Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/Pvv7XUkJKdVo9hiVf3EMmU9bGvM.roa
File: Pvv7XUkJKdVo9hiVf3EMmU9bGvM.roa (raw, json)
Hash identifier: C1jo0z3HIzw+6MhY27fgPXmDl1iXa9Fu5dch2fTPkjk=
Subject key identifier: 3E:FB:FB:5D:49:09:29:D5:68:F6:18:95:7F:71:0C:99:4F:5B:1A:F3
Certificate issuer: /CN=74c88b852938ec560144f829299ca1e84a36a75d
Certificate serial: 019410A6B9664C3C4B824C5F0FC86BCD4453
Authority key identifier: 74:C8:8B:85:29:38:EC:56:01:44:F8:29:29:9C:A1:E8:4A:36:A7:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMiLhSk47FYBRPgpKZyh6Eo2p10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/Pvv7XUkJKdVo9hiVf3EMmU9bGvM.roa
Signing time: Sun 29 Dec 2024 04:22:29 +0000
ROA not before: Sun 29 Dec 2024 04:22:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204012
IP address blocks: 2001:67c:d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:10:a6:b9:66:4c:3c:4b:82:4c:5f:0f:c8:6b:cd:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c88b852938ec560144f829299ca1e84a36a75d
Validity
Not Before: Dec 29 04:22:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3efbfb5d490929d568f618957f710c994f5b1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:da:7c:e1:e3:26:04:36:ee:ea:65:8a:69:
40:21:c2:6a:1e:83:b1:24:03:68:87:15:a9:c3:69:
30:2f:33:1c:55:65:32:e0:5c:63:29:2d:e2:bd:9a:
32:93:92:93:1d:d0:a0:38:39:c8:22:5c:83:d6:58:
1e:28:5d:b5:6e:1d:f8:7e:90:50:7f:82:5c:08:9a:
8e:15:e5:3b:67:c4:c0:32:f9:e8:e0:45:a1:e6:85:
fb:5a:53:df:3f:80:82:bc:f4:c8:9d:64:17:56:e1:
61:33:96:0a:79:13:bd:a3:99:aa:47:db:0c:7b:71:
f8:a0:2e:73:05:17:12:14:32:c7:43:1c:41:76:c9:
4c:09:11:37:1e:06:2f:89:7f:f7:44:f7:cb:d0:c1:
cb:61:72:9b:8e:fd:a2:dc:a2:c3:08:d9:34:f0:c7:
44:e0:28:4f:57:fc:e8:29:21:55:4e:56:5b:de:4c:
48:f3:25:19:fe:8e:29:aa:7f:b8:d2:be:ad:06:39:
cb:32:4c:09:6e:53:00:2d:bc:98:f3:a4:02:38:ea:
2a:ba:09:05:f0:91:fb:f3:9b:f3:70:97:64:6d:b4:
fd:f8:20:cf:d9:a8:f3:c0:0c:a5:0d:4b:19:85:94:
37:fb:6a:98:88:33:de:09:9e:c8:c0:c7:b0:24:74:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:FB:5D:49:09:29:D5:68:F6:18:95:7F:71:0C:99:4F:5B:1A:F3
X509v3 Authority Key Identifier:
keyid:74:C8:8B:85:29:38:EC:56:01:44:F8:29:29:9C:A1:E8:4A:36:A7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMiLhSk47FYBRPgpKZyh6Eo2p10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/Pvv7XUkJKdVo9hiVf3EMmU9bGvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/dMiLhSk47FYBRPgpKZyh6Eo2p10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d80::/48
Signature Algorithm: sha256WithRSAEncryption
86:32:38:c6:87:fd:dd:8f:2a:c3:78:0b:34:b9:20:43:20:3a:
a5:ef:06:b5:6d:aa:a4:2b:34:68:3b:99:1a:7a:e6:0b:6b:04:
03:5c:d5:b7:81:10:fc:21:2f:4c:38:e4:70:37:5c:8b:89:53:
79:ad:f8:25:8d:74:6b:a5:20:3b:1e:1b:8a:34:4f:0a:cf:0b:
ce:86:48:a4:fb:08:19:85:6c:4c:94:de:e2:02:05:8f:73:31:
dd:05:ab:08:54:d2:57:2a:a2:91:90:02:4c:06:6e:03:c6:49:
fe:8f:b9:07:58:94:90:09:90:24:b5:55:d1:4a:fa:66:23:90:
2d:00:bb:84:64:0e:87:9f:5f:1b:e5:ae:a8:e8:d3:9f:a3:b8:
ec:d8:e2:b5:04:49:68:2f:20:35:6a:c5:01:4e:86:62:61:bf:
7e:f0:86:60:70:3a:9d:a9:b3:e8:a5:dc:6a:14:b2:f1:27:f0:
6b:80:2f:0a:f7:fa:05:25:e5:a1:77:c7:27:99:fd:82:af:04:
fb:4f:d8:21:50:7f:f3:42:00:b3:b0:72:69:ea:ce:93:24:d5:
6d:42:89:fa:a3:c0:e6:9a:2b:d5:78:b6:4b:26:93:63:33:07:
ce:7b:ba:a6:71:d9:61:73:43:c8:72:de:f4:aa:e6:b7:ae:bc:
05:eb:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:51 2025 by rpki-client