Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/pcZOurX6XRmVi7QzM2ESWZ-Cpeg.roa
File: pcZOurX6XRmVi7QzM2ESWZ-Cpeg.roa (raw, json)
Hash identifier: NWxf4rQ6xdhe3cEu0aoNE6ek64/ODTaYvSS9FzjB4rs=
Subject key identifier: A5:C6:4E:BA:B5:FA:5D:19:95:8B:B4:33:33:61:12:59:9F:82:A5:E8
Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial: 018CC56E63671794A2AB7520414CD30B2F70
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/pcZOurX6XRmVi7QzM2ESWZ-Cpeg.roa
Signing time: Mon 01 Jan 2024 14:29:55 +0000
ROA not before: Mon 01 Jan 2024 14:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2001:67c:b08::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:63:67:17:94:a2:ab:75:20:41:4c:d3:0b:2f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Validity
Not Before: Jan 1 14:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c64ebab5fa5d19958bb433336112599f82a5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:7c:5e:0d:54:a5:66:e1:51:9f:93:b0:9f:
68:af:5a:2a:ed:d2:15:3d:33:4f:8f:81:8e:78:2a:
89:57:a8:35:92:ff:d6:ad:94:26:96:42:91:14:45:
8c:98:66:e0:e1:8e:ec:ff:61:47:f3:08:9b:dd:df:
66:5f:5f:5e:99:3d:af:cc:83:13:da:f0:c4:3d:85:
39:ff:a6:bb:e1:45:65:ee:c9:ee:d7:e2:bc:be:b1:
ba:d8:3f:2e:2b:73:67:17:42:38:7e:ae:d6:2b:19:
be:c9:eb:1c:1d:1b:b9:7a:78:3b:cf:ef:a4:3b:01:
32:b6:f0:b3:db:3a:3c:62:54:80:27:f5:00:16:6c:
21:f2:65:ad:d3:89:8b:d5:32:50:24:a8:c3:55:66:
49:57:7e:c6:51:73:56:cf:63:12:7e:be:21:4c:ca:
48:5c:75:e1:3a:a4:ef:10:9c:06:3c:9b:9f:d0:2f:
91:f0:b6:19:55:fb:7a:50:39:d7:6b:a1:e9:b3:50:
99:ec:a6:b7:0f:6d:f0:d4:59:df:b1:2c:c4:38:bc:
11:04:3a:b5:b5:3b:13:6c:22:10:83:9f:57:bf:6d:
bc:af:69:6d:96:94:e2:47:3f:91:ae:b2:30:9d:11:
22:f3:c1:f5:92:e3:56:fc:b9:56:66:d3:e7:f9:6c:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:4E:BA:B5:FA:5D:19:95:8B:B4:33:33:61:12:59:9F:82:A5:E8
X509v3 Authority Key Identifier:
keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/pcZOurX6XRmVi7QzM2ESWZ-Cpeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b08::/48
Signature Algorithm: sha256WithRSAEncryption
a3:f9:4c:85:7b:51:39:67:0c:b1:a3:4d:8e:a2:82:77:54:4f:
82:32:f1:79:2c:2b:57:f2:2c:c9:59:d8:8f:6e:f5:f3:07:31:
81:c2:92:45:e8:1a:e4:30:4a:1f:bb:79:34:80:3f:1f:2a:fa:
f2:54:55:f5:4e:7d:48:cc:55:75:03:d3:f2:0c:3a:d0:56:a3:
9d:9f:60:2c:3b:27:64:25:4a:66:8b:22:5c:e4:38:88:68:98:
71:bf:82:08:f0:d8:cb:32:c4:9b:6c:22:86:8b:61:7c:d8:a1:
4c:59:46:96:a2:96:ac:e8:79:18:17:eb:cb:14:bd:71:3e:34:
cb:d0:f2:39:c7:0c:4e:c5:e4:2e:7b:a9:6d:ef:27:26:12:7c:
d6:b2:9d:6f:36:87:8e:73:69:b5:bf:11:8e:cd:2d:d2:ca:cd:
3b:df:ee:f4:34:4e:de:ce:8c:18:10:46:f2:95:58:fe:51:62:
fa:a9:08:1b:92:bd:a0:a8:52:c2:2c:1b:32:90:be:a5:5f:86:
f6:73:69:ac:e4:bb:d7:da:ac:71:e2:f9:ee:33:30:5c:fd:8e:
93:e7:85:5e:e2:b5:3e:c9:61:19:a9:29:dc:8f:c2:4c:3b:cf:
8a:03:4e:35:04:97:6a:79:b3:6d:57:c9:ca:25:14:45:d9:eb:
17:12:eb:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzFbmNnF5Siq3UgQUzTCy9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNzY0MTExYWVmZmE4NmJkMWVjM2NhODg1YjYzZGU3ZjU2
NTBmNmUwHhcNMjQwMTAxMTQyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWM2NGViYWI1ZmE1ZDE5OTU4YmI0MzMzMzYxMTI1OTlmODJhNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lt8Xg1UpWbhUZ+TsJ9or1oq7dIV
PTNPj4GOeCqJV6g1kv/WrZQmlkKRFEWMmGbg4Y7s/2FH8wib3d9mX19emT2vzIMT
2vDEPYU5/6a74UVl7snu1+K8vrG62D8uK3NnF0I4fq7WKxm+yescHRu5eng7z++k
OwEytvCz2zo8YlSAJ/UAFmwh8mWt04mL1TJQJKjDVWZJV37GUXNWz2MSfr4hTMpI
XHXhOqTvEJwGPJuf0C+R8LYZVft6UDnXa6Hps1CZ7Ka3D23w1FnfsSzEOLwRBDq1
tTsTbCIQg59Xv228r2ltlpTiRz+RrrIwnREi88H1kuNW/LlWZtPn+WzU2wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKXGTrq1+l0ZlYu0MzNhElmfgqXoMB8GA1UdIwQY
MBaAFOt2QRGu/6hr0ew8qIW2Pef1ZQ9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgt
YjI4ODQ4ODhhZDNmLzEvcGNaT3VyWDZYUm1WaTdRek0yRVNXWi1DcGVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgtYjI4ODQ4ODhhZDNm
LzEvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsI
MA0GCSqGSIb3DQEBCwUAA4IBAQCj+UyFe1E5Zwyxo02OooJ3VE+CMvF5LCtX8izJ
WdiPbvXzBzGBwpJF6BrkMEofu3k0gD8fKvryVFX1Tn1IzFV1A9PyDDrQVqOdn2As
OydkJUpmiyJc5DiIaJhxv4II8NjLMsSbbCKGi2F82KFMWUaWopas6HkYF+vLFL1x
PjTL0PI5xwxOxeQue6lt7ycmEnzWsp1vNoeOc2m1vxGOzS3Sys073+70NE7ezowY
EEbylVj+UWL6qQgbkr2gqFLCLBsykL6lX4b2c2ms5LvX2qxx4vnuMzBc/Y6T54Ve
4rU+yWEZqSncj8JMO8+KA041BJdqebNtV8nKJRRF2esXEuuA
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:28 2025 by rpki-client