Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/Pzz9-39B29Zan_AKRyiM2W7cTbI.roa
File: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (raw, json)
Hash identifier: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=
Subject key identifier: 3F:3C:FD:FB:7F:41:DB:D6:5A:9F:F0:0A:47:28:8C:D9:6E:DC:4D:B2
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019423D7FCF0B6024170B39D1DB4CFCD6595
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/Pzz9-39B29Zan_AKRyiM2W7cTbI.roa
Signing time: Wed 01 Jan 2025 21:49:05 +0000
ROA not before: Wed 01 Jan 2025 21:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60662
IP address blocks: 185.27.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fc:f0:b6:02:41:70:b3:9d:1d:b4:cf:cd:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Jan 1 21:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f3cfdfb7f41dbd65a9ff00a47288cd96edc4db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:97:68:89:03:ee:cc:a0:41:e6:1c:fc:98:
c8:db:9a:69:5c:ed:76:ca:6f:19:f9:fc:e2:62:68:
26:02:93:92:6b:08:c1:b8:9c:1c:c6:ca:25:78:90:
4b:13:45:b7:b7:50:e7:2f:25:ec:80:20:10:68:1b:
b9:54:4c:5a:b6:ea:3c:ee:dc:f3:1b:7e:e0:4c:f4:
36:c8:19:e5:76:c3:e3:4f:a7:e7:34:15:3e:11:a5:
9a:85:d0:1e:df:2f:a6:34:d3:6c:e4:d1:82:fc:6b:
b4:69:20:b5:99:f0:97:c3:67:c8:c9:6e:2b:5c:5d:
30:0e:81:37:8c:5b:22:d5:24:ce:60:8d:47:c1:ce:
d6:58:0f:69:3b:7d:c1:77:dc:fe:44:ed:16:ec:64:
6e:85:80:f6:bf:30:cf:d3:69:0c:cd:22:9e:10:8f:
d5:45:9f:f8:71:74:32:a8:9b:bf:90:34:67:04:d4:
08:6a:10:ed:b2:02:d3:ff:06:05:0d:56:22:65:d0:
52:3f:a6:16:29:c9:34:ee:3d:d8:3a:4e:06:0f:ce:
d7:6f:3c:68:b1:69:e2:cd:5e:e7:23:22:8d:5b:82:
44:18:7d:75:78:3f:80:13:83:b6:3d:98:a2:1a:28:
bc:2e:32:55:13:6e:96:86:62:bc:a5:af:22:a4:02:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:FD:FB:7F:41:DB:D6:5A:9F:F0:0A:47:28:8C:D9:6E:DC:4D:B2
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/Pzz9-39B29Zan_AKRyiM2W7cTbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.168.0/22
Signature Algorithm: sha256WithRSAEncryption
90:69:7d:fb:7b:9d:d7:50:74:18:90:7c:19:14:01:0e:bc:51:
d3:74:af:6f:32:b0:40:7b:61:3f:46:71:62:b3:1d:01:76:18:
dd:d9:4b:ba:ac:64:70:92:3a:f1:fc:d3:45:ac:5d:b4:6c:a0:
c5:46:5c:47:cf:c5:10:af:2c:06:d2:c3:c7:5a:ce:90:ac:6e:
6e:94:62:7c:fd:6d:65:4c:65:54:2f:a2:ee:54:a4:b8:42:8e:
bc:f4:dc:b3:1f:5e:eb:47:2d:dd:5e:cb:a9:ac:f9:8d:f2:14:
47:db:b4:fc:19:ff:d8:59:fe:14:a5:af:91:45:78:4e:62:24:
81:2f:f9:69:b9:89:39:39:0d:f7:d4:c4:d5:47:af:2b:1e:64:
47:80:18:61:77:f5:71:e5:83:7a:bc:ff:c6:66:08:61:bc:f3:
49:51:14:e2:04:7e:10:2e:a5:7a:80:5e:6e:e1:4a:da:91:b0:
ca:8f:49:4c:2a:6f:b9:d9:92:78:28:a8:73:39:d9:aa:f3:87:
43:cc:cb:01:c0:0f:7d:f4:ae:f7:5f:c5:cc:f0:05:bb:11:7a:
b1:42:ed:17:0c:7b:65:9b:08:16:ae:31:a3:06:1b:63:c4:f5:
73:93:31:b0:f2:83:82:fe:d8:f6:32:8d:62:11:6b:88:06:f7:
f3:8a:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:31 2025 by rpki-client