Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/PpEWGz-OwlSLlk0QHrICVTcwUWc.roa
File: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (raw, json)
Hash identifier: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=
Subject key identifier: 3E:91:16:1B:3F:8E:C2:54:8B:96:4D:10:1E:B2:02:55:37:30:51:67
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 01941F8C6863CC8819CA858154514DC322B8
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/PpEWGz-OwlSLlk0QHrICVTcwUWc.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6893
IP address blocks: 193.110.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:68:63:cc:88:19:ca:85:81:54:51:4d:c3:22:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e91161b3f8ec2548b964d101eb2025537305167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:8e:ca:c9:f8:6f:1c:b4:5f:a5:9b:51:57:
10:c7:63:80:88:9a:ad:44:8a:dd:b8:47:bd:d5:74:
6b:e4:fa:c2:84:66:13:1b:28:61:a0:e0:df:0b:c4:
ce:cc:da:15:66:61:ea:46:99:42:a0:e4:1d:8e:d5:
a9:bb:70:1b:73:08:84:73:32:39:4d:1b:8b:f4:e1:
fc:f6:43:94:e9:43:b8:ad:9c:7f:49:bd:08:91:02:
e7:2b:b5:49:23:74:eb:7d:85:e8:6f:db:31:91:73:
78:00:7d:16:9c:97:51:50:87:76:16:35:67:ab:65:
95:c8:08:ed:ac:12:5b:1b:2b:60:08:d3:02:3a:91:
81:35:84:20:0b:a1:d2:b7:b1:f0:cc:8b:be:e8:ca:
1e:74:35:b7:8b:eb:d3:71:a8:14:b0:af:b1:b7:09:
f6:f2:f6:c2:40:b3:ad:dd:17:58:0a:ac:ee:54:5d:
9d:d0:2d:cf:61:ec:30:2f:00:40:83:87:58:a1:21:
8e:d9:82:d1:da:95:7f:48:fc:c8:f2:cc:18:3c:c7:
1a:2f:17:d1:0a:41:79:87:3f:00:8b:f1:2d:58:88:
d1:4e:66:a3:3e:52:1b:be:00:2b:8b:35:93:bc:f0:
45:2c:99:f8:75:dc:69:f5:d9:aa:08:84:31:22:c7:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:16:1B:3F:8E:C2:54:8B:96:4D:10:1E:B2:02:55:37:30:51:67
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/PpEWGz-OwlSLlk0QHrICVTcwUWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:12:12:71:4d:f9:52:ec:3f:a8:fc:db:09:ad:f2:d9:10:5f:
c5:ed:1e:07:df:46:2d:a8:64:5d:c5:e7:42:c3:6b:4c:b4:c6:
8e:03:95:78:f3:d8:1c:30:11:93:84:24:72:4e:7c:92:12:87:
40:38:6a:ab:76:11:38:62:05:72:e8:8e:4c:90:a6:93:ef:af:
6f:57:51:09:37:35:9a:62:95:a0:00:17:bc:b4:22:b6:22:04:
09:a2:e1:bc:62:79:3d:4f:0b:2d:f1:33:2d:29:80:58:21:5e:
c1:85:50:38:b1:b6:07:97:72:3a:75:fa:46:53:62:6c:f0:c0:
2b:6f:49:28:58:d2:a6:0e:00:c0:52:83:ce:4c:59:b3:75:28:
a1:9a:1f:a7:d9:8f:b0:9b:d5:1d:23:1e:ce:d1:d9:07:f3:ce:
aa:ac:40:1f:dc:b1:78:5d:bf:ce:70:44:3c:d0:97:b0:15:2b:
7c:9b:38:c3:af:22:ef:1a:b6:c0:44:1d:d6:30:20:5a:df:55:
5d:11:7d:31:4e:cf:80:db:7f:2d:95:61:da:e5:52:9b:96:04:
2e:02:42:ea:27:8a:06:13:44:b5:b4:01:92:5d:38:ce:f3:98:
8f:2d:10:3c:1d:1d:52:56:88:a3:dd:cf:f1:46:c9:cf:e4:70:
87:0b:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:06 2025 by rpki-client