Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/PF8Dfwpieuc3szZWNlM6zxbOCaw.roa
File: PF8Dfwpieuc3szZWNlM6zxbOCaw.roa (raw, json)
Hash identifier: eEI5JJg+vshmiZesKoh8QcSvz/GrsPF5AtTzxYWQZk4=
Subject key identifier: 3C:5F:03:7F:0A:62:7A:E7:37:B3:36:56:36:53:3A:CF:16:CE:09:AC
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 019425222C52E0A814D860738BDC6BF10775
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/PF8Dfwpieuc3szZWNlM6zxbOCaw.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.54.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:52:e0:a8:14:d8:60:73:8b:dc:6b:f1:07:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c5f037f0a627ae737b3365636533acf16ce09ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:cf:60:38:40:dd:ac:65:19:db:99:5b:63:
5a:bb:2c:55:35:89:4b:f3:42:66:f6:c1:86:8d:db:
ee:c1:75:d9:5e:c8:4f:8e:a0:da:23:a7:7b:e4:d7:
7c:88:66:76:db:cf:f1:35:3f:c6:8e:8a:e4:a1:72:
79:96:e5:60:61:34:8b:89:06:e5:47:49:22:11:1b:
80:7f:2b:d0:01:52:79:73:b9:e2:d0:da:8f:a0:4d:
17:3d:95:d9:61:6e:7f:32:a3:6e:87:f5:d8:86:86:
b0:33:a1:f0:21:bf:bb:5e:4e:6e:84:a5:2b:0c:75:
b3:63:35:b9:5e:b3:fe:dc:0c:73:44:49:e2:3c:e2:
0a:fa:d4:23:e6:2a:d7:c4:53:ed:e2:61:6c:92:31:
6d:8a:fa:a0:5b:6f:9e:30:d3:1a:72:0f:17:0a:fc:
e5:5c:3a:ee:3e:f3:f4:03:29:23:3c:4f:4b:48:06:
57:a9:9d:c8:da:ac:bf:4e:ce:fa:d6:c0:d4:9f:9c:
f1:5f:3c:2c:a3:e1:88:1e:f4:ac:44:2d:d3:32:c9:
75:35:d1:d6:9e:5b:ea:81:2e:70:c4:c3:be:8f:04:
51:56:6c:19:ad:fe:83:27:e0:3e:3b:35:bd:a4:c7:
13:55:34:da:ec:35:df:10:45:a5:32:b4:db:e4:26:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:03:7F:0A:62:7A:E7:37:B3:36:56:36:53:3A:CF:16:CE:09:AC
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/PF8Dfwpieuc3szZWNlM6zxbOCaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:44:7f:6c:6c:cc:2a:90:a6:35:f1:bf:49:e9:ab:78:3a:e7:
56:ef:f9:f6:d3:ba:90:8a:c8:e3:dc:41:34:88:bf:51:50:40:
e3:c9:39:01:30:bf:4b:92:1b:50:05:41:35:9d:b0:9f:03:8a:
f5:2d:dc:1d:c9:47:bf:b8:8d:de:76:77:4d:20:69:7b:1e:d8:
91:b4:ce:9e:42:09:9e:db:78:00:8b:77:89:2f:f5:10:0e:e4:
ac:57:1e:f2:29:3e:aa:15:37:3c:ce:bf:12:37:ee:c1:44:6b:
61:d7:f2:b9:50:55:0d:ea:8f:ef:25:16:2d:44:35:ca:18:2f:
3f:c3:63:9f:51:03:54:2f:7d:1b:13:a5:53:cb:52:73:96:ed:
f1:a5:5d:73:b0:e8:a1:43:3e:d9:34:5a:fd:1d:72:6b:43:87:
f2:83:21:5e:e8:1b:1d:3b:43:70:53:42:99:e8:54:9d:04:8d:
89:97:a2:66:53:66:2f:4d:1c:45:39:81:61:48:d3:11:5c:a2:
18:71:45:07:e6:7d:46:78:19:a9:31:6e:1c:e9:a9:0b:11:d1:
42:e5:4b:66:57:44:50:1f:42:eb:1b:18:82:91:9c:07:4a:fc:
05:e5:14:31:d0:72:83:8f:6c:03:ca:a6:57:2d:0c:8d:b1:bd:
84:06:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:28 2025 by rpki-client