Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PMMFieEytB0PhOz7UVedk_GQwc0.roa
File: PMMFieEytB0PhOz7UVedk_GQwc0.roa (raw, json)
Hash identifier: fAQBIdMUj0uwcJz5PUqitiQmLcqrWDIieiz4kCI6PCM=
Subject key identifier: 3C:C3:05:89:E1:32:B4:1D:0F:84:EC:FB:51:57:9D:93:F1:90:C1:CD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919207FC81C20FC4F5F2C2EAE4AE50D3FC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PMMFieEytB0PhOz7UVedk_GQwc0.roa
Signing time: Tue 27 Aug 2024 04:11:22 +0000
ROA not before: Tue 27 Aug 2024 04:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:07:fc:81:c2:0f:c4:f5:f2:c2:ea:e4:ae:50:d3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 27 04:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cc30589e132b41d0f84ecfb51579d93f190c1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:32:63:6a:26:86:bb:1e:86:73:ba:45:0d:
c6:e9:9f:79:35:d0:a3:27:67:ec:4c:0e:ed:76:7b:
f3:bf:2a:f3:42:3f:25:ce:95:35:14:c2:bb:e6:54:
01:35:34:22:ca:73:77:f0:da:16:8f:38:2d:1e:2e:
c1:a9:29:dc:28:16:1b:21:34:24:c9:1b:4b:ca:fc:
f2:43:d4:03:da:41:7b:cf:51:e4:2b:7a:74:ba:0d:
f2:8f:b5:a9:a2:65:f5:d2:71:7a:9c:47:21:bc:1b:
a3:2d:c6:3c:24:16:9b:00:51:49:89:40:d5:1e:e4:
cf:60:8e:f6:6c:fa:e0:ab:d5:92:82:52:ef:fa:a2:
a4:6b:11:ac:9f:40:2e:57:a1:28:c2:62:46:30:3c:
b5:e7:52:73:4a:2a:d5:57:25:55:8f:3a:64:c9:e6:
7a:5b:e8:0a:6c:1d:cf:05:5e:4f:b4:c0:07:f0:68:
e8:93:2c:6e:a7:f5:3f:11:31:b9:af:04:a2:ff:4c:
e0:e8:9c:b6:9c:d4:5a:81:fe:8b:59:5d:cb:3c:e3:
e7:fa:0b:8d:19:c8:fb:6d:49:7d:bc:ff:1f:a6:de:
76:62:67:46:4e:e0:94:1a:31:77:22:88:88:fe:ae:
f3:12:42:e7:b0:8c:9f:80:70:ea:03:a3:35:eb:4a:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C3:05:89:E1:32:B4:1D:0F:84:EC:FB:51:57:9D:93:F1:90:C1:CD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PMMFieEytB0PhOz7UVedk_GQwc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
34:4e:fa:dc:9d:83:1e:a9:92:37:fa:26:80:11:e3:d8:7c:7c:
a9:7d:8d:1f:bc:21:a0:88:23:a0:39:63:56:2b:d8:bf:34:1b:
8b:fb:16:a6:1a:24:88:d1:95:44:be:b5:40:ba:51:fe:97:2d:
98:f1:06:e4:db:93:3b:72:ac:28:7e:33:2d:49:fa:1e:76:41:
cf:b1:a8:46:28:2b:a8:4d:56:9c:75:45:4d:29:31:db:75:6d:
e7:76:69:88:d5:e6:5c:c5:ed:fe:c6:dc:8a:7d:e7:46:4b:89:
21:cc:dc:08:8b:6f:e9:54:de:b3:60:a2:72:04:b3:41:e6:9d:
60:1b:7c:07:2c:1a:53:93:ed:9d:99:0c:59:7b:2a:43:2b:1a:
11:d7:37:db:9f:9b:cc:d6:f6:48:72:91:4e:6e:42:4f:44:e9:
7b:af:66:87:9b:5f:b3:0b:f5:50:ed:c3:ae:00:99:ce:0c:81:
e1:ae:44:04:b1:9c:5c:83:1f:dc:40:7d:5a:65:d9:ec:e0:fc:
6b:1b:02:ac:39:0f:c1:7e:8a:c6:43:8f:2b:53:18:d0:9a:e7:
2d:df:68:b2:94:06:ba:01:c2:57:3d:48:2c:ea:22:5d:7f:c1:
8c:71:5c:b2:12:74:fe:63:08:2c:7c:e7:6e:c4:2a:37:27:e3:
02:7e:82:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:57 2025 by rpki-client