Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PtJ8vqiRDbMw3E78U9Z5XblcYR4.roa
File: PtJ8vqiRDbMw3E78U9Z5XblcYR4.roa (raw, json)
Hash identifier: OWFfQ51m9Ldk5jvetktpXFMMRdNlbfS/QjE/Hk+DsZo=
Subject key identifier: 3E:D2:7C:BE:A8:91:0D:B3:30:DC:4E:FC:53:D6:79:5D:B9:5C:61:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFEDACA8CB891AECACE9AEB4D53F8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PtJ8vqiRDbMw3E78U9Z5XblcYR4.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47670
IP address blocks: 94.249.152.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fe:da:ca:8c:b8:91:ae:ca:ce:9a:eb:4d:53:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed27cbea8910db330dc4efc53d6795db95c611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:22:ef:3d:2c:ce:f5:14:6d:82:bf:4b:69:
40:f7:37:11:a5:50:dd:39:38:39:31:92:6f:f9:26:
20:6a:8b:d3:25:5a:85:67:7c:98:f2:51:3d:b9:fd:
b8:a0:cf:c8:8c:4e:4c:9f:7a:ab:c6:a8:65:18:22:
7d:c6:e3:bd:a0:38:65:62:7a:9d:33:a9:c9:f7:8e:
d5:95:7a:31:82:81:1e:f1:a7:a9:2c:b2:ab:2f:7b:
3f:df:08:6a:51:ff:6d:97:60:07:77:16:1f:10:29:
be:2f:8d:87:53:cf:6e:94:91:c6:1d:3b:93:09:f6:
11:9c:8d:7f:be:c0:8c:ad:6f:1e:e1:60:b4:5b:73:
00:3a:ea:ab:09:5e:fa:40:41:67:7e:c2:88:c7:f5:
43:58:1d:21:d8:93:27:19:e8:20:be:0f:05:46:5c:
05:e8:25:b6:5d:cf:70:86:49:52:04:4c:dc:59:1f:
84:57:b5:68:5b:4f:14:0e:70:08:20:3a:ff:e5:1f:
5f:58:e0:af:25:d1:10:af:53:9a:16:cf:fa:7b:6b:
d3:89:4a:95:78:91:36:71:dc:ba:5c:26:30:62:65:
30:9b:7a:fe:01:06:39:a4:bc:b1:fd:09:79:49:48:
23:28:03:83:a9:d9:75:b5:1a:13:17:ce:8b:e2:f8:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:7C:BE:A8:91:0D:B3:30:DC:4E:FC:53:D6:79:5D:B9:5C:61:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PtJ8vqiRDbMw3E78U9Z5XblcYR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.152.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f7:ee:a1:d3:36:ed:67:0d:06:1d:aa:da:f9:04:8d:53:12:
01:49:81:14:08:bb:3d:e8:ed:50:36:13:6b:c3:68:d2:6c:f4:
1a:3e:80:61:1d:f1:67:4b:fa:0c:e7:8d:96:14:1d:e0:2e:89:
7a:00:a7:2e:f2:fc:ff:b0:08:2f:0e:0f:b0:f0:48:0d:cd:4b:
10:77:75:6c:ec:06:bf:54:69:15:2e:a0:57:85:0e:a3:ff:b2:
a2:e5:bc:a2:4d:48:ff:ab:3c:17:69:a7:fe:a2:93:6f:c9:0d:
af:fb:ef:90:bf:15:bb:03:52:21:85:7b:3a:9e:71:9a:f7:a5:
5b:d8:4e:25:55:81:83:35:19:d3:02:47:b8:d2:d6:9a:73:e5:
9b:e5:d5:5b:8f:35:31:a1:7a:13:fa:b1:dd:6c:e7:87:4c:75:
d0:b9:30:83:65:40:29:98:9f:09:69:99:6f:53:e8:c9:e0:d8:
b3:7f:12:55:6b:93:3d:bc:46:30:d8:a0:b3:43:f1:7b:d4:8f:
e9:41:5b:43:a3:f6:d3:a5:92:d0:ce:21:45:21:0b:1b:1c:71:
69:c3:e5:9e:aa:9b:a9:26:23:4a:e2:8e:67:4e:90:d7:16:ee:
68:22:57:e7:9d:58:bd:05:9d:72:99:c1:4f:9a:d9:03:77:7a:
fe:6d:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:04 2025 by rpki-client