Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pFMaSxqRzBlYShRt5nzcga2hoWs.roa
File: pFMaSxqRzBlYShRt5nzcga2hoWs.roa (raw, json)
Hash identifier: RRFRIPBv3bZotBs/cYjqxtYul2PuUkNWX3rYZYULKMA=
Subject key identifier: A4:53:1A:4B:1A:91:CC:19:58:4A:14:6D:E6:7C:DC:81:AD:A1:A1:6B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4A8F599DCD40FB180763C0ADE80E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pFMaSxqRzBlYShRt5nzcga2hoWs.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134526
IP address blocks: 45.138.109.0/24 maxlen: 32
185.236.80.0/24 maxlen: 32
194.49.108.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4a:8f:59:9d:cd:40:fb:18:07:63:c0:ad:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4531a4b1a91cc19584a146de67cdc81ada1a16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:8c:b9:37:f5:a3:31:b0:a8:cf:27:c9:43:
a9:bd:71:6f:12:41:ce:86:86:5c:3a:f5:20:5f:a7:
b9:f5:8c:ea:7b:6b:22:44:ae:d8:94:2f:f4:a1:a6:
a9:86:5a:ae:58:35:b4:5e:d5:77:c4:a4:7f:85:c6:
49:9c:9b:ed:88:79:fe:f6:d5:2b:c1:cf:d7:81:0e:
19:e6:f8:26:8f:f4:a9:1d:5a:c0:98:b1:95:38:ef:
15:37:60:59:d4:59:d2:3e:ae:d4:f7:1b:6b:69:9d:
cd:de:52:5b:80:e2:14:6f:a7:d8:ef:34:c1:41:93:
43:42:b6:ae:a3:d2:7f:c1:6d:30:41:cb:26:0f:4b:
c8:21:e6:05:47:50:fa:f1:81:4c:63:c1:f7:e2:e6:
15:95:89:ef:79:b0:65:e2:53:86:25:2a:80:2c:5d:
28:68:8e:f5:ba:c3:c6:20:62:53:82:a0:80:53:a7:
60:95:8d:81:62:5d:ab:91:09:2f:bf:87:df:66:42:
0a:21:e3:ad:a9:f2:49:f1:f0:f4:ee:de:9c:92:23:
fb:b9:ec:bf:34:05:8f:ba:14:5a:f3:9e:f1:34:93:
69:53:b9:0c:50:7a:d0:52:56:ad:77:56:57:a4:71:
fd:a3:41:30:b6:6e:0f:7d:9a:38:f9:92:c7:0d:a4:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:1A:4B:1A:91:CC:19:58:4A:14:6D:E6:7C:DC:81:AD:A1:A1:6B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pFMaSxqRzBlYShRt5nzcga2hoWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.109.0/24
185.236.80.0/24
194.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f9:2f:ad:e1:fc:c2:97:79:47:dc:3f:31:4b:e6:f0:29:77:
cf:06:24:ad:f2:e4:3b:12:85:3c:f4:a5:24:d1:e8:d1:54:17:
da:df:5a:28:ac:65:fb:a6:62:2b:01:d5:42:94:f8:1d:c3:e5:
d7:de:71:0e:0f:08:bd:ee:d5:c5:b3:32:72:5d:0d:6e:11:0b:
33:25:bb:7e:55:0e:aa:a1:f4:d6:b2:df:e9:b7:a4:75:cd:47:
fb:50:60:01:96:66:90:6d:de:26:6b:ba:0c:23:1b:df:38:b2:
e6:e7:e8:4b:e8:c2:32:5b:02:26:31:ac:db:49:8f:2b:63:fb:
39:0e:f5:bc:1d:6b:36:ce:2f:3a:41:4b:09:e5:86:d5:4e:5c:
4e:a9:cc:39:f4:78:35:d3:41:5b:5b:d6:e5:f0:d8:99:cd:85:
d5:59:22:47:b0:39:98:1a:67:b7:d1:be:3d:b6:3c:f1:75:0a:
be:b6:6c:b7:3c:64:3b:d8:91:cc:1d:ce:61:3f:ea:37:9e:8e:
29:06:6c:6c:8f:4f:72:6b:92:73:ae:ee:a3:30:60:02:ac:f7:
f4:55:55:2a:62:f8:bc:2c:b3:7f:7a:b0:ab:f5:56:7b:4b:0e:
58:f6:9a:34:59:18:25:b9:5b:5e:db:64:bf:a9:b8:b7:64:f4:
eb:48:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:37:36 2025 by rpki-client