Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/p3FhpinCSj-rmEiEA_PXClarb5w.roa
File: p3FhpinCSj-rmEiEA_PXClarb5w.roa (raw, json)
Hash identifier: +aQSgPjdV4Re9DLgVF2PaIa3K9Hjm/0/oFlfmTVd5zA=
Subject key identifier: A7:71:61:A6:29:C2:4A:3F:AB:98:48:84:03:F3:D7:0A:56:AB:6F:9C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0195CF1C3D15FDBA9EB50287DA6719797332
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/p3FhpinCSj-rmEiEA_PXClarb5w.roa
Signing time: Tue 25 Mar 2025 21:01:29 +0000
ROA not before: Tue 25 Mar 2025 21:01:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2001:3080::/29 maxlen: 29
2a0e:a780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cf:1c:3d:15:fd:ba:9e:b5:02:87:da:67:19:79:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 25 21:01:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a77161a629c24a3fab98488403f3d70a56ab6f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:32:7e:df:c8:d0:20:78:15:6f:48:e4:cf:
f9:08:dc:3e:7e:53:72:b1:16:f9:e5:67:24:9b:d6:
87:77:f3:67:4c:5e:a1:22:75:1e:72:fa:4f:58:f1:
d6:d3:e6:72:29:dc:3b:0e:6f:ed:84:aa:22:4d:e0:
9a:2f:02:86:b0:67:82:ef:d3:bc:fe:f1:f4:65:2e:
3a:b4:e5:24:e4:17:a4:d6:e7:d1:8b:4a:6d:76:d0:
30:9d:1a:6a:6b:f7:00:a0:db:fa:74:ae:c8:f1:c1:
8c:c1:11:96:f3:85:6d:43:0e:a8:9a:f5:de:e9:fc:
7c:33:47:a8:7c:3f:9d:8d:da:75:ad:10:58:87:e4:
3a:99:6b:c9:87:d2:dd:8d:44:ec:d2:2c:76:80:e3:
c6:d1:09:ce:c3:9a:ad:fc:0c:0e:5e:21:31:2c:6f:
9a:35:ca:dd:d2:fa:de:85:3f:15:e3:ac:84:7e:2f:
4b:45:c6:1f:53:87:c4:95:4d:12:a5:58:e9:ba:5b:
9f:36:b6:90:18:78:ae:f0:8a:b0:a1:75:80:46:e0:
ae:ed:3c:dd:da:f3:94:39:93:8a:f4:88:9e:a9:87:
b5:40:77:26:b3:1b:ce:02:d5:fb:c5:a5:e9:01:9e:
70:93:f3:f8:0c:22:00:43:bc:66:ba:ed:d4:f4:6e:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:61:A6:29:C2:4A:3F:AB:98:48:84:03:F3:D7:0A:56:AB:6F:9C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/p3FhpinCSj-rmEiEA_PXClarb5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2a0e:a780::/29
Signature Algorithm: sha256WithRSAEncryption
98:27:c1:22:07:c8:47:77:6f:0f:b5:81:f0:e2:d0:99:57:38:
1c:fa:57:05:93:e1:11:5f:81:a7:96:c4:14:3a:f9:cc:ba:82:
4c:2a:a2:b9:7e:52:08:69:cc:33:a7:34:f9:44:3a:0f:dc:5f:
60:fb:f7:3e:54:60:06:07:6c:f2:39:05:9e:a2:18:24:48:cb:
65:61:c8:30:0c:f6:52:8b:98:d7:68:77:34:3d:00:af:62:9a:
17:90:8b:5c:7a:d2:5f:2d:b9:ba:6b:03:77:be:38:0f:17:70:
d4:c0:52:93:b5:b8:55:98:d8:05:96:9c:ab:1d:85:85:2f:35:
80:6b:02:3c:08:b8:6a:4f:69:ff:31:64:18:e9:85:c2:f5:3a:
9e:2f:98:cf:97:4d:41:dc:85:d7:0f:d8:52:32:35:c6:b6:b3:
24:1f:61:1a:ab:2a:3d:fc:70:06:a5:b2:8a:ac:98:5a:42:a9:
bf:3f:81:bb:7d:9a:a6:94:33:cd:18:ab:1e:4d:20:e7:74:29:
28:06:b5:5d:73:a6:b2:c7:d8:70:27:74:5a:a8:e7:0c:17:75:
97:13:df:91:77:97:62:5b:f9:42:8b:8c:aa:6d:92:f8:5f:be:
bf:76:ec:b7:b6:00:4c:e2:49:5d:31:68:a4:2f:b3:85:d5:17:
ba:fc:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:23 2025 by rpki-client