c:16:97:
e5:66:32:01:ea:be:3e:49:76:7a:4e:cb:11:f4:fe:
04:50:8b:f3:bc:a1:06:eb:c5:c1:b6:b5:29:d7:a3:
67:ef:f6:20:62:a2:fd:a2:14:17:08:76:6b:77:82:
67:9e:5f:e0:43:61:69:ca:49:68:00:80:16:57:31:
cb:bb:5d:1c:17:29:3f:85:7c:0d:ba:ca:68:bf:df:
00:f7:8b:72:ab:9b:b7:34:2a:d8:5e:ca:82:6b:b1:
c7:eb:65:e9:1e:22:b2:66:5d:22:04:ad:db:9e:e4:
e8:8c:bd:fc:f3:4e:17:6c:57:c7:e5:68:da:47:e2:
9a:c7:14:0b:ea:eb:3f:fe:49:6a:e7:9e:8a:99:fb:
b4:aa:34:cd:4e:96:95:6d:f7:3d:1f:6c:15:51:7c:
ac:f6:2e:3b:77:72:27:10:20:23:61:d3:21:2d:38:
4d:5c:95:80:4d:27:d7:b2:32:c4:e3:01:92:fe:c1:
85:de:19:1e:48:20:c9:69:d9:1f:d1:85:6e:de:06:
18:0c:3f:a7:b2:f1:7c:56:a6:e2:3c:6d:b2:4f:97:
e6:25:aa:79:57:f1:84:e0:ac:a8:cc:87:49:63:65:
b3:f2:93:98:70:8a:df:66:81:33:99:f7:67:ea:dd:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:5B:1C:02:8F:2F:12:58:4B:54:17:C6:BB:14:C6:D0:78:B3:EA
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.72.0/21
78.137.96.0/21
IPv6:
2a02:2478::/32
Signature Algorithm: sha256WithRSAEncryption
13:8f:42:16:1a:da:5d:ac:a8:14:a6:c1:da:9a:66:97:57:8b:
82:16:20:88:08:d6:1e:0f:c3:e2:52:e0:c3:2c:07:11:ec:4d:
cf:de:97:fc:90:92:96:54:db:7e:2f:81:8d:f2:b5:f1:ae:1a:
35:2b:7c:22:e1:e8:38:cc:c3:38:6d:9c:de:a8:f9:dd:f3:69:
1b:80:7c:d0:72:0d:b1:32:d2:0a:26:10:6d:32:58:30:0f:86:
91:7f:e3:01:63:f6:2c:82:51:53:35:4d:8c:41:db:41:bc:91:
2d:be:4b:cf:f4:a9:28:fd:6e:ea:b4:99:fe:a1:eb:74:d3:5e:
b5:c4:09:1a:85:14:c3:65:08:5e:fd:a6:63:ce:19:3b:a5:1f:
48:db:f9:bd:26:02:36:d9:1f:ad:76:d9:fd:6e:0a:ae:2d:38:
7b:12:e6:2c:fd:d3:08:31:1f:e5:a1:b6:63:d9:60:04:1a:09:
e8:26:08:0d:5f:0d:3c:2e:bc:c2:05:c1:2c:c0:81:8b:3e:ac:
e7:b0:40:88:a9:44:41:c6:86:5b:85:e9:ef:7f:09:bf:58:45:
2f:52:e8:b2:f5:ae:dd:e0:b5:b7:de:05:14:d2:97:69:c3:3e:
25:09:d1:ef:1a:72:b1:84:44:75:33:74:6a:e3:e3:1b:8f:49:
96:02:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:53 2025 by rpki-client