Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/PtcZQProvYy-CFaH8bGJfLgnQTQ.roa
File: PtcZQProvYy-CFaH8bGJfLgnQTQ.roa (raw, json)
Hash identifier: 1w4bjGSFAKH5+4zKxA1O6OQ7XHbeixDA/W07APQYMU0=
Subject key identifier: 3E:D7:19:40:FA:E8:BD:8C:BE:08:56:87:F1:B1:89:7C:B8:27:41:34
Certificate issuer: /CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Certificate serial: 018ABC0D37060A383EA08BF2ABEAC98301DC
Authority key identifier: 24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/PtcZQProvYy-CFaH8bGJfLgnQTQ.roa
Signing time: Fri 22 Sep 2023 08:41:37 +0000
ROA not before: Fri 22 Sep 2023 08:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48014
IP address blocks: 2a12:4047::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:0d:37:06:0a:38:3e:a0:8b:f2:ab:ea:c9:83:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Validity
Not Before: Sep 22 08:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ed71940fae8bd8cbe085687f1b1897cb8274134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:3a:f4:ea:22:8f:73:39:cf:da:57:d2:2c:
39:45:de:06:f2:48:47:fc:a8:a2:59:77:07:2f:a6:
e3:ed:8d:e1:49:a5:dc:59:95:e8:d9:78:86:91:86:
71:d7:28:ba:3f:0c:f7:c9:3a:97:d4:00:f9:71:a9:
3d:d1:dd:43:58:1d:a8:d6:ab:ae:6e:16:5f:33:1a:
f0:9b:ec:ee:4c:db:49:30:1b:90:60:30:98:12:23:
92:5a:72:b1:e3:d3:1d:01:5a:3a:99:c7:0c:19:25:
7b:23:1a:82:85:39:42:c1:24:e3:ea:cf:fd:e3:0f:
f8:1f:74:03:c2:2c:ae:53:ff:19:36:2e:0a:d3:72:
43:e5:f5:40:ac:5e:f6:ab:e7:2e:17:fe:d7:27:71:
fc:ad:31:c6:1b:59:d4:4f:c8:9a:04:1e:7f:86:9d:
14:6f:15:72:85:b6:18:db:2d:8d:a8:67:d2:cc:31:
d7:94:64:4d:bb:1c:40:63:00:06:f1:db:7f:ae:c0:
cd:58:25:f2:f3:11:c0:c8:f1:47:d8:d9:38:ce:8a:
04:ef:5a:be:c0:2f:84:6a:5f:68:f5:2b:93:25:33:
9f:9d:53:d0:d7:1f:fb:d6:d2:dd:c9:51:9c:f0:18:
89:07:59:20:cf:9f:af:99:d2:7b:5d:15:1f:9b:c1:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:19:40:FA:E8:BD:8C:BE:08:56:87:F1:B1:89:7C:B8:27:41:34
X509v3 Authority Key Identifier:
keyid:24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/PtcZQProvYy-CFaH8bGJfLgnQTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4047::/32
Signature Algorithm: sha256WithRSAEncryption
56:fe:38:f7:ff:5a:9b:ce:22:db:49:5b:00:23:c9:be:f7:34:
3b:82:b8:0b:fb:8a:d0:16:31:b8:6c:a2:2d:f2:ea:f5:53:65:
f9:fc:03:66:0d:3e:42:e2:5d:37:4e:16:a5:55:c1:33:55:96:
e2:e5:40:e2:e9:1a:31:98:c4:e1:eb:c5:4e:af:ca:2b:2c:d6:
08:21:cf:37:ca:1a:1e:29:b3:fd:e1:60:4f:74:0d:01:d7:54:
00:46:c1:64:90:36:ae:89:85:b4:72:99:5b:21:1e:49:c6:61:
c1:91:0d:85:3d:60:bd:74:69:ed:f0:65:69:9a:25:66:a7:29:
b1:d2:19:ed:e1:62:9f:14:ed:af:0e:ce:60:fb:26:cd:c5:69:
63:09:b3:0f:0f:9a:bb:82:ad:c5:89:1a:d6:32:66:b7:f5:33:
c9:ff:5d:f7:ba:40:88:5e:62:64:22:c5:b3:5e:cb:54:31:12:
54:5a:89:35:62:92:7f:54:84:0e:05:fe:a7:d3:17:07:ca:9f:
e1:7b:60:78:64:3b:6b:b8:11:a8:b4:09:42:d8:1d:3b:f6:a6:
a5:f6:65:9b:4a:b7:2c:3b:be:4c:01:4b:9a:25:97:59:0b:1e:
51:56:5d:78:68:2a:f5:fe:d4:3e:2f:d9:ac:77:a8:7e:60:26:
6b:42:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:08 2025 by rpki-client