Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PEoeENAheHgzP-nL_A9MPW80L0Y.roa
File: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (raw, json)
Hash identifier: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=
Subject key identifier: 3C:4A:1E:10:D0:21:78:78:33:3F:E9:CB:FC:0F:4C:3D:6F:34:2F:46
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B560AD0BAA8E7CD25794DA9FA2FE2A
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PEoeENAheHgzP-nL_A9MPW80L0Y.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210926
IP address blocks: 2a10:4646:110::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:60:ad:0b:aa:8e:7c:d2:57:94:da:9f:a2:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c4a1e10d0217878333fe9cbfc0f4c3d6f342f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:21:a8:07:63:42:f6:e1:42:da:04:0e:f2:
c6:42:76:b8:fe:df:f0:cc:9c:60:88:57:e1:32:d2:
f1:da:19:ea:52:9c:41:53:4f:38:c3:a9:0f:e1:11:
8f:0c:ce:f1:8b:c3:97:18:a0:5c:35:b1:02:12:7f:
a5:6b:d8:6d:0b:af:11:18:1f:87:ee:30:c9:3a:22:
e2:70:b4:53:5b:f3:7b:d5:bf:35:6b:10:d9:9b:3b:
ec:2a:f8:5e:72:eb:e5:fd:74:f3:05:94:8f:83:a0:
94:41:d5:6e:6b:ad:83:6f:ef:1a:45:04:39:f6:86:
98:4a:51:b6:0d:c5:bb:a2:68:3a:55:ee:be:bd:47:
ed:17:22:dd:33:9f:7a:13:88:aa:96:6a:02:cc:e0:
02:b6:c5:0d:45:93:8c:67:06:a8:75:ef:2d:5a:76:
5d:0d:39:40:98:cf:98:14:bb:bb:20:5f:49:8e:7f:
6c:98:8e:90:3d:a7:e1:b0:0b:f7:ce:90:42:b9:47:
c8:f6:70:a7:6d:b3:b9:51:b1:b1:e5:a1:75:3c:a7:
3e:7f:49:b3:84:13:45:9d:fb:19:c1:75:4a:12:0f:
a4:c2:9b:c8:2a:c6:79:81:bc:e0:8d:d6:f3:2b:bf:
49:33:62:aa:04:33:64:42:57:6d:96:1f:ca:7a:3b:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:1E:10:D0:21:78:78:33:3F:E9:CB:FC:0F:4C:3D:6F:34:2F:46
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PEoeENAheHgzP-nL_A9MPW80L0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:110::/44
Signature Algorithm: sha256WithRSAEncryption
9c:c0:ec:4e:c0:b3:7b:32:e3:04:af:bf:a3:00:5f:fa:d4:d8:
5b:ce:6d:99:1b:d3:22:5b:e5:c3:61:ec:3a:89:a3:bf:be:f2:
46:6c:e5:bb:03:a2:3d:a3:07:5a:a4:d8:5a:2b:17:e2:43:bc:
dc:9a:57:b7:29:ca:c5:34:76:5c:0d:13:00:4d:22:a5:a5:2d:
6e:a3:d4:c4:d0:53:16:07:ef:a1:dc:b7:ae:b0:f5:75:02:ef:
63:65:ab:98:42:8b:9f:f2:81:a8:b9:db:5b:a6:45:86:9c:87:
1d:86:06:eb:14:11:80:e3:51:25:19:3a:11:2e:38:dd:e2:c9:
09:44:fe:d4:21:9a:8f:12:b1:2a:4c:3c:5c:97:49:d6:d7:cc:
d8:e0:35:2f:1d:ee:98:75:a8:ff:b2:6e:02:bb:1c:7f:74:ee:
e1:69:e7:f6:5a:8b:11:ea:d6:cd:e8:a7:47:3d:a3:b5:7a:82:
db:a0:f4:0a:c9:1e:da:cd:21:87:16:22:cf:6d:8b:58:ce:68:
47:de:cc:75:a3:cb:3a:e4:01:c9:7d:59:6a:1f:a9:ae:8c:b4:
3e:e7:f4:1b:23:65:63:3a:18:1a:58:24:30:dd:6e:e2:b2:8e:
42:3b:30:8f:44:0d:7e:b4:4c:8b:36:d5:eb:6e:b1:b8:99:02:
3d:be:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:34 2025 by rpki-client