Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PmBZFi777l-L3Oycd11KxVKuJeM.roa
File: PmBZFi777l-L3Oycd11KxVKuJeM.roa (raw, json)
Hash identifier: chiQeH0GNaZRCE0sBEN3m38Iw5VUtDW9xk9GjuC9WPY=
Subject key identifier: 3E:60:59:16:2E:FB:EE:5F:8B:DC:EC:9C:77:5D:4A:C5:52:AE:25:E3
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBCA0904EA693638356660F351EE88
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PmBZFi777l-L3Oycd11KxVKuJeM.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 2a0c:9a40:d000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ca:09:04:ea:69:36:38:35:66:60:f3:51:ee:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e6059162efbee5f8bdcec9c775d4ac552ae25e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:cd:b4:62:fe:46:ac:4b:57:ce:ec:a2:d9:
5e:08:d6:a4:fb:0b:b7:14:98:3e:c1:1a:e8:f5:bd:
99:61:e6:2f:b9:94:01:c4:14:8c:5a:c6:68:3e:13:
3a:63:c7:ba:53:ea:6f:67:1a:a2:ed:82:6b:fe:66:
4e:82:18:1f:ca:e6:e8:8c:87:29:ae:61:d3:e6:81:
ad:e9:7f:27:a6:b5:9d:c9:91:a9:2a:98:4d:19:5a:
2e:8e:d2:6f:b3:8c:6a:b4:61:4a:37:6c:34:e0:e5:
d1:9d:1d:c9:15:aa:56:d2:5f:b5:d0:0c:e3:49:41:
07:5d:95:ff:7f:6f:53:36:3a:77:3f:5f:e0:37:e2:
25:dc:a5:b4:49:bc:16:45:64:54:9d:9d:cf:d6:91:
81:58:d8:71:27:ca:e8:22:35:98:8e:af:c4:f4:0d:
ab:a5:93:25:60:02:63:cf:1b:29:ee:a0:da:50:38:
fc:6a:fc:a0:d2:d4:71:6a:25:3c:83:75:6b:cb:7a:
fb:7e:81:56:39:8e:86:54:50:37:07:4e:d1:5b:f2:
12:af:77:60:f9:b0:e2:2a:df:18:13:ab:b4:b0:4d:
ba:04:00:4a:0b:f5:b9:69:70:7c:f5:e7:09:5a:9e:
66:9d:f7:ca:db:77:f2:df:ad:91:72:f4:a8:d9:46:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:59:16:2E:FB:EE:5F:8B:DC:EC:9C:77:5D:4A:C5:52:AE:25:E3
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PmBZFi777l-L3Oycd11KxVKuJeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:d000::/40
Signature Algorithm: sha256WithRSAEncryption
55:30:96:f4:dd:bc:45:38:3f:c9:fa:6e:e0:f4:bd:8f:f9:b9:
b7:7e:a2:68:29:1d:70:40:19:c4:61:a6:b3:d8:20:23:21:b1:
a7:e1:cb:b1:dc:41:1d:65:61:d3:85:8c:5c:0c:da:eb:6e:ec:
30:52:e5:82:36:72:4b:50:3e:6f:e5:1c:d6:f9:de:4c:80:69:
55:d3:5a:40:33:b6:ab:fa:37:7a:92:87:97:0f:d6:c8:f2:6c:
a1:01:26:b3:1d:7b:53:0d:0b:21:0a:8f:1c:15:c5:a0:81:fd:
07:33:b2:e7:58:3d:ae:e1:98:55:c2:e7:48:96:10:4a:3a:50:
cf:57:b2:9e:3c:62:4c:78:90:e8:46:39:f7:f8:bb:44:c7:75:
19:d2:64:da:3d:0f:87:7a:23:c7:e6:62:eb:aa:21:87:e7:8d:
7e:e3:7f:bd:84:5d:e8:dd:46:6c:52:40:8d:62:ce:e0:ce:b1:
8a:29:8a:1d:b9:5f:d0:51:28:43:c2:0f:d1:27:04:c1:6a:fb:
3e:11:27:a0:28:a0:37:3a:7f:a2:a5:07:25:64:7d:ef:e9:56:
dc:fd:db:4b:e3:cf:da:98:f3:e0:5c:74:c5:e5:05:71:56:3a:
88:e4:16:df:72:08:f4:50:2c:44:84:a9:de:bf:63:46:5c:b3:
d2:48:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:16 2025 by rpki-client