Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PGRCK_988SWzktKeQMe19aO2XTA.roa
File: PGRCK_988SWzktKeQMe19aO2XTA.roa (raw, json)
Hash identifier: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=
Subject key identifier: 3C:64:42:2B:FF:7C:F1:25:B3:92:D2:9E:40:C7:B5:F5:A3:B6:5D:30
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B56834ECFF94E6162B088880F35F15
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PGRCK_988SWzktKeQMe19aO2XTA.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216155
IP address blocks: 2a10:4646:3c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:68:34:ec:ff:94:e6:16:2b:08:88:80:f3:5f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c64422bff7cf125b392d29e40c7b5f5a3b65d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:b3:70:f5:df:6f:fe:3d:83:52:5b:b2:9a:
0f:c7:81:b5:67:56:c9:e5:41:15:ac:fa:96:e5:a4:
10:a0:1f:66:93:2f:f5:a6:27:0a:ee:59:c1:1e:7a:
ef:53:20:8b:63:5f:78:2a:56:ef:7d:1c:be:de:99:
8a:1b:a3:d2:68:24:c0:90:8a:f0:b8:d0:a1:90:af:
19:51:a5:17:e9:a2:3c:c1:4f:7e:b7:21:44:d7:5b:
c7:aa:97:8f:b3:f4:3b:a0:62:d9:e8:3c:29:9a:7e:
e9:81:48:eb:18:2c:9a:77:86:5b:ad:49:4f:f6:5f:
bb:48:47:8a:f1:5c:d5:e7:e7:7a:c4:a3:a1:0d:9a:
4e:10:d3:10:a0:e9:27:ee:39:32:99:8b:55:47:4f:
d2:24:fe:af:e7:65:68:3a:c3:b5:aa:4f:a2:76:68:
1e:bc:8c:94:a0:32:23:e2:94:e0:c6:97:47:f6:c0:
47:77:6b:80:ee:7b:48:b0:44:18:35:0b:23:87:d3:
f9:4c:b8:53:53:75:18:75:91:88:14:c2:24:82:ff:
9c:19:26:67:f3:8f:48:e8:17:c4:84:64:83:1c:f3:
6e:98:9e:81:10:90:66:25:36:dd:43:88:bd:a9:d9:
4b:4d:21:3e:d6:57:aa:f6:fc:3f:98:b6:9f:b4:ee:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:42:2B:FF:7C:F1:25:B3:92:D2:9E:40:C7:B5:F5:A3:B6:5D:30
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PGRCK_988SWzktKeQMe19aO2XTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3c0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:11:51:04:81:92:d8:ec:c9:3d:42:0b:5d:d2:37:e5:a9:45:
d6:a3:9b:81:ed:b4:75:78:39:7a:f7:91:5f:8e:2d:4f:f6:de:
4d:73:db:e0:a1:aa:39:00:79:cf:d8:85:68:4f:cf:3b:f6:43:
b4:96:2a:45:da:be:24:55:29:5e:b7:28:4b:19:90:06:c5:6a:
40:f0:c4:a0:53:13:14:eb:82:6d:80:1d:d2:88:07:a3:d1:a3:
fa:19:e6:84:4a:0f:43:e6:21:b0:96:76:a3:58:f9:5c:36:52:
7f:4d:42:5c:64:08:e9:2f:4e:72:13:27:e6:ea:d1:2b:40:76:
aa:24:db:3c:e8:88:5a:4e:b1:24:f9:e1:d5:30:9f:6c:a3:e5:
54:d8:79:c3:3c:21:b4:bc:5d:62:06:b3:bd:50:06:ff:b1:4d:
e0:51:8a:a8:b3:6f:ee:80:16:d3:97:1e:07:d2:f5:0e:c2:44:
56:f1:df:aa:b0:b7:a9:8a:35:d1:28:95:ca:cf:c1:e3:e4:41:
a2:34:d2:36:d3:d1:80:cb:24:48:9a:ca:74:8d:7f:16:75:66:
65:05:02:07:08:83:e6:ce:68:cc:39:34:83:c7:b6:01:37:b2:
b5:00:ea:31:29:5d:c4:a7:fd:33:a8:08:fd:42:ea:1b:b0:5e:
ab:96:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:41 2025 by rpki-client