Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/PPsYUSjJ6B10FlewER5Ai8nn-_A.roa
File: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (raw, json)
Hash identifier: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=
Subject key identifier: 3C:FB:18:51:28:C9:E8:1D:74:16:57:B0:11:1E:40:8B:C9:E7:FB:F0
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019420685454458BC6C291656E0072CC4F93
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/PPsYUSjJ6B10FlewER5Ai8nn-_A.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20446
IP address blocks: 2001:4de0:2310:1::/64 maxlen: 64
2001:4de0:ac10::/48 maxlen: 48
2001:4de0:ac11::/48 maxlen: 48
2001:4de0:ac12::/48 maxlen: 48
2001:4de0:ac18::/48 maxlen: 48
2001:4de0:ac19::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:54:45:8b:c6:c2:91:65:6e:00:72:cc:4f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cfb185128c9e81d741657b0111e408bc9e7fbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:8b:89:2b:71:8d:db:d0:0c:d1:83:47:cc:
32:a6:f7:24:09:c1:3f:94:d9:d2:42:d5:5b:24:ec:
ea:12:25:b0:53:6a:cc:d3:4c:18:9d:65:22:fc:77:
ec:c2:ee:2c:df:6d:e2:a7:4d:3c:e2:0e:d4:46:1e:
18:25:83:03:a0:e8:6a:a2:2f:bb:06:67:a7:44:84:
f3:db:c7:5e:f8:2a:df:f2:54:36:bd:a4:0e:23:14:
b5:2f:4b:f3:31:f0:e9:44:f7:11:88:97:10:f7:35:
12:a7:b4:57:56:c5:97:f8:16:75:9b:b5:7f:c5:51:
cc:ba:d0:d8:6d:a8:86:12:b2:a0:b6:cd:e8:2e:c7:
3a:ee:0d:1a:51:6a:0f:de:4d:38:8e:a5:93:90:fe:
78:b3:0b:ce:bf:52:da:b5:b4:39:e1:a2:d9:20:ab:
fc:ce:cc:45:89:39:3d:dd:0b:ad:ce:a9:73:15:70:
36:42:27:57:44:f8:39:fd:45:76:37:25:e8:4f:e1:
80:0f:27:82:08:45:85:e7:28:bb:16:69:20:e4:b5:
4a:d9:42:99:81:6f:b5:8a:e8:c5:a2:fc:c6:42:8c:
15:b7:1f:fd:4b:20:7b:81:ac:04:b4:03:e0:a1:04:
9b:dc:88:82:74:89:93:7d:99:6e:9a:0d:80:c6:41:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:18:51:28:C9:E8:1D:74:16:57:B0:11:1E:40:8B:C9:E7:FB:F0
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/PPsYUSjJ6B10FlewER5Ai8nn-_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4de0:2310:1::/64
2001:4de0:ac10::-2001:4de0:ac12:ffff:ffff:ffff:ffff:ffff
2001:4de0:ac18::/47
Signature Algorithm: sha256WithRSAEncryption
4b:3d:21:c4:d8:92:59:a9:3d:af:19:e3:69:09:20:6e:0b:de:
95:69:81:ea:e7:79:5d:80:dd:ce:2b:20:af:2c:88:df:5e:1d:
c3:75:44:ce:43:bf:4d:0c:59:bd:cf:96:ef:56:30:c6:8c:4d:
7e:fb:5f:ae:9b:70:29:01:a2:be:9d:da:81:0f:83:35:47:3a:
2b:cb:8e:86:cb:d7:2c:1d:e0:7c:62:0d:52:02:0c:59:fe:33:
d3:1a:c1:bc:1a:24:c3:00:26:0d:81:fc:18:e8:03:c9:29:78:
54:93:cd:61:6e:68:38:5b:23:0f:1a:53:b9:19:92:bb:f1:9a:
a9:6f:6f:a3:1d:ca:5f:53:71:e9:f4:3e:2c:91:f3:a4:8b:6e:
04:8b:25:5b:5c:6c:6c:74:d7:09:34:d3:c8:ee:29:af:54:4a:
81:46:82:24:d5:79:6b:47:af:d1:84:73:35:5e:c0:4f:e2:61:
62:df:29:35:d6:33:d7:2e:7d:90:45:f0:e9:ee:93:8b:17:72:
26:c6:c1:a5:ed:f6:03:5a:d0:8b:5c:0f:1d:6a:89:59:b5:2e:
1c:dc:77:75:4a:0c:ff:f0:11:d2:34:77:aa:f8:24:fe:6b:c5:
43:bb:30:12:e6:ae:67:24:2a:4e:b8:9b:7b:b9:91:6c:43:9f:
c9:81:75:b4
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQgaFRURYvGwpFlbgByzE+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5
ZTcwOTMwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2ZiMTg1MTI4YzllODFkNzQxNjU3YjAxMTFlNDA4YmM5ZTdmYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNKLiStxjdvQDNGDR8wypvckCcE/
lNnSQtVbJOzqEiWwU2rM00wYnWUi/Hfswu4s323ip0084g7URh4YJYMDoOhqoi+7
BmenRITz28de+Crf8lQ2vaQOIxS1L0vzMfDpRPcRiJcQ9zUSp7RXVsWX+BZ1m7V/
xVHMutDYbaiGErKgts3oLsc67g0aUWoP3k04jqWTkP54swvOv1LatbQ54aLZIKv8
zsxFiTk93QutzqlzFXA2QidXRPg5/UV2NyXoT+GADyeCCEWF5yi7Fmkg5LVK2UKZ
gW+1iujFovzGQowVtx/9SyB7gawEtAPgoQSb3IiCdImTfZlumg2AxkHL1wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFDz7GFEoyegddBZXsBEeQIvJ5/vwMB8GA1UdIwQY
MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt
ZTFlZDlkZDJhMDJhLzEvUFBzWVVTako2QjEwRmxld0VSNUFpOG5uLV9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh
LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoAwkAIAFN4CMQ
AAEwEgMHBCABTeCsEAMHACABTeCsEgMHASABTeCsGDANBgkqhkiG9w0BAQsFAAOC
AQEASz0hxNiSWak9rxnjaQkgbgvelWmB6ud5XYDdzisgryyI314dw3VEzkO/TQxZ
vc+W71YwxoxNfvtfrptwKQGivp3agQ+DNUc6K8uOhsvXLB3gfGINUgIMWf4z0xrB
vBokwwAmDYH8GOgDySl4VJPNYW5oOFsjDxpTuRmSu/GaqW9vox3KX1Nx6fQ+LJHz
pItuBIslW1xsbHTXCTTTyO4pr1RKgUaCJNV5a0ev0YRzNV7AT+JhYt8pNdYz1y59
kEXw6e6TixdyJsbBpe32A1rQi1wPHWqJWbUuHNx3dUoM//AR0jR3qvgk/mvFQ7sw
EuauZyQqTribe7mRbEOfyYF1tA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:56 2025 by rpki-client