Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/pmytThn77KyfY62XUmuBTmJmlEU.roa
File: pmytThn77KyfY62XUmuBTmJmlEU.roa (raw, json)
Hash identifier: veYyBmTbvHZFT2kyetYWhwPTKHkYv0ENqtloF/dQJ4g=
Subject key identifier: A6:6C:AD:4E:19:FB:EC:AC:9F:63:AD:97:52:6B:81:4E:62:66:94:45
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BC41FAB8116FBD537AE0CF0BE119
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/pmytThn77KyfY62XUmuBTmJmlEU.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47924
IP address blocks: 2a05:b0c7:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bc:41:fa:b8:11:6f:bd:53:7a:e0:cf:0b:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a66cad4e19fbecac9f63ad97526b814e62669445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:ae:71:8b:cd:df:61:b0:4f:50:5e:2b:1c:
33:62:82:db:69:d8:53:d6:c3:a3:89:9f:86:2e:e7:
3f:69:55:5a:8a:5b:67:9c:24:79:c7:c2:69:20:c2:
cd:7d:59:cb:27:ea:b2:ef:c6:f4:29:9d:0d:f1:53:
e6:a8:fd:96:2e:ee:29:27:13:04:c1:0e:13:85:9f:
78:8e:22:17:d8:33:37:53:95:6f:80:ce:12:dc:7e:
fa:ee:2f:83:43:41:1e:bc:b8:00:49:d3:14:78:32:
8c:d7:43:46:2a:ca:e3:26:e2:0a:a1:fe:a6:a2:08:
17:41:9d:3f:6f:e7:b6:91:a6:03:30:8a:0e:8f:7f:
63:56:18:a4:c3:e5:8d:db:21:10:18:bb:6e:77:c2:
99:39:71:f0:4f:8e:54:56:25:c0:d2:b0:f5:16:81:
b2:1c:f7:0d:58:4b:93:2d:65:81:fc:e4:86:8c:72:
8e:52:2f:03:20:51:59:61:18:84:96:11:45:e3:16:
3d:78:4e:e2:0f:e8:9a:56:eb:a8:64:f2:4a:88:3b:
97:f7:a3:f9:34:05:46:ae:bb:4f:33:5c:ca:6b:f3:
4d:92:75:40:66:38:ec:87:e2:50:33:9d:8a:a6:01:
4e:3d:66:26:98:79:de:7b:db:9f:11:e4:c6:15:96:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:AD:4E:19:FB:EC:AC:9F:63:AD:97:52:6B:81:4E:62:66:94:45
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/pmytThn77KyfY62XUmuBTmJmlEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:300::/48
Signature Algorithm: sha256WithRSAEncryption
6a:b5:57:12:c8:3c:25:1d:60:da:17:35:97:ea:d0:87:97:5c:
be:5a:95:89:5e:6b:ee:96:cc:cf:8c:18:72:fd:79:17:37:c6:
f4:09:c1:48:33:9a:cf:91:eb:91:2e:00:bf:ad:ec:c6:76:48:
16:46:90:b3:f1:18:25:37:75:28:34:5e:79:f0:d0:54:e4:41:
d5:df:76:ed:4c:39:e4:ba:1c:4e:e4:a3:43:de:46:0c:87:26:
8e:37:79:63:fa:f3:22:da:28:a3:c2:6a:5f:ca:13:13:c0:c7:
0e:f3:a1:b8:5f:87:5f:34:de:2a:99:57:c3:f9:05:08:6b:31:
15:14:20:e7:b8:a5:b9:df:43:b5:32:bd:a9:9a:d1:bb:76:e7:
a8:e6:ba:0f:02:88:0b:59:03:fc:95:da:4b:97:5e:77:22:f4:
ca:e0:60:8a:f5:81:3c:d3:5c:35:4b:e6:11:99:18:07:6c:44:
ca:cc:38:06:bb:b8:63:eb:1b:b1:1b:fa:a8:82:35:69:10:a0:
2b:36:1a:a7:fa:57:5c:55:9c:08:3f:18:d7:3c:c7:b2:2d:c9:
03:24:43:24:47:ae:2f:89:a9:28:21:31:e4:de:b4:9d:b0:ae:
70:c3:d4:9a:4c:0c:63:c9:48:12:07:c7:fe:51:e8:f1:d4:e0:
1f:88:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:49 2025 by rpki-client