Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa
File: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (raw, json)
Hash identifier: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=
Subject key identifier: 3E:AD:CF:24:10:F2:81:48:E3:CF:F4:D3:02:70:DA:E6:45:94:03:AB
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 0194266BD0E751EACF8473AE81492003D1E4
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206125
IP address blocks: 2001:67c:ecc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d0:e7:51:ea:cf:84:73:ae:81:49:20:03:d1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eadcf2410f28148e3cff4d30270dae6459403ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:a5:6f:bf:8a:78:3d:f8:69:9c:bc:36:c4:
9b:ca:ea:60:22:09:2d:a1:f9:d6:c4:44:d6:5a:f4:
af:bc:78:01:f0:81:ed:e6:0a:e7:a8:07:3f:f8:d1:
04:62:ef:df:12:b4:bf:fe:9b:8f:14:31:65:99:59:
ba:4e:65:1f:a3:ce:90:19:ca:74:33:9f:09:5a:36:
2c:60:da:0d:0b:32:4d:ad:50:08:43:25:dd:02:4d:
8b:41:b1:d5:ba:b0:80:4a:34:67:5d:a0:f6:0a:0b:
62:bf:7c:69:14:2a:97:7b:83:b9:3b:cb:9b:a3:c8:
13:3e:70:41:ad:85:54:7e:9a:4e:2a:b9:1d:19:5e:
88:80:66:7d:39:57:f9:b6:17:96:54:48:f6:25:f7:
47:6c:dd:bc:5f:21:24:72:80:15:a1:67:a4:d9:69:
62:cd:71:92:56:a9:da:22:57:a1:e4:1c:f8:76:39:
80:76:b8:95:e3:3b:bd:12:93:a6:6d:82:df:6d:a1:
21:ef:db:e6:d5:e2:6f:d2:c2:77:76:e0:0d:50:74:
1a:24:98:c0:c8:65:7b:68:15:97:40:e1:50:79:d9:
19:c6:7d:e6:22:f6:d5:13:7e:5e:e5:ec:87:d0:28:
88:8e:5c:1d:41:85:f4:a3:8f:b2:17:67:45:f6:90:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AD:CF:24:10:F2:81:48:E3:CF:F4:D3:02:70:DA:E6:45:94:03:AB
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ecc::/48
Signature Algorithm: sha256WithRSAEncryption
8a:19:58:0b:74:a6:85:67:6c:d1:4e:c9:e3:c5:64:af:0f:70:
44:66:13:2e:c2:0d:17:d7:99:fb:93:f2:57:d6:0a:8e:86:84:
d7:74:ea:68:dd:b1:27:85:d3:e4:d0:4c:09:34:65:23:17:db:
22:54:cd:ab:1f:e0:57:30:4c:51:02:ac:c1:5d:71:eb:d7:b3:
35:35:64:b0:4a:66:25:80:84:57:31:36:3b:35:21:3d:c8:6d:
39:71:68:fd:ea:14:39:5b:d2:36:3a:9a:42:bd:2d:7c:b6:d5:
98:b0:a6:cc:92:61:65:b0:30:a5:d8:a0:fa:46:93:58:f7:6e:
ac:0d:25:1c:65:0e:8b:3a:f0:90:49:06:f7:b4:43:29:2e:f8:
58:b6:ad:43:7f:dc:89:8e:9b:5a:ff:cc:e4:02:4e:63:41:69:
e7:8d:e5:d9:38:88:f9:08:b7:a0:24:88:c7:20:82:d3:38:ed:
37:b5:24:61:3f:0d:e6:0f:a5:05:d4:c7:46:ce:dc:36:38:3a:
22:c6:72:d7:4d:17:fd:e1:76:00:f5:a9:4d:e6:ec:93:cc:7c:
f8:d4:35:18:cf:f7:45:ca:c1:2e:02:49:c8:fb:a4:df:9c:cb:
73:c7:42:67:d7:04:d0:1c:cc:5d:27:79:84:4d:7d:48:48:08:
79:43:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:33:19 2025 by rpki-client