Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/PecnHh8YFMYIBEgD1PQBC-sYFMY.roa
File: PecnHh8YFMYIBEgD1PQBC-sYFMY.roa (raw, json)
Hash identifier: G67Iyj0Q7isunYlJO9b465cfL0xQGyEo+TS/2SlDQcA=
Subject key identifier: 3D:E7:27:1E:1F:18:14:C6:08:04:48:03:D4:F4:01:0B:EB:18:14:C6
Certificate issuer: /CN=683b33dc7218b3fe883c49505134cb39a664fd28
Certificate serial: 0194252183346F1138654E6A1C336925EA95
Authority key identifier: 68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/PecnHh8YFMYIBEgD1PQBC-sYFMY.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29275
IP address blocks: 195.137.196.0/23 maxlen: 23
195.137.196.0/24 maxlen: 24
195.137.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:83:34:6f:11:38:65:4e:6a:1c:33:69:25:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683b33dc7218b3fe883c49505134cb39a664fd28
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3de7271e1f1814c608044803d4f4010beb1814c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:10:83:a3:6f:ef:64:15:07:7e:b1:4b:73:
23:18:4b:df:0d:3c:e1:d4:ab:0d:dc:07:d7:a5:de:
ca:13:46:d0:2d:4e:22:d4:8c:a5:5d:d5:ff:20:95:
3e:b7:8e:ac:f4:fc:74:93:b6:7f:c9:d0:18:73:93:
43:11:c9:20:88:bb:20:47:4d:e0:35:14:87:4c:32:
89:f8:1a:ca:50:67:fa:61:9b:74:89:68:3a:9c:9f:
af:79:3f:66:b7:44:f8:89:18:95:fd:c0:50:eb:2c:
e3:d0:e0:e6:c3:82:be:78:4c:e5:ca:63:68:34:5d:
84:50:98:0c:5a:2b:70:44:9c:64:81:83:81:17:89:
67:2d:5c:e3:21:b3:9a:22:3c:6b:f0:97:3f:e7:66:
e0:69:ea:41:16:3d:19:e3:40:dc:27:ec:51:04:00:
40:01:ef:63:88:65:7b:50:8e:a1:ea:1a:d3:02:4a:
4d:c8:51:28:36:90:3d:43:68:39:14:ca:bf:d2:8e:
30:e6:be:3e:a2:09:0e:89:76:91:96:62:6a:1b:1b:
1c:5d:06:ab:42:5d:ff:60:3c:b6:4f:66:70:da:c9:
83:65:b3:84:e5:18:a2:23:0b:e1:23:2c:3d:7e:e1:
cc:2d:64:78:d7:ac:dd:2a:2d:58:2a:53:5c:0e:90:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:27:1E:1F:18:14:C6:08:04:48:03:D4:F4:01:0B:EB:18:14:C6
X509v3 Authority Key Identifier:
keyid:68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/PecnHh8YFMYIBEgD1PQBC-sYFMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.196.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:26:49:cc:d2:b7:b8:06:ce:07:b0:43:ed:73:1e:76:7d:a3:
0e:3e:cd:8a:b9:18:f7:9f:65:27:1c:89:09:9e:b9:f4:bf:54:
75:a0:1f:b5:c8:56:97:5a:f9:53:5a:f4:fa:77:ea:e2:09:fa:
5b:4c:f7:bd:64:68:82:0c:99:76:3e:ac:1f:d1:cd:17:30:b9:
9f:97:be:cb:54:3d:06:29:c4:3d:9d:1b:c9:64:29:95:ec:2a:
ce:84:54:bb:86:90:c5:6c:3b:db:36:c6:6e:3b:05:66:1b:7d:
87:98:31:ce:32:15:e8:f1:97:a7:f4:e2:f3:4a:cf:8c:22:1d:
94:37:43:86:e5:10:40:4a:94:b0:1f:a9:22:be:68:c8:95:de:
c9:07:0e:a0:73:84:f3:cd:5e:65:84:a3:9a:18:61:81:ad:8a:
42:08:70:12:62:c5:95:55:d0:09:ae:5c:94:db:0d:bf:5d:74:
ba:ef:a3:09:e5:73:1b:2b:83:84:fd:06:1d:8e:be:50:fa:3b:
4c:70:13:7b:ad:6e:43:1d:c0:7b:02:d1:50:64:1a:bb:25:f6:
b9:11:01:c9:3e:8d:96:4b:de:7a:6f:b9:c6:49:60:1f:5f:75:
7a:ac:34:e5:0c:d0:f1:9c:3a:ee:d0:fd:59:f1:76:09:d9:42:
6e:cb:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:06 2025 by rpki-client