Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/PvhCIB6_B6sFA9UDP0ZOEzKeJJ0.roa
File: PvhCIB6_B6sFA9UDP0ZOEzKeJJ0.roa (raw, json)
Hash identifier: +gXjWYEJRXK6R9zriSEbiY3+RusKitzTP8getR6ypwk=
Subject key identifier: 3E:F8:42:20:1E:BF:07:AB:05:03:D5:03:3F:46:4E:13:32:9E:24:9D
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067E7037019DC72E506C110FB436120
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/PvhCIB6_B6sFA9UDP0ZOEzKeJJ0.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139317
IP address blocks: 2a12:3fc6::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e7:03:70:19:dc:72:e5:06:c1:10:fb:43:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ef842201ebf07ab0503d5033f464e13329e249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:05:e0:8b:26:01:77:bc:9c:67:cc:f4:3d:
3e:b5:89:65:d6:4b:9f:f9:60:72:fb:83:fe:b9:35:
b4:8c:ee:a8:09:d3:de:6c:1e:84:95:33:a5:7c:f7:
94:43:26:8b:fd:8a:57:21:9c:8e:73:a7:61:cf:42:
17:e7:39:c6:e1:58:ec:7e:57:a0:da:e0:42:e2:93:
53:87:c9:ea:b0:ba:f9:58:f7:f5:eb:b5:10:5c:57:
a5:92:04:6b:84:c3:92:82:cd:8d:3c:8f:5f:72:cc:
27:08:fa:94:b9:16:e6:f9:1c:c3:d8:50:80:e0:0e:
e5:ed:78:65:12:3f:9a:c9:a5:6f:51:a3:58:5e:d4:
ae:91:58:98:a7:a7:b6:9b:9f:b2:1c:7f:d8:3d:22:
b1:e6:66:ec:b9:60:0f:27:be:ed:20:04:fe:9c:8e:
d9:cf:8c:db:75:b5:b4:44:51:90:31:33:17:07:82:
10:56:15:71:80:3e:f4:97:6b:7d:85:8c:63:8f:7d:
cd:b5:6f:fd:f4:17:e6:01:55:9e:8c:16:42:41:18:
98:4b:0a:01:e4:17:49:4b:2e:d8:20:97:55:93:51:
e7:2a:15:22:80:75:39:9a:ee:01:62:b1:84:53:e0:
43:93:e0:b2:5c:51:32:b9:b6:d7:11:29:06:ab:4c:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:42:20:1E:BF:07:AB:05:03:D5:03:3F:46:4E:13:32:9E:24:9D
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/PvhCIB6_B6sFA9UDP0ZOEzKeJJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc6::/44
Signature Algorithm: sha256WithRSAEncryption
98:09:a2:42:51:06:cb:00:77:8d:eb:c9:38:9f:0e:04:73:3b:
e2:21:4f:83:c2:92:fb:90:a3:1b:32:d4:d8:25:b2:e7:91:25:
79:54:c7:b9:a0:eb:df:db:48:2a:8a:e9:6e:59:64:c0:93:8f:
87:1a:04:55:44:f3:7c:88:b6:4a:fd:6d:29:55:0f:21:b6:2a:
11:0a:10:a9:99:31:68:77:e2:17:10:37:f5:2f:59:ac:70:b2:
bc:9c:77:77:03:4c:96:85:66:99:67:b3:10:ae:60:26:13:a3:
fc:29:f7:99:c9:bb:e5:6b:98:4e:24:71:49:98:9b:e1:1d:13:
1a:06:22:af:01:3e:c9:33:f7:46:0f:43:58:00:8b:54:d1:4e:
47:9e:2e:9b:ba:31:94:50:44:da:84:d6:2a:a2:70:cc:90:55:
81:ab:27:52:46:84:6a:eb:11:b4:3c:e2:23:c0:08:7b:3d:75:
e7:80:c9:64:6c:c3:54:56:0a:2e:06:ba:e0:05:7d:aa:5d:30:
b3:79:c6:20:e0:da:01:1e:fb:ef:48:80:2d:17:70:01:d8:86:
f4:96:4f:fc:37:96:47:64:43:bc:38:fb:5f:5d:ce:11:ae:7e:
c0:c2:29:c8:07:e3:ab:d7:8b:ea:41:35:59:91:ae:19:99:06:
04:e6:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:11 2025 by rpki-client