Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PE9ptao2FSWU840i5b7u-eUbo5s.roa
File: PE9ptao2FSWU840i5b7u-eUbo5s.roa (raw, json)
Hash identifier: V2evNM4s+KuPeCg6XwMo6uNCoCVAXNczJPyB3Gv2RV0=
Subject key identifier: 3C:4F:69:B5:AA:36:15:25:94:F3:8D:22:E5:BE:EE:F9:E5:1B:A3:9B
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA8300C86677BE673BD04D486A5B6C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PE9ptao2FSWU840i5b7u-eUbo5s.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200202
IP address blocks: 2a0c:b641:940::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:83:00:c8:66:77:be:67:3b:d0:4d:48:6a:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c4f69b5aa36152594f38d22e5beeef9e51ba39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:48:f3:77:ac:1a:43:7e:df:f5:df:56:4d:
75:94:09:6c:90:7f:97:28:28:b1:98:4c:bd:99:f6:
39:41:ef:f9:43:3e:49:0f:0a:9a:e5:81:71:c5:16:
b4:9d:43:ac:84:27:ea:14:7b:17:54:ab:bb:e6:65:
54:83:58:cf:7d:10:75:b5:69:e4:04:32:25:0d:fd:
21:af:ab:45:39:0a:6f:0e:55:c5:e1:7c:8e:01:d6:
cd:dc:62:aa:49:32:11:49:e6:ec:80:fe:43:4e:0f:
92:f2:b2:40:d9:2a:e4:1c:44:bb:46:2d:57:37:be:
bd:ab:f1:67:87:c4:fc:af:81:14:7d:04:f8:2a:d7:
d8:dc:4e:3a:9e:e0:2b:82:36:e1:d9:9c:a3:ba:ea:
b1:0f:bd:cc:d0:f8:35:30:bb:e3:11:12:6d:cb:a2:
17:ac:5e:ce:af:0d:75:1f:86:d9:93:32:09:83:72:
d5:32:c8:76:f3:2d:f0:8b:bd:bf:61:70:1d:4e:db:
22:78:ae:86:86:15:d4:27:84:01:46:0f:5d:1a:6a:
02:77:63:a8:97:da:b5:0f:d2:9d:b5:e8:0f:81:8b:
e7:0d:27:76:d5:17:55:4f:b7:99:39:07:e9:4a:f9:
e1:33:ff:d8:40:4b:6b:a1:8e:8e:83:58:ed:76:15:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:69:B5:AA:36:15:25:94:F3:8D:22:E5:BE:EE:F9:E5:1B:A3:9B
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PE9ptao2FSWU840i5b7u-eUbo5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:940::/44
Signature Algorithm: sha256WithRSAEncryption
98:6d:35:2b:4d:bf:c3:e4:57:19:86:53:ea:9f:6c:68:9a:fa:
65:e9:40:dd:fd:a6:f9:cb:3b:08:87:05:1b:f5:43:30:7a:f7:
ed:06:23:36:de:a5:03:45:c1:f0:35:fd:ab:4f:08:db:82:60:
8a:d0:be:06:20:e4:ec:b1:6a:57:7f:4b:e4:7b:a7:74:d6:27:
0b:7b:95:52:eb:db:d6:87:eb:25:f4:2a:5d:95:e1:22:04:07:
dc:ad:2f:2c:99:88:11:42:12:c7:ef:4b:f4:cc:d5:cb:db:08:
3a:d2:65:86:76:ae:14:8a:8f:5e:18:fa:a5:09:ae:67:06:ad:
09:25:d1:37:34:70:4d:39:d8:4a:b8:cf:c2:25:74:fd:9b:4b:
d7:cf:9b:65:77:2d:d6:61:26:f5:27:9b:e4:fe:29:0c:b3:c7:
57:97:af:c8:5c:f3:db:16:2d:82:8f:22:82:c1:88:69:09:ad:
94:89:9f:18:8f:2b:dc:0f:b0:c1:df:89:db:f0:21:1d:e3:0e:
57:e9:ba:cf:38:09:02:98:ed:79:6e:54:16:00:ec:dd:cb:e6:
40:8b:7d:01:8e:df:32:8b:15:c2:0c:73:05:e1:8e:11:e2:16:
7d:5b:02:49:78:fe:84:62:08:a7:2f:a8:d1:bb:bd:e6:7d:3c:
d5:45:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:23 2025 by rpki-client