Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PIUUX50mYJGhgDFWDFUmAJ1hDsk.roa
File: PIUUX50mYJGhgDFWDFUmAJ1hDsk.roa (raw, json)
Hash identifier: tszBcW+/tiL65eKFk4ZbBLo8GcsIjm+nQevwADWCvvs=
Subject key identifier: 3C:85:14:5F:9D:26:60:91:A1:80:31:56:0C:55:26:00:9D:61:0E:C9
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEA68A7342AACC44E9CB7FBA09B59
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PIUUX50mYJGhgDFWDFUmAJ1hDsk.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212996
IP address blocks: 2a0c:9a40:8d00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ea:68:a7:34:2a:ac:c4:4e:9c:b7:fb:a0:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c85145f9d266091a18031560c5526009d610ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:ee:4a:23:ec:ae:6c:f5:e8:05:63:8a:0f:
c7:6d:2a:c6:b6:3c:5c:e6:03:25:25:cf:1f:b9:94:
3b:ce:af:be:5e:04:80:f5:cb:46:dc:14:78:c0:f3:
eb:e8:60:8e:af:56:f1:b1:66:a9:3d:63:8e:d2:a4:
93:a9:18:e8:6a:66:36:69:44:93:80:eb:2e:8d:9b:
71:78:19:2d:81:0a:49:48:9f:d0:d7:3b:db:20:24:
00:06:89:14:02:76:c3:2a:2a:f2:4c:8d:ea:2b:d0:
36:2e:a3:1e:f2:8d:78:fd:11:9a:84:60:31:97:6b:
f9:50:7a:bc:f9:bd:a4:8e:93:cf:12:46:2e:b6:75:
c9:68:34:19:aa:71:2d:d2:3f:ec:96:49:49:44:54:
0c:56:88:1a:d9:6a:5f:54:a6:b0:58:ef:09:b7:8d:
66:2a:35:91:19:19:d3:ca:0f:19:40:a1:b1:ed:16:
1f:11:00:c9:fc:70:c8:87:0a:1c:b4:cf:12:e6:c8:
3f:f4:52:ef:3b:57:4b:68:29:37:d8:33:a4:21:40:
58:55:41:39:a8:b7:4a:a7:81:9c:e3:03:15:f9:b2:
1a:e1:87:46:27:e1:3e:36:79:7d:6e:4b:29:e6:9c:
e0:3f:e6:50:13:82:5c:7a:12:e8:17:f2:ed:2c:1d:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:85:14:5F:9D:26:60:91:A1:80:31:56:0C:55:26:00:9D:61:0E:C9
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PIUUX50mYJGhgDFWDFUmAJ1hDsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8d00::/40
Signature Algorithm: sha256WithRSAEncryption
80:4f:6c:1e:3c:3b:50:5e:27:6e:a0:dd:29:bc:f6:0c:01:b5:
28:80:b4:bf:c2:76:27:23:0e:64:66:00:ce:30:ff:2d:06:41:
23:23:3e:19:02:18:7b:2a:7e:c9:11:6a:db:ec:07:38:06:bf:
fc:64:56:19:98:94:95:bf:cc:26:6f:df:6f:cb:c4:31:40:e5:
88:b8:76:5d:e8:31:ca:77:9b:f6:00:6a:5d:b1:5b:6e:86:76:
83:4e:17:57:b3:76:3f:59:f6:46:5e:1c:98:5e:9e:c6:91:f6:
e2:ff:c0:87:23:20:2d:b5:cb:e5:d1:e2:ce:0d:c8:b4:53:b8:
3d:2a:15:a4:ff:ac:99:23:85:48:f7:96:d9:03:a0:6c:a2:0a:
20:84:78:32:81:72:93:71:c2:56:e8:07:36:f4:96:9c:33:86:
67:6b:94:d5:0d:f2:8b:4c:dd:a5:9c:e8:6c:f5:10:0c:32:06:
ad:24:de:a5:e3:9e:99:12:1e:bd:91:7e:37:e4:7d:a1:83:17:
88:89:b4:c2:89:84:30:42:9d:55:71:6d:bf:4a:63:96:18:59:
7e:cc:e6:ff:25:b3:80:87:41:31:98:56:d0:fe:ae:ee:08:f5:
29:0c:ce:70:75:3e:26:5a:e0:e1:ab:af:72:4c:80:05:56:20:
99:32:76:cd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQi++popzQqrMROnLf7oJtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzg1MTQ1ZjlkMjY2MDkxYTE4MDMxNTYwYzU1MjYwMDlkNjEwZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHzuSiPsrmz16AVjig/HbSrGtjxc
5gMlJc8fuZQ7zq++XgSA9ctG3BR4wPPr6GCOr1bxsWapPWOO0qSTqRjoamY2aUST
gOsujZtxeBktgQpJSJ/Q1zvbICQABokUAnbDKiryTI3qK9A2LqMe8o14/RGahGAx
l2v5UHq8+b2kjpPPEkYutnXJaDQZqnEt0j/slklJRFQMVoga2WpfVKawWO8Jt41m
KjWRGRnTyg8ZQKGx7RYfEQDJ/HDIhwoctM8S5sg/9FLvO1dLaCk32DOkIUBYVUE5
qLdKp4Gc4wMV+bIa4YdGJ+E+Nnl9bksp5pzgP+ZQE4JcehLoF/LtLB0IxwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDyFFF+dJmCRoYAxVgxVJgCdYQ7JMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvUElVVVg1MG1ZSkdoZ0RGV0RGVW1BSjFoRHNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQI0w
DQYJKoZIhvcNAQELBQADggEBAIBPbB48O1BeJ26g3Sm89gwBtSiAtL/CdicjDmRm
AM4w/y0GQSMjPhkCGHsqfskRatvsBzgGv/xkVhmYlJW/zCZv32/LxDFA5Yi4dl3o
Mcp3m/YAal2xW26GdoNOF1ezdj9Z9kZeHJhensaR9uL/wIcjIC21y+XR4s4NyLRT
uD0qFaT/rJkjhUj3ltkDoGyiCiCEeDKBcpNxwlboBzb0lpwzhmdrlNUN8otM3aWc
6Gz1EAwyBq0k3qXjnpkSHr2RfjfkfaGDF4iJtMKJhDBCnVVxbb9KY5YYWX7M5v8l
s4CHQTGYVtD+ru4I9SkMznB1PiZa4OGrr3JMgAVWIJkyds0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:13 2025 by rpki-client