Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/PZMMNEnISHydLBQ3uEPjlXl3Atk.roa
File: PZMMNEnISHydLBQ3uEPjlXl3Atk.roa (raw, json)
Hash identifier: zOD7Ku1/5t4+S4zhlGa0/nN9Q+6CTO+8CRANFeeRWgY=
Subject key identifier: 3D:93:0C:34:49:C8:48:7C:9D:2C:14:37:B8:43:E3:95:79:77:02:D9
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 0193634A65C2940F7D9BECE11CA42D354AB8
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/PZMMNEnISHydLBQ3uEPjlXl3Atk.roa
Signing time: Mon 25 Nov 2024 12:27:20 +0000
ROA not before: Mon 25 Nov 2024 12:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0a:f580::/32 maxlen: 32
2a0a:f583::/32 maxlen: 32
2a0a:f587::/32 maxlen: 32
2a0e:fb40::/32 maxlen: 32
2a0e:fb43::/32 maxlen: 32
2a0e:fb44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:4a:65:c2:94:0f:7d:9b:ec:e1:1c:a4:2d:35:4a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Nov 25 12:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d930c3449c8487c9d2c1437b843e395797702d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:21:e6:4f:f6:35:5d:74:38:13:e2:3f:2d:
be:e0:0a:e1:12:32:59:be:de:58:57:42:7e:07:50:
81:f2:23:bc:53:09:49:eb:08:b4:5a:89:32:db:74:
37:fa:b8:c4:e7:13:af:da:6f:d0:5d:f3:95:70:ff:
79:70:e1:52:18:b0:2e:fa:da:a2:44:68:7c:ed:36:
09:ca:12:97:62:cc:0a:3f:57:eb:74:b7:22:7a:9b:
cc:c2:09:30:46:e4:8a:40:c4:64:5b:e1:2f:b2:b6:
79:4a:46:07:2a:5e:6f:8c:5d:22:ab:bd:5b:3e:7b:
a5:a1:3b:9d:90:fe:b7:e7:0a:3d:04:38:92:e2:8e:
c5:42:ea:18:cc:65:63:64:0d:1d:8c:19:4e:e6:da:
25:1d:7c:3c:4d:08:96:e6:7e:fd:87:5d:62:4f:9e:
3d:73:1f:3a:db:42:52:a0:04:51:ba:47:4c:1b:e1:
18:c8:63:a4:c4:bf:f8:dc:f4:be:82:80:46:6c:85:
64:1a:06:32:e9:4e:b0:5e:b1:0a:85:12:08:0a:6b:
93:8f:52:a8:26:f8:e4:f7:fc:61:85:82:d0:c7:4a:
c5:ba:56:fd:4b:55:04:f1:5c:66:51:28:8d:bb:ad:
fa:7d:49:e3:d9:cc:6a:50:86:77:28:b3:aa:77:7e:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:93:0C:34:49:C8:48:7C:9D:2C:14:37:B8:43:E3:95:79:77:02:D9
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/PZMMNEnISHydLBQ3uEPjlXl3Atk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f580::/32
2a0a:f583::/32
2a0a:f587::/32
2a0e:fb40::/32
2a0e:fb43::-2a0e:fb44:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:06:c7:73:3c:80:69:f4:11:97:ac:df:e5:32:87:2b:ec:14:
ec:7d:59:ca:bd:3c:ca:e3:43:4e:82:38:a3:10:69:b5:f0:4c:
c2:16:83:88:12:22:9f:01:bf:ae:91:d5:89:ae:ef:6a:0e:c5:
79:34:68:fe:6d:96:30:13:38:54:d1:ae:8e:85:21:28:47:9d:
b3:af:9f:f6:5a:d3:ea:8a:a1:5e:e5:73:78:c2:41:b5:bd:31:
0d:6d:a3:a9:cf:b3:8f:2f:46:f0:c6:4b:a8:01:9e:34:79:8d:
6b:ba:85:b3:29:ab:24:2d:d9:7c:5f:f2:e5:9b:dc:5c:29:f3:
35:18:62:bf:43:c0:e0:79:32:6a:c8:0a:55:6f:b2:65:39:e4:
be:72:a3:40:a5:e7:10:7e:ec:b7:20:47:c3:74:d4:15:aa:6f:
8e:cb:a9:60:e2:e6:36:1d:f4:a3:f5:43:a5:c7:a2:5d:58:a4:
71:9c:1d:50:60:20:2c:13:89:6e:2f:a0:cb:cf:64:ac:bf:a8:
8f:95:a0:b0:4a:6f:f7:af:e9:f4:ce:ca:f3:d5:13:81:1c:04:
25:de:de:08:58:41:cd:54:3d:bb:37:7b:ba:64:ad:e3:45:5d:
fb:6f:2c:68:6e:6b:2a:5b:b6:4d:8e:cb:5a:16:aa:76:52:66:
a6:54:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:38 2025 by rpki-client