Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PCW0CKp3TbFdUulC3dQNco2y1-A.roa
File: PCW0CKp3TbFdUulC3dQNco2y1-A.roa (raw, json)
Hash identifier: MfVhzw04LBvDhVsm+24010d+wwm+jrCxzW3TE3fV6YU=
Subject key identifier: 3C:25:B4:08:AA:77:4D:B1:5D:52:E9:42:DD:D4:0D:72:8D:B2:D7:E0
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 018CCA2B09EB42FDC7B31F382FE14CB96D91
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PCW0CKp3TbFdUulC3dQNco2y1-A.roa
Signing time: Tue 02 Jan 2024 12:34:27 +0000
ROA not before: Tue 02 Jan 2024 12:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44152
IP address blocks: 82.98.90.0/24 maxlen: 24
82.98.75.80/29 maxlen: 32
82.98.94.120/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:09:eb:42:fd:c7:b3:1f:38:2f:e1:4c:b9:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 2 12:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c25b408aa774db15d52e942ddd40d728db2d7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:28:38:68:08:90:c5:4b:f1:4e:12:76:56:
d4:ce:66:ab:56:b9:a9:7b:3a:41:9d:e7:a1:5d:65:
a4:31:f6:ad:08:6b:77:7e:73:cf:21:8d:ee:9f:8f:
b4:81:12:11:85:7b:32:9f:45:99:98:09:df:ac:7b:
81:0f:e7:e9:bb:20:69:47:7e:f5:a2:57:85:dc:60:
ef:5b:83:ca:69:b7:ef:18:96:95:8b:83:a0:f9:fa:
8d:f9:a6:2c:da:06:ff:1f:30:4a:61:b0:5a:3d:7c:
05:fb:45:06:c4:2e:5a:45:33:72:e9:15:d7:2d:7a:
c4:29:ee:08:08:2d:9e:a5:c1:df:c8:c7:23:0b:b4:
7e:bc:7e:04:c7:11:d0:f7:5f:2a:eb:6a:6c:4a:a5:
e9:a7:3c:31:6e:ac:e4:ef:07:4e:77:64:d5:68:64:
61:70:dd:f8:aa:1d:54:8a:5b:d0:9e:93:9a:f1:63:
4b:b3:96:27:58:28:6d:65:48:91:bd:f5:3e:77:f2:
3d:28:e9:a6:ab:e0:6c:2e:e5:ca:ef:85:07:36:ec:
01:9f:85:5a:d6:d3:80:39:63:27:ed:a5:7a:f5:f8:
68:3e:c4:d1:0e:29:8d:2b:38:ef:7e:2f:20:a0:13:
7d:9d:de:60:1f:b9:d7:03:83:73:48:60:92:df:e2:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:B4:08:AA:77:4D:B1:5D:52:E9:42:DD:D4:0D:72:8D:B2:D7:E0
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PCW0CKp3TbFdUulC3dQNco2y1-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.75.80/29
82.98.90.0/24
82.98.94.120/29
Signature Algorithm: sha256WithRSAEncryption
03:39:7a:e8:42:b9:54:0c:41:40:58:ac:07:f5:ab:e0:83:e0:
d6:89:af:ea:66:62:a9:f1:46:76:02:a7:40:bf:2d:f9:8c:ca:
e7:53:27:70:53:83:ca:ea:57:c4:88:27:02:3d:ea:c5:02:3d:
97:de:7e:05:09:01:43:a2:f6:b0:84:6c:55:1a:4f:f9:c3:e4:
86:61:fd:04:f1:12:33:6c:1a:71:89:30:cb:7e:7e:d5:42:77:
c3:25:33:28:cb:10:9e:fc:87:48:b6:e9:67:20:9a:6d:d2:2e:
c8:91:75:d8:ea:a6:38:60:44:d4:db:63:51:21:43:59:8c:66:
cd:22:72:0f:51:3e:29:f7:ec:09:57:9c:74:c2:6a:37:a7:bf:
a2:7a:4f:1f:d9:99:61:80:01:b8:77:4c:79:9e:f3:30:c1:96:
8a:1e:fe:4e:96:8b:53:79:e5:02:17:45:b4:00:95:46:ee:dc:
b7:66:70:53:a9:45:fd:ea:8d:72:57:c3:4c:bd:68:fd:2f:10:
f2:d2:d2:c5:a1:7d:59:d4:9c:d6:46:1b:e6:d1:33:65:f6:a6:
59:32:0c:c4:dd:ff:12:46:40:b0:ff:88:f0:a4:b9:7e:4a:fe:
e0:25:ec:5d:88:ec:5b:44:95:67:b2:12:f6:eb:5c:3b:50:04:
70:66:f2:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:54 2025 by rpki-client