Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/PGMK1-OlWgKaP3bJNRajQpxu8vA.roa
File: PGMK1-OlWgKaP3bJNRajQpxu8vA.roa (raw, json)
Hash identifier: VP1Lh654Pjz3OCgsDqSZJzeq8ULo1rSLNHx/bHWXvAQ=
Subject key identifier: 3C:63:0A:D7:E3:A5:5A:02:9A:3F:76:C9:35:16:A3:42:9C:6E:F2:F0
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 019421441A538C92A5DFB2EAFE9D5ED89B0F
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/PGMK1-OlWgKaP3bJNRajQpxu8vA.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.171.211.0/24 maxlen: 24
31.171.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1a:53:8c:92:a5:df:b2:ea:fe:9d:5e:d8:9b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c630ad7e3a55a029a3f76c93516a3429c6ef2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:f9:2a:a8:b7:91:8a:16:9e:3a:c0:cf:f4:
ba:b6:2e:f7:42:96:76:3d:f3:0d:23:77:86:5e:3e:
38:b6:52:a4:8b:e9:00:87:8e:f8:87:cf:0f:3d:d7:
2b:26:05:3e:7d:79:16:b7:07:a7:5d:8a:29:99:f4:
c5:e1:52:db:5c:56:36:b8:04:7e:1a:d6:ba:b9:9f:
8a:a1:2e:36:65:f0:09:ff:f8:a5:d5:9e:11:7d:6e:
e9:6c:62:4c:2a:91:a3:7c:81:4e:e5:c8:f6:77:66:
e3:51:dd:61:65:ca:38:8c:39:72:3b:00:fd:86:31:
09:22:ec:09:94:9e:cd:ac:eb:bb:28:50:3d:fa:8c:
39:e9:0a:28:2c:8b:0c:81:95:67:0d:e3:b9:36:41:
1e:a0:ba:df:7f:c5:19:6e:bf:97:00:06:e4:0c:04:
b6:af:7e:75:01:c9:ef:70:48:b7:a3:fd:63:d2:28:
8d:77:e5:4a:a9:87:35:81:bc:9f:b0:06:92:e4:63:
bd:20:41:02:03:6e:10:02:7e:8b:ad:8e:45:76:6f:
9f:22:ed:3a:39:26:b9:c5:5e:07:60:4d:81:d9:e8:
a8:41:26:35:d9:ee:d5:53:1c:ed:99:48:8f:c3:b9:
27:f4:23:d6:cc:f9:dd:4a:e5:0f:bf:c4:3c:12:ee:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:0A:D7:E3:A5:5A:02:9A:3F:76:C9:35:16:A3:42:9C:6E:F2:F0
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/PGMK1-OlWgKaP3bJNRajQpxu8vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.211.0-31.171.212.255
Signature Algorithm: sha256WithRSAEncryption
47:8a:e1:68:0d:3d:d4:25:22:f5:6f:8a:bf:eb:a3:ed:d8:74:
1b:06:e2:a3:93:0d:75:ab:6a:84:ef:0d:3d:e5:c1:47:4e:71:
d1:7d:5a:dc:80:67:57:67:bd:4c:f1:b0:61:28:cf:36:0b:6d:
c1:17:56:20:2e:8e:c1:fe:da:75:3b:9b:48:a8:41:7d:d3:96:
c0:f4:46:1a:7d:0e:d9:bd:6f:86:ee:b6:f4:20:d2:de:70:0f:
cb:46:c0:12:42:78:ce:1a:d2:a4:84:a5:04:c6:df:c1:7a:2d:
68:c0:e3:6b:b3:c1:88:55:1c:45:d2:bd:ee:a1:12:78:3d:66:
02:30:11:08:f9:eb:8b:91:1b:ef:0b:b8:09:6b:30:7c:12:41:
a2:85:5b:23:27:db:f1:d5:ae:43:b0:3a:52:65:32:c6:ab:50:
b8:39:3b:d0:9c:f7:5e:ca:b2:19:20:fd:6a:b3:3c:dd:9d:db:
ca:e8:bd:b4:a0:19:60:13:9d:47:6f:04:86:99:27:fb:2c:4e:
f3:3b:da:54:fc:68:1c:9b:32:7f:d9:0e:77:3d:43:cd:4f:05:
5f:62:19:ea:2c:9c:65:bc:94:71:06:f7:60:79:82:83:28:9c:
11:d6:14:59:43:bb:e8:69:8c:09:39:93:e8:f7:ee:4d:14:a4:
d1:28:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:44 2025 by rpki-client