Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/PGgmF6Aji2rd80okY93nfJ4YUnU.roa
File: PGgmF6Aji2rd80okY93nfJ4YUnU.roa (raw, json)
Hash identifier: zOVsa/7nyuiigDjHXaY0+xKEOfc+tnkhtVAL1bVh4QM=
Subject key identifier: 3C:68:26:17:A0:23:8B:6A:DD:F3:4A:24:63:DD:E7:7C:9E:18:52:75
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 093CEA7E
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/PGgmF6Aji2rd80okY93nfJ4YUnU.roa
Signing time: Sat 01 Jan 2022 12:58:55 +0000
ROA not before: Sat 01 Jan 2022 12:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50543
IP address blocks: 2a02:2698:7000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154987134 (0x93cea7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c682617a0238b6addf34a2463dde77c9e185275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:10:0a:23:ea:1e:21:cb:82:d8:91:d8:ea:
34:d9:5b:e8:c0:49:9b:40:79:07:5d:32:39:d9:70:
d2:73:f9:a5:fb:b7:48:d7:02:8b:bf:fa:34:78:ea:
a7:9f:e0:a8:9b:8d:fc:bf:8a:49:9a:75:ea:99:70:
e3:22:87:7b:74:5f:e8:6e:de:24:12:05:94:17:5a:
de:70:54:34:d0:93:2c:5b:64:2a:55:8a:7a:b9:7c:
ff:d3:c7:34:fd:9f:bc:df:0f:64:63:a3:8d:b2:e4:
1f:10:e0:0a:ce:d0:7f:5b:61:e5:f6:ec:3e:42:cc:
6b:60:0c:cc:9f:a3:0f:bf:32:0a:26:78:f2:ce:e5:
00:87:77:8e:d5:c6:97:25:1f:e2:c5:82:13:e6:93:
c0:4b:87:44:da:99:37:03:53:74:b0:fe:20:f6:b6:
b1:fd:db:48:4e:97:3f:db:3e:b6:f8:74:34:49:4b:
89:36:e0:f9:ab:0d:27:ee:47:7e:23:ac:48:a7:39:
42:86:42:7c:c1:98:67:75:5f:9a:1f:2e:6c:f6:f8:
a2:ca:e4:aa:5e:0a:ed:7c:85:64:1e:0f:54:bf:95:
44:40:8f:53:2d:73:03:0b:d1:f0:5c:31:24:15:7b:
3f:f0:51:c5:cf:b0:1a:ce:cd:d2:2c:29:e8:b6:fd:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:26:17:A0:23:8B:6A:DD:F3:4A:24:63:DD:E7:7C:9E:18:52:75
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/PGgmF6Aji2rd80okY93nfJ4YUnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7000::/38
Signature Algorithm: sha256WithRSAEncryption
4f:5d:c6:74:02:24:20:a8:b8:0b:0a:ab:23:dc:96:45:f2:f7:
f8:5a:c2:01:17:62:e5:d3:e3:b3:2b:a0:a1:ab:fe:79:d3:24:
cc:ab:26:ba:2a:3b:4c:3c:67:46:b4:93:e2:96:ce:1b:a5:e4:
a9:24:0a:25:27:1a:62:38:a3:82:b7:f7:0b:6c:5f:36:85:ce:
5f:4f:00:18:89:fa:46:ec:78:eb:53:8b:fe:06:e1:dd:c0:1e:
6e:7a:7a:8f:d5:2d:d5:bf:d9:32:b5:b6:a4:85:d3:1e:e5:bd:
e0:ce:ff:dc:65:5b:79:91:a9:0c:6b:eb:c5:5b:74:38:3a:11:
5b:f1:7f:7a:55:31:d5:27:0c:21:3a:c3:7a:b8:37:82:9f:be:
01:66:28:27:0f:81:14:e9:a4:07:05:8e:d7:b0:8e:ce:81:39:
90:49:0d:54:fc:d4:42:29:58:e5:7d:4d:28:50:dc:89:ea:fe:
b0:9c:eb:00:b5:df:2e:46:7a:2b:d0:d7:1f:7f:d6:a6:d3:0a:
bb:98:61:6f:46:19:82:75:2b:0d:1d:eb:c7:25:e6:32:12:8b:
73:50:16:25:05:ca:d7:24:15:31:c7:aa:ce:34:3a:82:ae:7a:
04:90:5d:2e:81:f3:71:16:2a:fc:6c:36:62:ab:63:5b:e5:2a:
5e:4e:36:7b
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECTzqfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ODAyYjk1Y2U2MjM5ZDUyNmMzNWFlN2E4ZTJjZWI0OGFlYjgyYjVmMB4XDTIyMDEw
MTEyNTg1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2M2ODI2MTdhMDIz
OGI2YWRkZjM0YTI0NjNkZGU3N2M5ZTE4NTI3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJNyEAoj6h4hy4LYkdjqNNlb6MBJm0B5B10yOdlw0nP5pfu3
SNcCi7/6NHjqp5/gqJuN/L+KSZp16plw4yKHe3Rf6G7eJBIFlBda3nBUNNCTLFtk
KlWKerl8/9PHNP2fvN8PZGOjjbLkHxDgCs7Qf1th5fbsPkLMa2AMzJ+jD78yCiZ4
8s7lAId3jtXGlyUf4sWCE+aTwEuHRNqZNwNTdLD+IPa2sf3bSE6XP9s+tvh0NElL
iTbg+asNJ+5HfiOsSKc5QoZCfMGYZ3Vfmh8ubPb4osrkql4K7XyFZB4PVL+VRECP
Uy1zAwvR8FwxJBV7P/BRxc+wGs7N0iwp6Lb93IUCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQ8aCYXoCOLat3zSiRj3ed8nhhSdTAfBgNVHSMEGDAWgBQIArlc5iOdUmw1
rnqOLOtIrrgrXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NBSzVYT1lqblZKc05hNTZqaXpyU0s2NEsxOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvMTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8x
L1BHZ21GNkFqaTJyZDgwb2tZOTNuZko0WVVuVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
MTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8xL0NBSzVYT1lqblZK
c05hNTZqaXpyU0s2NEsxOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioCJphwMA0GCSqGSIb3DQEBCwUA
A4IBAQBPXcZ0AiQgqLgLCqsj3JZF8vf4WsIBF2Ll0+OzK6Chq/550yTMqya6KjtM
PGdGtJPils4bpeSpJAolJxpiOKOCt/cLbF82hc5fTwAYifpG7HjrU4v+BuHdwB5u
enqP1S3Vv9kytbakhdMe5b3gzv/cZVt5kakMa+vFW3Q4OhFb8X96VTHVJwwhOsN6
uDeCn74BZignD4EU6aQHBY7XsI7OgTmQSQ1U/NRCKVjlfU0oUNyJ6v6wnOsAtd8u
Rnor0Ncff9am0wq7mGFvRhmCdSsNHevHJeYyEotzUBYlBcrXJBUxx6rONDqCrnoE
kF0ugfNxFir8bDZiq2Nb5SpeTjZ7
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:15 2025 by rpki-client