Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PcsvqoFss2sjt8KP5dE_s9b5R94.roa
File: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (raw, json)
Hash identifier: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=
Subject key identifier: 3D:CB:2F:AA:81:6C:B3:6B:23:B7:C2:8F:E5:D1:3F:B3:D6:F9:47:DE
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9FD2C19E6A97144626C1A32A6D566
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PcsvqoFss2sjt8KP5dE_s9b5R94.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34305
IP address blocks: 2a03:f85:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fd:2c:19:e6:a9:71:44:62:6c:1a:32:a6:d5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dcb2faa816cb36b23b7c28fe5d13fb3d6f947de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:a4:6d:bc:1b:c9:66:a0:43:37:0a:a6:77:
56:e0:b0:f4:84:f5:35:2b:77:ba:83:f5:19:5b:b0:
ae:4d:b0:e0:74:bb:50:ae:70:2b:c2:37:f4:0d:63:
f3:da:3b:7d:92:36:c1:5c:0d:4c:e3:bc:4e:7e:b4:
4b:b9:bc:1c:6d:fa:d6:a3:32:79:fd:14:5b:41:0d:
5c:aa:98:a7:61:42:d8:85:38:fb:24:60:e8:f3:45:
f1:ec:d2:e2:ad:e6:7b:82:c3:60:af:9d:31:51:5c:
d1:b6:cc:a5:a9:b4:da:12:fc:4a:56:3a:51:ac:cf:
e8:48:76:61:05:a9:24:51:93:30:2c:0f:57:ae:56:
05:d8:6a:7d:37:dd:f7:b9:b4:be:f3:77:db:10:c5:
e8:3b:bd:e0:17:13:5e:ea:d0:73:51:e4:d4:83:17:
26:b2:ce:86:16:a5:84:e6:4c:de:6b:03:a5:06:b8:
39:d9:a8:1e:f4:b2:63:30:0a:e8:f8:6f:1c:99:71:
9c:20:62:e6:43:c0:7f:ae:20:7d:92:eb:fd:e5:26:
72:a0:21:c1:01:71:22:73:c4:2b:18:0d:fb:28:f0:
3e:2e:14:b6:71:47:81:e4:2f:37:0d:bf:a9:d4:d7:
ec:2d:d4:b6:95:87:d4:72:da:46:c2:0b:71:57:4f:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CB:2F:AA:81:6C:B3:6B:23:B7:C2:8F:E5:D1:3F:B3:D6:F9:47:DE
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PcsvqoFss2sjt8KP5dE_s9b5R94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85:1::/48
Signature Algorithm: sha256WithRSAEncryption
31:eb:79:6a:0c:c6:8e:3c:38:a3:74:6b:29:5f:ef:2d:71:c8:
da:47:c2:61:e2:23:67:58:79:db:da:85:d1:1d:65:02:46:f1:
65:6b:0b:db:3f:d4:a9:11:5f:bc:a9:de:56:af:f7:0f:f8:bd:
05:7a:28:19:7f:79:8f:c5:1b:41:59:cf:fd:d7:37:6a:b9:df:
f7:2b:b8:96:da:7b:d5:a0:d3:37:1e:96:4f:b0:68:84:1d:71:
8c:7c:20:78:a4:7b:cc:84:e9:24:cd:f5:9b:5a:44:db:65:a1:
df:65:16:f4:b3:21:52:24:c5:7e:2d:e5:7d:0f:7d:77:03:70:
18:fe:c5:d0:4e:78:c4:b8:a1:bd:59:59:f2:65:c1:f2:69:3c:
42:3e:fe:70:4b:48:c5:2b:31:11:51:6b:d2:d4:0a:33:e8:9f:
f1:51:4e:4c:86:f5:8e:94:e4:01:48:65:04:48:02:0f:ce:7c:
f5:78:65:78:10:c0:e9:6c:93:70:d2:cb:6a:79:53:dd:05:cd:
8d:7e:8e:65:7d:55:4c:1a:7a:c5:80:34:7e:3e:08:0c:0b:80:
54:4d:0f:58:73:17:77:b9:cf:90:94:f6:1d:8a:e5:21:57:f2:
37:f4:59:ce:72:b4:87:d9:a3:28:45:1f:34:22:ac:9d:1a:3b:
58:22:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:37:24 2025 by rpki-client