Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pu9-eiznMa1yncgFjgdLvMtuA28.roa
File: Pu9-eiznMa1yncgFjgdLvMtuA28.roa (raw, json)
Hash identifier: B3Vqa9nDadYf8/pE4ZeL9p7c86v1Qd2YGvcsidi4UWc=
Subject key identifier: 3E:EF:7E:7A:2C:E7:31:AD:72:9D:C8:05:8E:07:4B:BC:CB:6E:03:6F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827EAF1DF6E321FF05685AB4FD2E257
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pu9-eiznMa1yncgFjgdLvMtuA28.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 2.56.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ea:f1:df:6e:32:1f:f0:56:85:ab:4f:d2:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eef7e7a2ce731ad729dc8058e074bbccb6e036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:0b:b7:32:2e:29:be:bd:a9:b3:b7:59:db:
23:46:4c:7a:47:40:b0:8e:8b:74:b7:4f:9d:fa:60:
92:a5:c9:99:64:cf:4d:cd:28:53:ca:78:c5:17:81:
66:46:66:6c:c2:5a:e4:d4:af:88:2d:a3:3d:aa:7c:
d0:c9:8d:b6:f3:28:e6:09:75:ce:7a:8c:6a:90:eb:
26:da:29:20:5c:d6:7a:ee:c2:8a:c3:02:bd:4b:34:
49:25:39:9b:4d:4d:71:16:fc:9a:43:6b:91:27:f3:
84:94:6b:a3:13:25:75:db:ba:84:aa:6a:c9:72:f1:
21:77:90:72:19:0e:24:e4:89:b1:92:cf:6b:a4:76:
7f:3c:55:ab:4a:6d:f0:d4:47:96:4b:2a:87:b8:47:
00:c0:09:2e:1d:3c:df:6c:8e:d0:d2:f5:0a:e1:75:
dd:63:33:48:09:15:85:c2:fa:9c:ed:68:86:46:75:
29:5a:6c:1b:47:fc:b0:bb:37:f6:74:52:67:ea:c1:
e5:98:a8:64:4e:e3:65:ee:c2:64:a2:b8:bf:ac:5f:
33:c1:0e:94:ab:59:51:28:37:03:de:31:8e:bb:b6:
1f:aa:c1:5f:9d:bb:ac:9d:cb:36:51:9f:5e:60:e8:
11:82:45:38:46:b4:27:e4:8e:43:41:d3:ca:61:96:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:7E:7A:2C:E7:31:AD:72:9D:C8:05:8E:07:4B:BC:CB:6E:03:6F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pu9-eiznMa1yncgFjgdLvMtuA28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:87:54:e4:cf:76:05:a2:2e:f1:3e:f1:d8:75:da:90:e1:3d:
6a:4b:9c:0a:9c:d2:71:23:42:44:a8:cd:db:ea:77:76:14:5c:
0d:f1:64:d4:6d:25:6a:4d:3f:fc:11:6c:4f:bc:f8:44:42:fd:
10:c9:d8:81:89:4c:46:5f:85:0e:c2:33:99:0d:b8:bb:28:a4:
c5:3d:9f:95:e7:a0:82:91:6d:a1:ab:8f:cf:bf:6a:20:f2:16:
b3:82:3f:39:ef:04:7b:ca:86:cb:56:6e:97:14:b6:7d:96:bc:
35:59:9c:72:6b:83:0d:4f:31:6b:2c:e0:eb:5f:5f:a9:e7:52:
c3:b6:1d:79:9f:ec:f0:28:2a:a5:a6:a2:cf:5c:58:b6:c7:64:
95:a2:8b:b2:7b:8e:ef:25:10:1d:28:09:d0:87:8e:29:7e:51:
31:4f:eb:2b:58:1f:14:2d:3f:a6:e7:9f:be:c5:7b:12:09:35:
e7:da:fe:6a:31:b3:17:a5:db:af:e1:8a:66:bb:be:ed:6d:fb:
cf:35:8e:67:0a:27:71:43:0d:13:af:36:d5:21:67:74:4e:94:
8d:1d:38:42:bb:a8:84:3e:62:cf:99:03:3c:95:91:79:a5:7c:
a7:01:13:1a:34:ae:0f:05:ce:9a:89:e3:0b:f3:ff:29:71:ee:
f0:ab:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:40 2025 by rpki-client