Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/AV3yscEKuI5PDbdsYdM4L-gX61E.roa
File: AV3yscEKuI5PDbdsYdM4L-gX61E.roa (raw, json)
Hash identifier: dtkLgIYbi45HIxepGm9qCJxxBYLU0CLLKjN8DIJDTJs=
Subject key identifier: 01:5D:F2:B1:C1:0A:B8:8E:4F:0D:B7:6C:61:D3:38:2F:E8:17:EB:51
Certificate issuer: /CN=3c235b210470e1d77eb64e191c0f70f7268f4085
Certificate serial: 0977F5C5
Authority key identifier: 3C:23:5B:21:04:70:E1:D7:7E:B6:4E:19:1C:0F:70:F7:26:8F:40:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/AV3yscEKuI5PDbdsYdM4L-gX61E.roa
Signing time: Sat 01 Jan 2022 04:55:54 +0000
ROA not before: Sat 01 Jan 2022 04:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47105
IP address blocks: 195.82.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158856645 (0x977f5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c235b210470e1d77eb64e191c0f70f7268f4085
Validity
Not Before: Jan 1 04:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=015df2b1c10ab88e4f0db76c61d3382fe817eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:57:a1:a8:6f:82:5d:a5:c9:06:15:89:24:
44:79:23:09:24:d7:7a:e2:dd:ae:5f:cd:83:b4:8e:
1c:14:c5:76:71:26:3a:b8:d9:78:4c:6a:12:6e:d1:
36:20:17:8f:be:18:6b:66:50:fd:67:d3:8c:99:33:
ad:15:e1:06:73:b2:96:77:cb:5e:4a:37:f7:cc:8f:
0b:23:e4:43:ce:17:bd:4e:ab:cd:eb:11:9f:cd:9b:
54:6c:a8:88:8e:9f:56:35:e1:5a:b1:da:1c:c9:12:
a6:fc:45:ab:f2:9f:46:08:43:72:ee:36:ac:b0:7a:
21:d0:5c:d3:f5:56:44:66:79:08:0d:54:05:db:b1:
0b:dd:b6:0f:0a:3b:74:a6:51:69:26:59:e0:58:91:
6b:5b:5c:f6:89:95:91:d0:e1:20:33:1e:31:5e:70:
b3:f4:75:a4:94:d2:3e:7b:00:52:f2:ae:9d:b7:b4:
38:c6:53:85:fd:6c:ee:05:3d:84:3e:6e:79:45:dc:
89:ae:66:c7:fd:75:a0:68:34:26:d0:72:7a:54:d8:
ce:43:89:61:a2:1f:c4:fc:fd:f3:ba:a8:33:17:ca:
d8:a4:fb:2f:9f:ad:8c:6b:f7:95:9f:d5:70:6a:75:
84:1b:e2:2c:a4:fa:ef:bd:8a:49:05:ec:28:54:ff:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:F2:B1:C1:0A:B8:8E:4F:0D:B7:6C:61:D3:38:2F:E8:17:EB:51
X509v3 Authority Key Identifier:
keyid:3C:23:5B:21:04:70:E1:D7:7E:B6:4E:19:1C:0F:70:F7:26:8F:40:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/AV3yscEKuI5PDbdsYdM4L-gX61E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.146.0/23
Signature Algorithm: sha256WithRSAEncryption
48:f5:dd:95:89:f1:05:ce:a4:8d:0e:63:3d:72:d8:20:54:47:
e9:63:0d:05:1a:60:19:44:2d:9e:fe:f1:6f:9e:94:93:88:be:
d8:0f:be:44:c1:b8:f9:02:df:1b:8f:a2:b4:d5:62:2f:68:57:
55:f3:e8:eb:c1:d4:d2:e8:59:af:c2:a2:70:cd:c3:9c:fa:b5:
b1:4c:91:52:cb:84:12:cd:c5:59:f1:70:0c:97:ab:fc:29:55:
76:94:c5:10:a6:f5:0c:91:0d:02:53:57:10:3c:0c:d1:5d:27:
3e:10:b2:fc:38:f7:cb:61:fc:a1:25:ff:d6:e8:4c:40:3c:79:
cf:7a:c4:23:f2:43:3a:16:e1:b5:90:9f:ff:57:93:32:1c:ec:
94:ef:ec:8f:01:ce:6d:43:c9:67:db:b7:b7:62:68:bd:a4:4f:
49:9b:31:24:7f:62:81:39:b1:f2:77:35:8c:69:f2:63:87:63:
ff:d1:38:f1:f6:c2:2c:13:9a:65:e6:ca:0a:9c:eb:d9:d4:8a:
ad:e7:6c:b6:e0:66:8c:15:cc:6f:c0:e2:7a:23:57:19:fe:3c:
a5:4d:69:cd:3c:cd:94:ed:c6:e2:14:d8:00:8e:2f:19:7e:cd:
54:af:6b:1d:23:09:de:39:e3:b7:b8:f9:e5:ae:e5:a4:59:2c:
09:2e:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:56 2025 by rpki-client