Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/PA-jfkanAVWfUpQmpSeB8oXIr0s.roa
File: PA-jfkanAVWfUpQmpSeB8oXIr0s.roa (raw, json)
Hash identifier: pCuvftglSJb2tleiBWc5aLM9vMUvfIEWsyAMH9nG+8A=
Subject key identifier: 3C:0F:A3:7E:46:A7:01:55:9F:52:94:26:A5:27:81:F2:85:C8:AF:4B
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C9390E11855AE89837CA6A178289
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/PA-jfkanAVWfUpQmpSeB8oXIr0s.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211411
IP address blocks: 2a05:b0c7:5000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c9:39:0e:11:85:5a:e8:98:37:ca:6a:17:82:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c0fa37e46a701559f529426a52781f285c8af4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:5e:f0:ac:08:06:d6:18:60:2c:d6:b8:ad:
0e:17:eb:7d:5e:d4:3c:0a:fa:5f:f7:4a:a7:ba:dc:
43:b6:96:9e:b5:43:5d:47:29:c8:a7:76:dd:7f:b9:
4b:6d:62:9d:43:b2:45:93:18:a1:1d:6a:b8:55:fa:
59:6a:af:8d:78:54:7f:dc:96:da:70:17:c3:6f:ac:
b7:6d:cd:c5:9e:d3:df:71:21:86:b9:6e:6b:97:59:
db:4d:21:06:a0:ff:d0:73:f0:50:41:b5:8d:01:80:
f3:97:16:f4:c4:25:79:a9:3a:04:76:bc:d0:fa:09:
a5:e6:f3:ee:42:4a:a2:c2:78:4a:a6:3e:f2:b0:52:
c5:10:5f:61:d1:4d:18:02:e3:52:46:78:d3:81:c9:
5d:ac:20:35:0a:12:a8:02:64:9c:14:32:0f:25:24:
4a:aa:49:ec:38:b9:b2:20:4f:23:86:d7:f8:71:55:
ee:12:35:0b:6a:dc:cf:e7:dd:dd:5a:01:46:cc:84:
f3:a0:44:ed:02:3e:80:c7:66:1d:76:a4:b8:37:8b:
e7:c4:2f:7c:1e:36:bf:e0:62:e6:fb:3b:81:0b:ad:
c1:0d:aa:19:da:b6:fa:29:30:35:1a:77:da:7c:5b:
22:08:66:b6:e7:2c:9e:c5:95:dc:b6:5a:b5:ce:4d:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:A3:7E:46:A7:01:55:9F:52:94:26:A5:27:81:F2:85:C8:AF:4B
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/PA-jfkanAVWfUpQmpSeB8oXIr0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:5000::/37
Signature Algorithm: sha256WithRSAEncryption
65:36:10:e8:51:76:88:d9:2b:32:e1:f3:f1:68:ba:04:8f:62:
4d:0c:40:c1:eb:e1:d0:90:8b:ec:11:69:67:f1:e4:90:09:ec:
e4:10:44:e9:6a:a7:c7:df:84:7a:06:12:f0:37:80:88:46:4e:
f4:75:37:0a:4c:5d:15:09:01:ce:4c:3f:bd:ce:2a:74:5c:29:
db:54:1a:a5:94:c8:fe:ab:cb:e7:d2:70:dd:7a:26:89:07:41:
7b:56:13:f9:f5:a5:af:89:d5:48:3c:c7:ec:35:42:f9:2a:28:
3a:ad:55:63:bf:57:7e:9c:b1:07:30:da:40:6c:4f:72:ba:fe:
04:65:24:ad:1d:e5:f9:c8:33:76:41:d6:80:a2:0b:d4:44:95:
f1:27:ad:db:50:f3:00:73:ed:2b:02:df:2e:54:d9:5d:a2:cb:
9a:ea:31:97:d5:5a:a3:9f:a5:2a:c9:5d:15:d7:c8:7a:aa:9e:
d6:43:a6:a4:8b:f9:9b:b1:c0:21:72:b7:b3:31:d9:79:1c:1b:
f4:1b:fe:5e:f8:3d:23:48:5a:4a:1e:bf:eb:1a:ab:5d:69:a2:
dd:eb:e7:a6:45:d2:cd:15:bc:48:3f:52:95:47:46:ec:bf:47:
ba:5b:22:4d:aa:df:fb:2e:b6:b8:78:47:63:0b:48:4a:9e:80:
e2:4c:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:34 2025 by rpki-client