Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/pNqxvbroZA2J5m889e6zD6q1HMk.roa
File: pNqxvbroZA2J5m889e6zD6q1HMk.roa (raw, json)
Hash identifier: UOBsP2Z+PEe2lfA8Hw8URe671/YrdGbjkWpM/X47UIY=
Subject key identifier: A4:DA:B1:BD:BA:E8:64:0D:89:E6:6F:3C:F5:EE:B3:0F:AA:B5:1C:C9
Certificate issuer: /CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Certificate serial: 018CC5DC07E6E847C2170204E2D418CE408C
Authority key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/pNqxvbroZA2J5m889e6zD6q1HMk.roa
Signing time: Mon 01 Jan 2024 16:29:40 +0000
ROA not before: Mon 01 Jan 2024 16:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8717
IP address blocks: 195.177.248.0/23 maxlen: 24
193.22.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:07:e6:e8:47:c2:17:02:04:e2:d4:18:ce:40:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4dab1bdbae8640d89e66f3cf5eeb30faab51cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:d8:aa:7d:e0:52:44:a3:98:f3:f5:1a:6f:
db:90:5b:45:a7:13:ce:8c:0b:32:ad:e7:af:93:07:
18:81:29:50:45:99:22:42:45:77:1d:38:1c:ad:cb:
e2:f1:cf:ed:c6:7a:a0:61:a5:81:72:9d:1b:93:d9:
98:d7:28:a0:48:45:6b:5b:e5:34:12:bf:10:46:b7:
95:34:c8:d1:79:9f:a0:ad:e5:a9:84:53:50:f5:40:
bb:c2:e3:9e:72:0b:9e:d8:46:e9:ce:31:b4:f9:88:
84:bf:3e:c8:23:8b:cf:b4:96:9d:60:c3:c5:8f:39:
de:26:07:37:b5:8c:ec:71:30:88:97:4c:7e:55:ee:
0c:d5:de:c3:4f:a3:b3:65:4c:b5:71:e7:b0:99:8e:
7f:75:a0:19:e7:3a:65:19:a5:8e:b0:63:51:36:e6:
60:71:06:78:dc:57:08:e2:bc:19:0c:9f:c1:87:fe:
5b:b4:00:b7:d1:36:22:65:af:52:59:de:40:ac:33:
6a:04:37:a3:25:57:30:5c:ac:50:a7:ab:45:b4:18:
9b:7b:84:b6:7d:cc:4f:02:29:5d:74:8a:a0:e3:a3:
21:8d:d6:5a:61:b3:42:1f:e5:f0:3f:7b:eb:29:dc:
0a:42:2b:79:37:d5:89:eb:aa:59:8d:e9:a6:dc:ad:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DA:B1:BD:BA:E8:64:0D:89:E6:6F:3C:F5:EE:B3:0F:AA:B5:1C:C9
X509v3 Authority Key Identifier:
keyid:B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/pNqxvbroZA2J5m889e6zD6q1HMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.103.0/24
195.177.248.0/23
Signature Algorithm: sha256WithRSAEncryption
52:35:42:37:84:53:ea:11:7a:71:49:78:3e:10:a0:8b:66:f3:
4e:81:8f:5a:13:43:ab:06:f4:6c:6a:0f:fd:f9:87:0f:8a:2c:
de:47:de:44:ef:48:6b:99:0b:46:25:42:d1:37:f9:7d:28:6c:
97:2e:b4:1b:a3:ac:42:b0:f4:4f:ac:49:d0:18:20:9f:94:96:
9d:ea:5e:9c:9b:e6:44:7a:90:cf:50:8d:d0:8a:c8:0b:cc:f2:
c7:ab:1e:97:1b:2a:e1:9a:be:7f:42:bd:a4:76:49:a3:dc:a1:
e2:10:22:15:41:ef:a1:75:56:60:d1:68:43:c5:46:57:7c:09:
f5:40:e1:64:7f:4e:fe:67:5c:a8:68:9b:c7:cd:67:c1:32:2b:
63:f2:11:07:fa:ec:bb:96:02:0a:69:a7:57:81:47:ec:71:59:
8d:7d:f1:93:10:ad:91:8e:ca:37:45:5e:a4:3f:95:1a:d1:7b:
bf:1f:ba:49:55:3a:64:40:ba:c9:7b:c1:3a:27:91:71:9c:b9:
95:fd:0d:20:6b:09:23:4e:d0:8c:95:73:2d:28:c3:01:b5:98:
fc:3c:85:64:bb:e3:1d:46:28:6a:5b:7f:54:91:fd:90:73:18:
9b:0f:a5:fe:68:e7:28:9b:24:72:d7:14:fe:d7:df:1c:bf:57:
04:89:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:18:16 2024 by rpki-client on console-fra.rpki-client.org