Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pzbwHf_IIjmM_dnkwWGLWYGn7_Q.roa
File: pzbwHf_IIjmM_dnkwWGLWYGn7_Q.roa (raw, json)
Hash identifier: k6cHOXIH24MFShYT4ze762GDtf3NQdNfB34q3VS280s=
Subject key identifier: A7:36:F0:1D:FF:C8:22:39:8C:FD:D9:E4:C1:61:8B:59:81:A7:EF:F4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFB860F9F534EABF2513B5AC46731
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pzbwHf_IIjmM_dnkwWGLWYGn7_Q.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 5.175.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fb:86:0f:9f:53:4e:ab:f2:51:3b:5a:c4:67:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a736f01dffc822398cfdd9e4c1618b5981a7eff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:05:4d:6e:85:8e:4c:f9:fa:48:a9:1f:51:
f0:e8:f7:1a:6f:7d:5c:7d:25:b2:19:83:c2:db:8e:
f7:17:7e:9a:f1:11:40:30:9a:14:97:f9:11:9e:d1:
23:b7:3b:f7:d0:53:61:94:40:ca:79:28:a6:c2:c2:
57:d4:c8:3a:02:4d:54:f4:d0:39:4c:0e:e0:9c:9c:
59:de:c7:71:e3:c6:1d:38:0a:7c:c8:99:d7:e9:36:
f4:71:0e:2d:23:52:66:d9:11:f1:eb:fb:20:1d:94:
6e:f7:ee:ed:a6:27:ff:65:be:c9:9d:85:01:3c:f7:
b7:ba:14:1c:4f:a3:4c:e1:61:46:c5:f7:d4:05:8f:
e2:12:8a:b9:a7:75:d6:27:5d:6f:fc:89:58:eb:f3:
c0:7b:f8:13:f0:76:37:70:4a:12:6a:56:9f:fb:2b:
0f:d5:1b:cb:06:ef:7b:d9:75:7b:d5:4b:cf:b5:52:
d2:fe:f7:37:d8:cc:55:ec:05:e3:7f:c6:db:a7:46:
15:0c:47:30:83:c5:42:c2:be:22:b5:7b:c0:b4:c7:
94:99:5e:65:9d:e9:33:2b:ba:a5:74:2e:da:37:92:
e8:b1:1a:d4:1f:23:6d:d4:89:ef:79:91:73:b5:6f:
69:f7:2b:07:91:d5:a4:d8:8a:8f:6c:26:f8:0c:67:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:36:F0:1D:FF:C8:22:39:8C:FD:D9:E4:C1:61:8B:59:81:A7:EF:F4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pzbwHf_IIjmM_dnkwWGLWYGn7_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:a6:3d:92:d8:3a:30:a5:ef:af:88:14:01:2a:38:d2:b4:41:
7c:2c:da:4f:d5:4a:6f:fe:46:66:48:d0:73:58:b4:c0:9c:72:
c0:40:38:7b:9a:81:0a:2a:c9:32:8a:80:dd:cb:b4:00:db:e3:
26:7c:41:04:1d:bb:a8:7a:51:5e:3a:94:f5:ac:c7:34:bb:f7:
45:c5:b3:f7:43:50:0f:a7:f3:00:6e:43:6b:ae:b1:2c:a8:ef:
6c:83:54:ec:27:40:32:05:23:2b:8d:96:c8:f5:f6:fa:29:88:
7c:95:85:81:ad:46:31:e1:13:7a:66:cb:54:78:d8:44:5e:92:
e1:2a:8d:27:bb:d6:98:d4:56:f0:b7:ee:7b:be:49:f5:8c:b2:
79:74:20:1d:46:fd:cf:87:33:39:e4:15:7a:bb:39:00:d0:6d:
76:78:3b:03:94:37:17:78:a2:67:b4:ed:7e:c4:85:38:f9:c6:
31:3f:1d:47:3f:75:59:c8:a0:c3:34:d2:24:79:06:fa:20:85:
7f:f9:d5:69:ed:78:bd:c6:09:80:96:4c:49:96:9b:71:bb:75:
b4:2b:43:8e:bf:b9:e3:20:a2:5e:08:cc:4d:eb:18:b6:7c:36:
5d:f1:07:15:17:49:12:d2:de:c4:a6:f8:4f:92:f5:f8:d0:ae:
eb:94:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:36 2025 by rpki-client