Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa
File: pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa (raw, json)
Hash identifier: t46mDE1wE8ruzgJ1jDR113WnhduQHovpLeyn+ltLQ0w=
Subject key identifier: A6:A2:D1:3F:A6:EB:DD:37:FC:31:2A:58:CD:9A:6F:EC:94:09:76:F2
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 019420686925EF72F801F684431B620444ED
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 212.4.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:69:25:ef:72:f8:01:f6:84:43:1b:62:04:44:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a2d13fa6ebdd37fc312a58cd9a6fec940976f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:51:65:24:3c:02:a5:5c:f5:37:0d:70:b4:
1b:63:4e:1d:f2:aa:10:71:6a:de:d7:0f:6f:7b:1f:
7c:ef:33:f6:ed:e5:62:49:71:1e:c0:10:85:98:5e:
38:93:16:6a:2f:53:77:5d:a8:ee:ba:0d:e9:63:0e:
a7:bf:de:9b:19:71:a4:e6:31:ff:d8:15:18:70:e1:
e4:c1:01:06:a0:d6:46:44:6e:76:50:23:ce:85:de:
38:bb:01:fb:a6:17:47:9c:62:2b:4c:59:70:3f:b1:
75:dc:73:c4:53:99:aa:fc:88:d9:f4:cb:95:61:47:
b8:78:88:c4:6f:0d:73:0c:76:14:db:71:2f:02:94:
eb:91:41:3e:66:2f:fd:5e:71:2c:4a:1c:b0:37:fa:
fb:d5:11:f2:92:d0:fe:08:33:6d:6a:35:48:e2:14:
89:5e:6c:09:63:82:36:91:0c:b4:49:6c:27:ae:f5:
39:ee:bb:70:21:fd:98:b2:fd:97:ad:e0:51:f5:d9:
82:5a:d0:19:10:8b:a5:7f:88:a5:be:37:14:e3:b9:
28:03:86:3f:10:16:a0:f8:52:ef:a5:4f:bb:47:60:
e8:7e:3a:aa:bf:e0:6f:50:93:47:7b:a9:3a:dc:0a:
36:34:21:3f:2b:17:43:2c:66:51:1d:0e:af:a7:cb:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:D1:3F:A6:EB:DD:37:FC:31:2A:58:CD:9A:6F:EC:94:09:76:F2
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.4.240.0/22
Signature Algorithm: sha256WithRSAEncryption
41:6e:75:aa:ec:1e:f9:6c:fb:ba:2a:03:13:ef:f4:f0:da:a6:
3b:55:83:ef:58:b8:88:55:4d:ea:61:c7:44:75:59:b0:f2:3d:
a4:11:f4:17:8b:45:3a:d1:78:20:6a:fe:74:2e:59:4a:0a:0a:
e7:56:3b:87:4b:3b:b9:e2:50:43:57:4a:21:f6:df:a2:00:46:
d5:e1:ae:f2:69:ef:e6:6f:45:75:37:5d:d7:d0:25:02:e7:63:
24:6d:c2:29:a0:ff:2a:f2:9c:5b:7f:75:5b:11:2e:3e:c8:c2:
b0:98:39:f6:69:e8:2a:1d:7a:4d:cd:8b:38:a8:a8:1d:e3:77:
4b:1d:1b:e3:c4:97:81:52:d1:a8:30:ef:5a:d8:57:a7:c9:92:
9d:b1:20:63:2a:89:c8:96:f4:06:98:52:f9:6b:64:34:19:48:
8a:c0:4e:8c:76:97:d8:f6:8c:db:7b:3b:20:a8:93:ca:a0:32:
81:12:40:73:d3:39:38:f3:e4:29:08:18:3f:15:e2:5a:7a:16:
a6:68:d6:9e:eb:83:3a:38:cc:6c:b7:f9:9b:ee:c6:bd:66:f8:
07:34:b9:00:6b:d2:ca:09:7b:a3:e9:8c:66:75:47:19:9e:89:
47:68:a6:5d:09:5c:da:49:a3:42:7f:b2:fa:ac:d1:26:a1:47:
21:ae:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:59 2025 by rpki-client