Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/PVKNNOOVWypyzkSKzgtS0RYsXhA.roa
File: PVKNNOOVWypyzkSKzgtS0RYsXhA.roa (raw, json)
Hash identifier: LMdq6SbF0ZRWJbSvaiemys8dmbTgwRlBGqmdkO6QQrc=
Subject key identifier: 3D:52:8D:34:E3:95:5B:2A:72:CE:44:8A:CE:0B:52:D1:16:2C:5E:10
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01856EC1F8D3E60815E081E80F7C94EEEB75
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/PVKNNOOVWypyzkSKzgtS0RYsXhA.roa
Signing time: Sun 01 Jan 2023 19:14:43 +0000
ROA not before: Sun 01 Jan 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13032
IP address blocks: 185.12.8.0/23 maxlen: 23
2a03:5dc0:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f8:d3:e6:08:15:e0:81:e8:0f:7c:94:ee:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d528d34e3955b2a72ce448ace0b52d1162c5e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:c2:7e:c2:75:3a:44:64:07:b0:01:f4:70:
b1:cb:8e:36:73:71:0a:e5:75:e6:d4:29:3b:94:6b:
79:41:94:88:a7:b7:e4:bd:9d:b9:45:d6:20:91:94:
56:34:b9:f7:e6:64:ae:c7:d3:70:f7:ec:d9:e7:6b:
32:5f:da:f2:31:c4:bf:b0:51:3c:36:ec:71:8e:c4:
d5:04:3e:10:ec:92:3d:83:12:f3:8d:ca:7b:a8:4a:
87:00:74:2c:b1:e8:5a:23:db:08:51:d0:ca:dd:6d:
31:f1:85:c3:f4:f9:a2:98:21:8c:00:37:60:22:ef:
51:71:d5:ee:a3:64:f1:c3:3e:c5:d3:84:2e:7a:2f:
77:70:ba:1d:0e:d4:ca:ff:a9:b6:8b:26:7a:f8:3b:
c9:55:57:b3:a3:de:13:50:13:28:5b:d4:5b:c3:5b:
ef:3b:e4:c7:33:51:1f:36:59:43:c6:68:39:b1:5b:
56:9b:fe:b5:8b:9c:4a:4b:2f:5f:01:8f:cb:80:9e:
b1:7c:20:d1:c9:b1:1d:92:62:7a:2d:31:8d:dc:e4:
5e:80:d5:4f:fe:d9:f0:53:eb:af:87:b2:25:07:82:
76:37:86:af:ac:51:f5:e2:28:8e:ff:7c:e2:bb:12:
ca:10:5c:7b:9f:b1:8e:a5:77:26:3d:59:b9:7e:f7:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:8D:34:E3:95:5B:2A:72:CE:44:8A:CE:0B:52:D1:16:2C:5E:10
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/PVKNNOOVWypyzkSKzgtS0RYsXhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.8.0/23
IPv6:
2a03:5dc0:6::/48
Signature Algorithm: sha256WithRSAEncryption
bb:53:b5:22:89:54:2d:eb:48:30:db:69:c6:78:66:01:e4:83:
f0:96:dd:a2:de:fc:c5:65:60:53:07:67:35:58:43:90:1f:8e:
e8:3d:d0:2e:0f:0c:a8:f1:e8:fc:72:96:a3:f0:72:03:74:42:
52:8b:8e:8f:db:b6:c3:5c:a3:20:3f:f8:f5:2b:4b:22:d6:2e:
46:da:67:be:b5:18:b7:ab:22:64:f3:ca:72:5e:8e:c2:0d:ae:
67:5e:38:e3:c9:93:2a:58:7f:c8:e3:1c:f4:13:43:28:ce:c1:
32:d6:66:e3:b1:9b:f1:fe:82:83:fc:1e:d5:ca:71:01:79:d3:
02:1a:52:66:74:c9:4d:a4:6b:69:82:aa:ee:f4:f5:85:37:85:
c5:14:de:16:78:2c:d5:04:53:27:62:fd:6b:89:92:3b:00:4e:
69:81:de:3b:c4:83:43:60:e0:5d:7d:9e:78:dc:cd:e8:de:2a:
ca:e0:6c:5c:05:4e:1a:e3:c9:7f:8e:b0:99:17:0c:8d:37:31:
6f:77:45:6c:c4:7b:ae:cf:3b:d6:3d:ea:83:e7:ec:fe:8c:17:
77:60:9e:e3:0b:10:77:23:07:fd:f7:f6:e7:1e:24:b1:1f:db:
37:73:e2:64:58:60:5d:f7:bc:8d:4b:16:f7:eb:fd:5c:82:30:
bf:49:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:33 2025 by rpki-client