Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/PnAHwZ4TeAOcIILMhUEf-iLvLcs.roa
File: PnAHwZ4TeAOcIILMhUEf-iLvLcs.roa (raw, json)
Hash identifier: x0Mpzzy0rvEUibGwJBEsmFM4XOpVxRadxktwrhbHGD4=
Subject key identifier: 3E:70:07:C1:9E:13:78:03:9C:20:82:CC:85:41:1F:FA:22:EF:2D:CB
Certificate issuer: /CN=53102c301f9040296792a94e42057c162fbe30cc
Certificate serial: 019126901DDB18A4BDD5F4EA722ED751CB05
Authority key identifier: 53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/PnAHwZ4TeAOcIILMhUEf-iLvLcs.roa
Signing time: Tue 06 Aug 2024 07:21:04 +0000
ROA not before: Tue 06 Aug 2024 07:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25000
IP address blocks: 193.201.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:90:1d:db:18:a4:bd:d5:f4:ea:72:2e:d7:51:cb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53102c301f9040296792a94e42057c162fbe30cc
Validity
Not Before: Aug 6 07:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e7007c19e1378039c2082cc85411ffa22ef2dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:d2:ae:5b:27:e9:81:95:50:7a:ce:14:4d:
9e:35:2a:2c:68:26:92:50:75:9d:7d:f1:be:91:eb:
5c:fc:1e:4a:d3:1f:a2:ea:d7:ef:4e:bb:41:16:cb:
61:b1:60:3a:92:0b:bb:e5:be:99:18:89:82:2c:f5:
33:2b:89:34:a3:a3:82:b4:46:18:d0:06:29:ae:47:
55:14:16:42:75:fe:d8:9d:4a:28:fe:67:8f:e9:26:
f0:89:8a:f3:62:a1:1b:ee:3f:eb:12:72:d1:b5:32:
38:c9:ed:cb:0c:fe:9d:c2:cb:49:78:4b:bc:28:92:
80:15:dd:ca:bc:01:d2:5a:12:7f:6a:f4:0d:ca:8d:
a0:52:65:ab:1a:f7:62:6a:2a:2f:d3:37:f5:f7:f0:
24:f6:d9:b4:c4:1a:69:99:e6:30:72:6b:32:af:8d:
1b:b4:3e:c6:7e:40:97:d2:b1:eb:b7:3e:a5:fe:5f:
c4:f7:98:7f:a9:85:b9:9d:21:ed:11:4e:26:c7:f7:
b3:36:dd:6b:01:14:23:96:a4:df:d3:ce:33:f9:c9:
9c:16:c3:ab:f2:fb:c9:cd:6f:ff:af:18:eb:cf:e4:
60:29:1e:9e:b3:e1:59:b8:2f:e8:8a:27:5d:14:9e:
ba:de:b1:99:f0:6d:ba:53:46:1b:5f:e5:bf:82:83:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:07:C1:9E:13:78:03:9C:20:82:CC:85:41:1F:FA:22:EF:2D:CB
X509v3 Authority Key Identifier:
keyid:53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/PnAHwZ4TeAOcIILMhUEf-iLvLcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.98.0/24
Signature Algorithm: sha256WithRSAEncryption
69:69:01:3d:14:93:79:f6:3b:ff:ae:10:9e:d5:49:d2:a9:2d:
61:6e:34:f7:11:d3:2d:bc:ca:1b:46:6f:c4:8c:5c:cb:42:1d:
42:ec:b5:15:36:81:9a:d6:da:d5:fe:29:0c:66:e6:00:73:bf:
fb:f9:97:f1:2d:e2:d2:c0:90:1f:e7:59:f0:90:05:7d:c0:d7:
ef:2a:11:37:7a:66:9c:4b:c1:da:a1:f4:38:bd:22:53:b5:49:
ad:e6:58:91:66:d3:93:bc:c0:e2:dd:0c:f6:f4:12:c3:24:8f:
ac:b5:92:84:25:3e:01:fe:b5:90:6b:29:05:eb:1f:25:16:02:
62:c2:39:bd:9a:a7:e5:fc:dc:75:c6:02:39:d6:67:6a:7b:67:
82:9f:e4:3f:cc:41:9b:ac:c0:af:09:7b:8c:47:84:6a:f4:35:
85:b0:59:2b:a9:e3:aa:74:fa:2e:a2:69:c5:a6:68:a7:be:c8:
a3:d4:1a:57:e6:a2:9f:97:a0:7e:e3:a9:c3:4a:e7:cb:27:b8:
b8:b0:0c:9c:2b:c4:b6:c4:31:75:d9:df:55:4e:bb:d5:55:3f:
69:c8:d2:c1:5e:67:cf:71:df:3a:27:b6:92:b8:a0:9c:58:7a:
70:f1:5d:a3:fb:11:83:ae:7f:f6:93:45:dc:9a:2a:f9:fa:dc:
c1:79:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:25 2025 by rpki-client