Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/pu4GRTEZI-DDS8alCpZhtqjD728.roa
File: pu4GRTEZI-DDS8alCpZhtqjD728.roa (raw, json)
Hash identifier: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=
Subject key identifier: A6:EE:06:45:31:19:23:E0:C3:4B:C6:A5:0A:96:61:B6:A8:C3:EF:6F
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 0194228E0A3AE047431208EFBAA64B5E118C
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/pu4GRTEZI-DDS8alCpZhtqjD728.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209861
IP address blocks: 2a01:ffc6:8000::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0a:3a:e0:47:43:12:08:ef:ba:a6:4b:5e:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6ee0645311923e0c34bc6a50a9661b6a8c3ef6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:74:a1:53:53:c2:1f:15:3b:eb:ba:8a:a0:
5e:4e:c0:13:d9:aa:a9:7f:0b:db:b3:2e:9e:32:9b:
87:7f:53:b4:73:b3:bc:29:ec:4a:df:b7:48:5f:2b:
53:e6:03:00:0b:29:38:f6:6f:cc:73:43:26:d4:2e:
b2:5c:72:58:1a:5c:ad:11:e5:9a:8f:e8:8f:14:bd:
32:11:79:83:87:1f:52:fa:45:7f:9e:12:e2:f5:24:
6d:a4:9b:68:8e:b2:1e:19:8a:a2:4d:72:f4:f1:a5:
fb:5c:58:87:f6:5b:c4:64:c1:26:8b:ee:18:89:af:
54:5a:2d:c9:0d:90:d1:fe:08:4b:69:6b:60:54:18:
93:46:1e:97:f2:ce:e4:9c:b8:c6:70:dd:7a:fc:55:
60:b2:7c:33:eb:95:f2:61:a4:c2:b2:bf:8f:1a:bc:
0b:d1:34:31:13:f0:24:79:7d:be:ed:14:40:3a:c3:
90:06:1f:b3:60:14:97:58:c6:a3:d5:4e:67:5b:fa:
a2:18:ec:33:a8:9f:6d:14:8c:cb:ff:ce:9e:55:37:
18:09:50:0a:16:83:9c:bd:0b:9a:eb:a7:1b:fd:c1:
c6:e1:54:1e:a9:da:07:24:c8:8a:6b:80:7a:51:40:
5b:43:16:64:cf:71:bc:06:f8:ed:a3:34:b7:c1:df:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EE:06:45:31:19:23:E0:C3:4B:C6:A5:0A:96:61:B6:A8:C3:EF:6F
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/pu4GRTEZI-DDS8alCpZhtqjD728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc6:8000::/34
Signature Algorithm: sha256WithRSAEncryption
c9:d4:70:6e:e0:c4:40:66:5b:a8:2d:bb:67:d9:d1:26:44:33:
ee:7b:5e:72:8c:f5:9e:94:5b:82:fa:d8:78:9a:51:fc:dd:6d:
ef:03:bb:4b:bd:42:6c:21:fe:ce:ec:5a:85:dd:c4:20:60:0c:
d4:79:95:31:5e:5f:d3:c5:2a:78:6d:ae:6e:0f:7e:8d:79:77:
7f:d3:54:f5:81:70:9c:93:df:aa:f9:40:90:6f:fd:b2:69:c9:
62:9a:2e:27:3d:42:4a:bd:75:c2:e7:8f:9b:4f:0f:d5:23:51:
7b:00:cb:0e:37:6d:16:06:dd:f9:71:8f:55:bd:15:dd:6b:eb:
b6:c5:63:8c:c1:07:ee:f2:95:65:47:87:8d:67:4c:18:47:ab:
5d:49:8b:86:64:84:bc:3b:85:81:fc:0e:de:12:e5:1b:d4:e2:
b9:04:12:07:57:82:14:1a:13:65:46:ce:58:74:90:ee:7e:72:
8b:15:4f:62:b5:bd:57:79:df:03:76:cc:a1:32:2c:61:7b:c3:
bf:23:0c:67:6c:86:50:87:fa:ef:eb:e1:a3:80:71:06:44:b6:
92:91:37:82:10:36:55:b4:57:03:57:50:4a:49:2a:ef:ce:0c:
ad:f8:83:24:6e:36:c4:96:ef:82:41:8b:2e:aa:dd:5c:29:19:
b9:16:a1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:00 2025 by rpki-client