Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/PdXLVimBA8zILWLashg1LUqBqm8.roa
File: PdXLVimBA8zILWLashg1LUqBqm8.roa (raw, json)
Hash identifier: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=
Subject key identifier: 3D:D5:CB:56:29:81:03:CC:C8:2D:62:DA:B2:18:35:2D:4A:81:AA:6F
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 019428259B69C78F79C6B1B138054FF779E3
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/PdXLVimBA8zILWLashg1LUqBqm8.roa
Signing time: Thu 02 Jan 2025 17:52:20 +0000
ROA not before: Thu 02 Jan 2025 17:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.17.178.0/24 maxlen: 24
195.234.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:9b:69:c7:8f:79:c6:b1:b1:38:05:4f:f7:79:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Jan 2 17:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd5cb56298103ccc82d62dab218352d4a81aa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:fd:80:73:9a:e9:7e:7f:3f:46:d7:9a:44:
9b:ca:46:00:73:fe:dc:d7:3a:d3:fc:22:50:b7:c2:
2c:d3:72:4e:df:12:e3:ff:59:1d:80:81:5b:94:34:
e0:97:1a:6f:dc:0d:af:95:59:58:c9:07:e6:3d:80:
4f:55:22:c3:cf:f5:09:93:7f:b8:60:4a:bf:4a:61:
1b:c5:4d:e9:eb:c7:9b:b6:59:25:6e:a0:14:40:85:
fd:f5:67:46:ba:6f:f0:04:23:26:1b:80:c8:ee:74:
ce:a3:b1:b2:c9:5d:22:03:eb:11:7b:a4:23:42:b7:
c0:a8:23:3c:f2:c9:db:d8:da:4d:6f:f8:7b:85:a6:
53:3e:46:67:7c:ae:f0:bf:d4:cd:d4:92:4a:50:81:
bb:26:d5:85:3d:10:24:3a:65:d8:bf:de:83:a0:3c:
6b:d9:ce:3d:14:39:a4:90:f8:f3:b3:e9:6e:69:c6:
eb:e6:f5:d2:2e:a6:23:62:53:64:af:24:eb:db:8e:
9c:33:a1:20:c3:f7:84:f6:6d:70:3c:1f:bc:61:35:
0c:01:4c:2d:c4:21:c5:f7:3b:69:f1:54:0a:f7:57:
52:14:ee:0c:82:e0:50:37:e1:b7:de:54:4b:4b:6b:
f4:54:dc:63:e7:63:95:f5:72:91:aa:35:eb:c7:f0:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:CB:56:29:81:03:CC:C8:2D:62:DA:B2:18:35:2D:4A:81:AA:6F
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/PdXLVimBA8zILWLashg1LUqBqm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.178.0/24
195.234.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ae:1c:03:5b:28:2e:5e:0e:36:dd:9a:a4:47:88:7e:c4:a2:
b5:5d:66:ef:17:56:ba:f1:93:e3:25:c6:d6:60:dd:b0:b9:85:
7b:4f:a0:9a:2d:77:90:d0:16:49:f1:02:91:41:73:3c:e8:88:
a5:b3:00:6e:75:e8:6e:da:00:50:d1:c7:ec:1f:0c:f6:50:46:
26:e5:b4:90:91:dd:24:93:62:55:aa:4d:37:ac:9e:1b:ce:5c:
39:39:cb:fe:16:39:02:a2:db:92:97:26:8f:78:2a:fa:69:4b:
a3:54:25:01:61:20:63:99:93:37:72:25:ac:0c:a1:04:3f:bd:
3e:04:1b:b6:1e:44:0c:74:a0:ff:97:2b:9a:97:96:9b:f6:2f:
69:8b:31:b3:70:a9:db:8f:2d:ab:23:94:5e:a1:53:10:00:2b:
d3:00:ed:28:cf:84:98:48:cc:c9:d8:5e:98:6f:d4:76:11:87:
6c:cb:7c:bc:d8:34:4f:c4:f6:92:83:8e:99:18:91:ac:53:66:
8b:58:b0:77:fe:cc:01:46:43:64:bd:18:31:d4:ae:55:8e:a3:
07:32:d5:64:19:5c:81:8f:fc:7b:6e:87:48:93:e6:b9:20:fd:
44:fe:1e:8e:59:b2:d9:86:b9:2b:e7:3c:9c:7c:9c:46:2a:26:
88:6b:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:41:50 2025 by rpki-client