Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/pcCi_G-qX3RpOhWr5rb_pjETa7c.roa
File: pcCi_G-qX3RpOhWr5rb_pjETa7c.roa (raw, json)
Hash identifier: o1bmExvaTcxJeyrTYh7iJfIaJKDbfqMv3wcEN7eHi+w=
Subject key identifier: A5:C0:A2:FC:6F:AA:5F:74:69:3A:15:AB:E6:B6:FF:A6:31:13:6B:B7
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 092BF5A8
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/pcCi_G-qX3RpOhWr5rb_pjETa7c.roa
Signing time: Sat 01 Jan 2022 12:58:45 +0000
ROA not before: Sat 01 Jan 2022 12:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39028
IP address blocks: 2a02:2698:8400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153875880 (0x92bf5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5c0a2fc6faa5f74693a15abe6b6ffa631136bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:84:89:27:4f:63:57:9a:8d:56:49:34:16:
38:43:5c:67:9c:a9:8d:50:ab:7f:19:4c:7e:e9:df:
54:55:68:15:0d:67:82:d4:9a:3a:13:b7:76:f9:21:
1e:a0:1e:c4:cd:20:21:53:79:ef:58:9b:a0:8d:7a:
90:4b:9b:5c:ba:48:09:e9:40:5b:40:10:c2:23:7d:
c6:29:00:35:b6:61:d5:7a:40:7e:f6:82:65:9e:46:
40:3a:fc:8f:a7:80:3d:c7:26:16:2a:4f:af:ab:c4:
e4:4d:df:97:62:61:5e:3f:16:e9:fc:21:38:8d:e3:
0b:4e:d5:87:83:82:a6:b6:dc:3e:65:9f:42:7d:56:
35:b2:76:90:fe:04:8e:d6:ef:0b:bd:dd:81:12:52:
62:03:fa:5b:7f:52:bb:a3:18:22:1a:02:cf:35:49:
14:ff:f7:69:c1:7b:52:47:dc:79:30:c1:0d:49:3b:
d0:88:61:39:d5:b4:96:5f:b0:ca:69:ce:ef:8a:cf:
3e:5a:9d:c2:70:b7:27:5e:ff:f2:05:e8:df:79:20:
29:53:8c:ef:68:1e:80:44:90:47:f1:e6:19:44:b5:
18:96:a1:8a:f3:cc:82:df:4d:c7:49:dd:6d:ab:f5:
8d:7b:fe:7c:8f:18:55:87:f0:de:6b:1a:78:75:ef:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:A2:FC:6F:AA:5F:74:69:3A:15:AB:E6:B6:FF:A6:31:13:6B:B7
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/pcCi_G-qX3RpOhWr5rb_pjETa7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:8400::/38
Signature Algorithm: sha256WithRSAEncryption
49:27:a7:82:b0:87:64:b5:93:97:a4:ab:c8:4c:99:f6:60:c7:
4d:58:15:c3:fe:57:d3:09:94:b3:62:ba:53:d6:16:1c:37:4e:
c7:20:e7:65:0b:2a:1c:ad:31:23:cf:6e:78:c7:4a:a3:e0:83:
45:c7:9b:c5:ed:0b:b4:18:c4:49:b9:0e:24:2e:61:52:c5:5c:
aa:e9:9e:fb:18:3a:a1:db:6d:4b:54:b2:fe:24:f0:3b:00:45:
2d:46:31:e3:d2:b5:33:c2:5b:7d:09:d9:83:70:83:79:7a:f0:
c1:4c:8d:eb:17:61:31:0d:f7:0d:02:b1:f7:36:5c:19:2d:fa:
ac:df:17:b0:e8:99:10:bc:92:b0:c8:07:b7:a6:bb:56:fb:66:
a4:8b:e3:2a:da:c8:db:98:a8:74:54:24:93:5e:c0:9a:01:5a:
c1:64:88:82:ae:11:bc:71:e1:c1:43:63:dc:d5:2d:6e:1a:75:
8a:f6:e5:ba:32:1d:77:b9:56:bb:d3:a3:84:30:01:4b:b2:de:
f6:8b:82:6e:a0:cb:5c:6f:b2:f8:ea:e7:0f:49:f2:8a:5c:12:
b2:91:65:eb:3d:08:d8:63:cc:93:72:16:24:f2:c4:a5:4e:cb:
15:c9:f9:e2:9f:e2:2b:62:97:19:0a:17:83:c5:36:1b:fb:89:
8e:75:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:00 2025 by rpki-client