Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PDvlrTaxvYWScpQuuOEXx05KedY.roa
File: PDvlrTaxvYWScpQuuOEXx05KedY.roa (raw, json)
Hash identifier: vGYLZ+HgiI/gzpH6eLhbZxr1e1OXPxZ05iBnoG91jsI=
Subject key identifier: 3C:3B:E5:AD:36:B1:BD:85:92:72:94:2E:B8:E1:17:C7:4E:4A:79:D6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206852BB6809B4011CBBFA4969C9ECC0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PDvlrTaxvYWScpQuuOEXx05KedY.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206424
IP address blocks: 193.233.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:52:bb:68:09:b4:01:1c:bb:fa:49:69:c9:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c3be5ad36b1bd859272942eb8e117c74e4a79d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:0b:9b:f1:86:6a:85:1d:01:7c:71:f4:b6:
eb:73:69:91:c0:16:83:e5:d1:53:80:44:a9:90:1b:
16:2e:2c:8c:83:f0:6c:b2:4e:0d:47:92:fb:cf:7d:
f6:cf:eb:84:b8:37:c1:98:bd:dc:93:2f:9e:08:e6:
02:9a:c3:80:94:de:35:0b:9f:b3:99:6c:3c:d3:b7:
c6:47:fd:c0:df:4c:3b:b0:5a:5b:19:bf:74:ac:12:
e2:c0:02:b3:9d:3f:5c:4f:b0:f9:2d:7f:b7:09:2d:
0b:37:d5:b0:39:94:4d:98:5f:86:51:a6:7f:4c:30:
fe:58:34:d3:c2:48:e3:86:fd:83:6f:0b:6a:17:bf:
2c:78:42:26:20:f0:00:68:4b:43:4c:f7:a9:2c:7c:
cc:07:5e:df:8b:15:8e:2c:30:bd:32:77:a4:2a:78:
8e:17:92:4f:79:6d:27:3d:25:e3:f0:cc:46:54:85:
8f:5f:c4:06:ec:ef:02:ea:03:21:b4:0e:db:f2:e4:
65:fe:09:68:18:9a:18:c0:e2:ed:fb:25:4f:7e:36:
84:81:1a:eb:11:47:85:59:fb:3f:6c:92:98:e1:e0:
18:c1:65:6b:34:d8:bb:26:fe:d0:ba:2f:bb:26:f4:
1c:13:90:6e:05:75:d6:bf:59:34:d5:12:b1:54:9f:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:E5:AD:36:B1:BD:85:92:72:94:2E:B8:E1:17:C7:4E:4A:79:D6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PDvlrTaxvYWScpQuuOEXx05KedY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:53:22:e7:c9:67:d3:3f:8a:c0:da:d8:dc:7d:b3:32:39:bf:
7c:bf:54:67:d7:79:f0:07:5a:43:71:2b:29:16:15:47:9a:5c:
0a:ed:ce:cc:a9:71:dd:29:f2:03:5d:1d:56:33:4c:e9:40:d0:
f0:d5:8b:ad:f8:70:0e:11:c5:f3:db:fd:e0:9a:53:9d:ee:8c:
e1:59:7c:0e:27:73:c8:d4:cd:be:2a:be:cf:e2:a4:d0:a9:a5:
fe:4a:18:d9:78:46:63:a6:10:d1:8f:2f:92:2d:da:44:2c:8e:
a2:58:b6:09:7b:89:28:43:5d:8f:9f:e5:e2:ef:ec:47:1b:23:
4b:4d:39:b6:57:22:bf:7a:36:c4:57:4c:ee:e3:eb:14:e0:0c:
63:3f:a6:64:eb:42:82:a6:f6:72:4e:c0:eb:b3:e4:d2:81:16:
cc:15:ac:e7:5b:a7:24:b7:b0:b9:59:ef:de:fe:c0:f1:f4:43:
d9:eb:8a:3c:96:86:8d:0f:99:e2:33:fb:c9:54:68:b1:62:7d:
8a:49:fc:76:3c:51:a0:df:ad:f2:b0:df:2b:d7:d8:9b:c4:c4:
f7:a7:bd:95:09:aa:cf:5f:23:4e:7f:b7:99:59:e5:71:7b:5f:
34:34:d2:2a:b9:00:ee:3d:6d:15:30:cd:da:92:91:6b:53:da:
56:2c:9c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:07 2025 by rpki-client