Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pnSobYA9I-CZ2cdSkUbStTFfI1E.roa
File: pnSobYA9I-CZ2cdSkUbStTFfI1E.roa (raw, json)
Hash identifier: lOhXMSfzL+Wu1zn68rlXdVNpJuY0SiWHqrcPLMar7Ac=
Subject key identifier: A6:74:A8:6D:80:3D:23:E0:99:D9:C7:52:91:46:D2:B5:31:5F:23:51
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E7EB31EF836E15A0A5E2C9A90B6A6E3E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pnSobYA9I-CZ2cdSkUbStTFfI1E.roa
Signing time: Tue 06 Dec 2022 14:51:01 +0000
ROA not before: Tue 06 Dec 2022 14:51:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212164
IP address blocks: 2a06:a005:1167::/48 maxlen: 48
2a0a:6040:c700::/40 maxlen: 48
2a06:a005:1168::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:eb:31:ef:83:6e:15:a0:a5:e2:c9:a9:0b:6a:6e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 14:51:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a674a86d803d23e099d9c7529146d2b5315f2351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:e2:fd:42:57:b1:06:e3:ad:91:7d:1a:71:
02:75:3b:f2:ac:ea:92:02:9d:be:22:c4:47:78:43:
ea:fa:42:e4:06:c2:d2:ab:64:47:60:c9:c1:57:8f:
22:09:fe:06:04:26:04:73:6e:d4:17:32:e7:94:a9:
a4:c3:f5:78:6e:af:3a:fd:4c:6d:4a:03:91:28:0f:
b5:24:5e:f7:21:6f:ab:50:84:db:d2:e9:03:75:f7:
38:63:ff:3f:80:36:3a:10:aa:3b:ee:16:be:80:9d:
ed:9d:c2:e5:2c:b0:af:4f:eb:0c:f1:fb:fd:6d:71:
c8:18:85:be:a7:7f:17:09:b8:42:40:9f:14:51:f4:
ac:26:a2:1e:f3:05:47:7b:d8:4c:58:a3:cc:b1:07:
0a:71:87:fe:ba:4f:94:0c:7a:76:c7:1c:07:81:8e:
6d:dc:92:f5:30:3f:ff:0e:63:d0:f8:eb:01:95:80:
5a:65:5d:4f:16:e9:76:ad:a5:7a:f9:f8:97:2e:3f:
c8:d4:ba:3b:1f:da:bb:3c:5c:20:37:8b:77:9a:15:
fe:8a:07:af:e0:c9:db:b2:d2:f7:36:f8:46:76:cc:
b6:b1:52:0f:be:fa:e1:bc:44:10:cb:5f:23:05:a8:
97:d3:67:73:c7:eb:dc:21:66:12:62:84:55:63:66:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:A8:6D:80:3D:23:E0:99:D9:C7:52:91:46:D2:B5:31:5F:23:51
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pnSobYA9I-CZ2cdSkUbStTFfI1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1167::-2a06:a005:1168:ffff:ffff:ffff:ffff:ffff
2a0a:6040:c700::/40
Signature Algorithm: sha256WithRSAEncryption
6c:66:da:e0:12:cc:53:d1:8a:53:dd:88:19:32:38:83:dc:c9:
7d:91:0a:41:28:f3:a3:7e:7e:41:40:ae:43:4f:73:58:a0:19:
db:93:a0:8c:68:3b:ed:42:1b:06:6d:4c:ec:83:ac:70:fb:e7:
37:d2:68:c1:20:46:d1:36:1e:0a:03:7a:0d:c1:25:e0:b5:1c:
f6:58:99:bf:92:6a:f0:b1:76:38:21:8a:92:45:45:6d:57:98:
35:5a:0d:e2:de:36:a5:38:31:38:41:f7:a0:70:e7:c4:b5:0e:
3c:84:b9:05:6f:cb:2f:0c:0c:de:18:92:f4:06:51:b4:96:89:
b3:2c:0a:36:06:a1:cf:15:24:28:c5:7c:d4:7f:ef:c8:c8:5f:
22:0a:cd:77:43:77:b2:cf:09:26:d0:00:5f:a9:57:3e:92:ed:
65:6c:35:eb:54:6c:94:ec:70:ae:d6:1e:09:8e:4c:84:d9:2b:
5d:b2:8b:59:68:72:64:ed:ee:1a:62:9a:be:65:24:d9:55:b6:
1f:27:37:3a:2a:6e:45:21:92:8a:70:c0:73:33:c0:11:d6:21:
f3:aa:95:79:b0:22:66:79:d5:1e:00:3f:fe:35:b2:5c:2d:c3:
48:dd:3f:45:be:e8:7f:fd:cc:8f:f3:6a:a5:54:bc:26:7f:14:
4e:59:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:08:06 2025 by rpki-client