Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/PH2hduyvggCxPfFELmaS2d27_7g.roa
File: PH2hduyvggCxPfFELmaS2d27_7g.roa (raw, json)
Hash identifier: CX6LiHJtpHAYIjfgdyL/4HezEiU0ywsczMj5xFyvJsI=
Subject key identifier: 3C:7D:A1:76:EC:AF:82:00:B1:3D:F1:44:2E:66:92:D9:DD:BB:FF:B8
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 02723BCC
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/PH2hduyvggCxPfFELmaS2d27_7g.roa
Signing time: Thu 02 Jun 2022 10:13:24 +0000
ROA not before: Thu 02 Jun 2022 10:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208850
IP address blocks: 2a11:29c0:3dfa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41040844 (0x2723bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jun 2 10:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c7da176ecaf8200b13df1442e6692d9ddbbffb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:27:1e:33:d9:69:b6:26:83:e4:8a:a2:49:
4b:2a:af:fa:2a:ce:5e:39:f8:5f:1e:d0:54:52:1c:
11:ae:6b:d7:0e:a9:7f:ac:5f:e7:fc:5d:6b:70:02:
99:f4:db:2b:2f:13:98:07:11:ae:cd:2a:79:b6:c1:
48:43:e7:73:22:8f:b5:a5:e1:84:c8:a4:36:b2:ad:
10:df:10:3d:f4:f7:6f:94:ae:c7:b8:fa:62:74:d4:
ca:cd:67:86:71:ba:a6:65:88:8d:ff:49:a8:a5:a2:
49:9c:7c:f8:2b:7a:58:6d:15:ec:cd:cc:fe:f5:f5:
bb:64:13:a6:ff:51:55:e5:fc:52:99:82:15:16:c3:
64:88:81:d5:c7:03:51:12:f3:fb:d8:13:e5:76:99:
73:3d:da:41:98:49:81:ae:f9:2c:f7:20:2c:f4:88:
5a:cf:a2:a2:47:ac:bd:f8:56:8d:35:15:c9:85:c5:
1c:77:5c:32:3e:1a:ea:65:a4:b4:6e:7d:52:c1:99:
50:99:fd:7e:17:51:48:b3:f6:2e:23:e7:d6:35:cd:
d0:b5:14:d8:30:38:f2:86:ed:8b:22:62:e1:26:bf:
f9:2e:ec:f0:80:81:ff:05:8e:ef:a4:c3:e1:2d:1c:
a3:14:e7:f0:6a:29:26:e0:90:b3:46:d6:93:21:94:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:A1:76:EC:AF:82:00:B1:3D:F1:44:2E:66:92:D9:DD:BB:FF:B8
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/PH2hduyvggCxPfFELmaS2d27_7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dfa::/48
Signature Algorithm: sha256WithRSAEncryption
74:62:e1:fd:1f:84:d8:d0:bf:ad:15:21:71:35:46:a5:c9:5c:
bc:15:98:c1:ab:d9:c1:0b:07:16:07:6a:c2:26:e2:18:f1:ce:
92:c6:ea:b7:ce:90:6b:72:48:ef:25:ab:c7:b2:a8:2d:30:7f:
34:30:a6:a4:da:83:12:77:62:3f:c1:15:94:0c:32:ea:81:f4:
76:24:76:8e:03:8e:8e:d1:8b:66:cc:61:cd:5c:23:5d:6f:c5:
a6:67:94:cf:5f:ff:e3:e4:03:12:b9:c1:1a:d5:97:81:68:73:
8d:df:5e:ce:f4:b5:c7:7f:3e:27:49:a2:e6:b5:75:c3:15:7c:
e0:dc:e4:2c:08:0c:f0:f9:f0:f0:d1:ca:e4:e9:3a:7b:be:b2:
e0:4e:23:61:fd:76:64:3f:15:aa:12:03:72:78:77:b1:1c:87:
4c:23:b4:d5:c8:13:f2:ce:9e:23:c5:3e:5e:15:19:ef:13:90:
39:5f:01:e1:d0:72:d5:09:79:60:2d:8c:b9:a2:c0:df:75:0b:
32:0f:0c:af:fb:ad:cd:43:45:82:11:47:1b:0e:1a:89:30:b0:
2b:48:a6:ae:5d:0a:89:cf:3e:e3:be:37:f1:2f:f0:95:7e:82:
2a:b1:b5:30:dd:a0:58:64:e3:f3:21:3d:20:9b:f8:46:b0:22:
51:5b:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:17 2025 by rpki-client