Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/pct1Kjhv6eD6HNneRtjP0MoKUIE.roa
File: pct1Kjhv6eD6HNneRtjP0MoKUIE.roa (raw, json)
Hash identifier: h7kacdTC13t9I95vLv8XmnnTP6SvK0W/+jZeCXcQYhM=
Subject key identifier: A5:CB:75:2A:38:6F:E9:E0:FA:1C:D9:DE:46:D8:CF:D0:CA:0A:50:81
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067F174C6376518E3F3549851D39ECD
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/pct1Kjhv6eD6HNneRtjP0MoKUIE.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211051
IP address blocks: 2a12:3fc2:ab50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:74:c6:37:65:18:e3:f3:54:98:51:d3:9e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5cb752a386fe9e0fa1cd9de46d8cfd0ca0a5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:bf:c5:aa:ff:d9:f5:ba:09:28:8f:6f:38:
39:8e:46:37:24:fe:3a:16:b3:c2:0d:83:b3:90:fc:
2e:70:d7:e5:8c:f2:ec:01:b8:ec:81:8f:3d:44:71:
bc:6e:8c:3d:7f:c7:44:b1:cd:81:8e:3d:74:44:1d:
f6:70:34:3d:8f:ac:59:f2:13:07:a2:be:f3:e2:db:
43:3f:ac:bf:78:8e:cd:dc:cc:a0:23:52:c7:08:e3:
92:5e:a5:be:ce:64:a6:99:e0:13:0b:b1:e6:22:ae:
39:ba:f0:21:99:bd:0d:71:37:1b:92:fe:c8:38:30:
2a:e5:b3:e0:96:24:ce:44:62:27:9a:61:3c:01:65:
76:83:35:d4:72:01:95:33:ef:d1:98:77:da:75:93:
4e:b2:f4:a3:ad:1d:72:14:22:04:e7:18:e3:8a:06:
b4:89:a9:29:15:bc:5d:a0:b2:e6:c0:bc:5d:3e:75:
22:37:73:a7:ee:e7:d3:09:e5:e9:cb:a3:36:47:44:
58:34:f3:5b:d7:8c:74:7f:59:3f:25:47:0f:a7:4d:
43:24:61:2f:3d:f4:8b:bd:49:34:9e:40:e3:a5:fc:
f8:64:b2:22:5d:7b:a3:55:69:ca:d8:22:b5:c4:79:
6e:9d:c0:7b:94:e3:ca:f0:0d:2a:83:2b:31:d2:7a:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:75:2A:38:6F:E9:E0:FA:1C:D9:DE:46:D8:CF:D0:CA:0A:50:81
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/pct1Kjhv6eD6HNneRtjP0MoKUIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab50::/44
Signature Algorithm: sha256WithRSAEncryption
cb:c5:ea:e1:dd:98:8a:97:1b:c4:fe:22:0f:c7:a7:b7:3d:d3:
d6:d5:5b:8e:0d:dd:89:8d:6f:bf:f6:e1:63:fd:61:d9:d9:52:
6d:2c:ea:a9:8c:fb:cf:f7:2b:d8:83:fd:19:4d:86:6f:13:a0:
dc:7d:6b:06:0e:7b:ae:8b:ea:35:9f:1d:16:7a:cd:f8:b0:31:
21:cc:d2:c7:cf:89:01:e5:12:79:b8:bc:7d:61:4b:32:ea:c8:
cf:6e:fe:dd:6b:e3:75:7c:0e:53:c7:4b:1e:00:61:19:cd:d7:
7f:b7:0d:6a:f5:3b:cf:ad:f6:b8:0b:c5:c9:cc:0e:33:bf:55:
2e:86:82:56:9f:74:29:b1:95:59:c2:3d:c3:90:9c:aa:95:ca:
04:1f:b9:1c:3b:bb:e7:59:b3:1d:ab:88:87:da:80:30:a0:df:
82:47:c6:31:ab:c5:85:b8:a1:c7:ec:c5:47:2c:8d:9b:b2:9c:
57:7d:29:17:82:df:2f:d4:2a:0e:1f:56:7d:51:4a:15:9e:5f:
2f:18:d7:e0:71:66:f7:46:3b:d3:90:3e:1b:cd:4b:83:d2:9a:
97:d9:8c:9c:48:e0:0e:14:f9:d3:ae:21:d0:14:5b:9c:e8:c0:
fb:80:ec:9c:f5:f9:0a:9c:ba:30:56:96:04:ff:96:27:e6:ec:
a6:bf:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:45 2025 by rpki-client