Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pfmPB3_KGKroU3W0Z8F14GzEUoI.roa
File: pfmPB3_KGKroU3W0Z8F14GzEUoI.roa (raw, json)
Hash identifier: U7FDMwykMhQtx9/lRivemHo2fD1pbwmQ2Dv4FXN4SQ4=
Subject key identifier: A5:F9:8F:07:7F:CA:18:AA:E8:53:75:B4:67:C1:75:E0:6C:C4:52:82
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 019478C160C945A7E5DB3AC860C635DB9F56
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pfmPB3_KGKroU3W0Z8F14GzEUoI.roa
Signing time: Sat 18 Jan 2025 09:32:06 +0000
ROA not before: Sat 18 Jan 2025 09:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213618
IP address blocks: 2a0f:7803:f610::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:78:c1:60:c9:45:a7:e5:db:3a:c8:60:c6:35:db:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 18 09:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5f98f077fca18aae85375b467c175e06cc45282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:b1:2d:e4:b0:e6:61:71:5a:14:5c:b4:54:
e2:f4:4e:ea:83:5f:4d:7d:f3:70:fa:99:3a:8b:27:
38:93:4a:b0:36:e9:9c:d0:52:86:05:f1:30:65:da:
8d:b9:14:d4:81:cf:a8:12:d0:74:e3:58:c0:be:a8:
a1:32:c3:0c:b1:4a:03:ba:2e:fd:d9:bc:d6:a1:ca:
b7:95:32:5e:6a:97:96:93:64:77:5e:1a:a9:8d:ee:
76:54:8e:22:5d:71:3a:1f:b4:a5:2e:7f:d8:7d:8c:
55:51:49:14:dc:8f:8a:23:12:7a:d2:59:68:4d:4c:
77:56:d1:53:f6:e7:88:b6:ee:27:0d:2e:a9:cd:67:
f7:b2:1b:cb:49:a6:9a:8e:2d:ed:64:10:cb:31:7c:
ce:6a:d9:1d:ee:d3:5b:76:46:6b:03:3d:84:ca:96:
08:92:e8:ab:fc:4c:85:4b:b9:4b:aa:7d:9c:ca:08:
cf:66:b3:e3:ab:20:c0:ce:4e:34:05:b4:30:02:e9:
b0:5f:a4:34:db:94:58:68:62:8f:05:fe:40:f9:e3:
7d:9e:28:2b:1e:1a:60:1e:a6:69:91:20:03:50:17:
4b:2e:cb:e3:78:ae:b8:fc:2e:78:0e:18:3f:3a:ee:
ec:d4:2a:5d:9e:09:1f:ae:50:7f:19:02:da:94:63:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:8F:07:7F:CA:18:AA:E8:53:75:B4:67:C1:75:E0:6C:C4:52:82
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pfmPB3_KGKroU3W0Z8F14GzEUoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f610::/44
Signature Algorithm: sha256WithRSAEncryption
15:d9:ee:11:54:a5:61:e4:5e:4e:1f:3e:ec:9d:87:b9:93:65:
f6:be:fc:31:f0:a1:5d:f3:0a:a3:e9:1e:35:01:1d:18:db:4b:
a3:d4:c5:01:39:b8:7a:53:aa:91:18:12:cf:b3:67:1e:c1:32:
8d:2b:43:a6:c7:00:61:75:98:62:da:7e:cf:f4:62:f5:ec:d2:
4f:ad:a7:6e:9b:a3:af:97:f2:e8:87:ba:18:26:93:a1:a6:18:
d7:fc:8c:5b:d6:f7:dd:ea:5d:09:9c:2b:2a:f2:81:15:20:3d:
88:45:37:5d:0c:d3:70:fb:2b:ab:19:6e:ce:13:96:1a:df:b2:
dd:21:88:8d:a0:3b:e2:df:9d:b7:1f:7a:0d:dc:88:63:8d:a3:
93:af:76:0a:d0:ce:8f:39:10:5a:fe:98:ed:b0:82:72:11:33:
70:ef:3d:5b:83:17:81:48:15:c5:40:51:60:f3:80:2f:3a:e0:
5f:ae:0d:a3:e3:6e:64:57:9f:e0:cc:fc:34:a4:20:d9:da:d6:
a2:06:f4:cf:e3:d0:5c:91:ea:8b:87:52:49:90:31:06:2b:4f:
70:8c:62:ac:17:aa:97:bf:61:d1:e4:68:00:d5:ee:2e:b7:0a:
1a:1d:f8:71:f5:88:1d:26:88:b9:e6:7a:5a:8d:38:4e:bb:b7:
3a:dd:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:39 2025 by rpki-client