Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/PpdtSf-eqwERrg8wgynYdTmmTLE.roa
File: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (raw, json)
Hash identifier: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=
Subject key identifier: 3E:97:6D:49:FF:9E:AB:01:11:AE:0F:30:83:29:D8:75:39:A6:4C:B1
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019424B3E08172ED8EBB5CEF9FC7DEA64F7C
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/PpdtSf-eqwERrg8wgynYdTmmTLE.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8729
IP address blocks: 2a02:6a0:cffe::/48 maxlen: 48
2a02:6a0:cfff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e0:81:72:ed:8e:bb:5c:ef:9f:c7:de:a6:4f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e976d49ff9eab0111ae0f308329d87539a64cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:4d:fd:1f:4e:af:9c:62:a6:d0:4e:fa:c0:
92:ea:c1:64:11:fc:53:ac:9d:e0:14:60:10:71:09:
05:c7:ee:3f:a5:5a:87:27:d6:13:de:b4:7b:10:60:
e4:ed:bb:73:42:07:3c:15:dd:07:1b:f7:4b:bb:50:
83:c3:d0:65:68:1c:c2:4a:44:f0:83:10:e8:02:a1:
f9:83:69:c6:8c:af:18:b4:7a:81:99:b7:68:2f:ec:
a7:cb:85:ff:c9:ea:09:fb:66:5f:d7:fd:3b:58:d0:
4b:93:6d:8e:25:7a:de:1b:e6:2d:e6:86:c6:c5:17:
c3:94:86:a0:1e:f5:65:0c:53:09:d4:c8:fe:39:86:
17:47:4b:b6:b4:82:74:7e:04:33:6b:d2:fc:0f:fc:
16:54:ff:b3:ee:e0:c1:1e:14:42:2a:ee:b0:cd:db:
54:29:86:f4:78:fd:b8:03:c8:c4:58:4b:59:29:a2:
ca:ea:fb:9e:dd:07:9c:72:97:0e:05:7d:01:e0:f6:
02:22:00:c7:ac:cc:93:ef:b7:f0:6c:e7:25:77:a5:
a1:c4:4a:ed:21:8b:f8:12:cc:1a:16:a8:57:ad:fc:
43:b4:c9:91:13:ae:2d:ff:35:83:de:5c:be:f4:7b:
3d:84:1e:a4:c3:73:43:d3:cd:69:a7:c5:f3:0f:9a:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:6D:49:FF:9E:AB:01:11:AE:0F:30:83:29:D8:75:39:A6:4C:B1
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/PpdtSf-eqwERrg8wgynYdTmmTLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6a0:cffe::/47
Signature Algorithm: sha256WithRSAEncryption
7d:d4:40:47:9f:9e:36:81:fb:b7:d0:b1:a9:6e:70:46:14:1d:
31:f7:70:d8:7b:93:f1:36:b8:6a:13:20:22:00:37:c3:fa:da:
0b:21:9a:93:a2:79:c1:6d:3f:d7:57:4d:17:01:8b:2a:ae:64:
4b:0a:50:51:ac:d9:4b:79:c2:3c:d8:7d:45:5b:6c:42:fb:81:
fe:e7:40:58:22:18:30:e0:14:ec:7c:43:2b:9a:5f:3a:7d:31:
63:e5:79:2a:d1:a5:cc:c5:bf:06:af:0d:c6:39:be:51:95:59:
cd:ff:f2:c5:64:45:58:5b:c2:3a:80:de:51:58:dd:bb:90:24:
0d:e2:0b:d3:ba:b1:dc:dc:da:bd:8d:d7:ff:d0:96:27:4a:4e:
90:30:b3:15:66:a5:03:e7:a8:7d:2b:90:83:e4:54:55:34:55:
64:3b:d3:d1:7a:e3:b7:dc:7d:ff:be:4f:97:44:e7:04:d2:4a:
24:e0:40:5a:8a:c7:9b:2f:6c:fb:d9:fe:78:1d:b7:da:34:36:
90:3a:a0:dd:e5:7f:6e:7a:6f:b0:9d:73:d7:a7:87:b3:90:4d:
00:15:c5:28:19:42:bb:49:e5:77:3f:11:31:1e:34:bc:66:ab:
b4:b4:d8:cd:2c:80:33:8f:5a:ad:cd:03:fc:5d:08:d8:3a:14:
9f:16:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:41 2025 by rpki-client