Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/pvxgjOK61sSAIjSKXGp9wCqGnds.roa
File: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (raw, json)
Hash identifier: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=
Subject key identifier: A6:FC:60:8C:E2:BA:D6:C4:80:22:34:8A:5C:6A:7D:C0:2A:86:9D:DB
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 0194228D330EE9B564CE8A3F5F3780E211AB
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/pvxgjOK61sSAIjSKXGp9wCqGnds.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 194.15.242.0/23 maxlen: 23
194.15.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:33:0e:e9:b5:64:ce:8a:3f:5f:37:80:e2:11:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6fc608ce2bad6c48022348a5c6a7dc02a869ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:74:f9:97:4f:7b:3f:43:27:bb:fe:f3:7f:
f2:21:7a:78:c2:1a:81:26:59:e0:0a:11:2f:6c:0c:
ec:2d:04:73:03:19:74:20:8c:f0:5f:00:1e:06:b8:
36:75:51:61:9b:d3:f1:a7:56:e0:89:7b:c7:8d:84:
55:5f:a2:50:7f:db:cf:c9:29:1b:8d:6d:78:96:13:
f9:1d:46:ed:30:dd:66:ac:af:ef:5a:d9:f3:30:b0:
c5:ab:af:f6:e4:0e:6d:48:bb:6c:b1:d8:cd:30:b6:
3f:66:0a:e3:0c:08:3a:38:66:5d:20:ad:95:e9:4e:
e5:71:80:22:e0:01:12:be:96:11:79:86:17:86:af:
3a:3c:43:a9:9a:bd:cf:c1:b5:21:fc:c8:f4:35:b1:
c7:80:1e:51:d5:e6:c9:ba:f3:7a:f3:54:c3:01:c6:
2d:e5:55:95:66:20:64:c0:1d:24:02:ea:8a:84:6d:
0b:5b:55:2d:62:f6:3f:14:f0:51:c2:fe:d0:50:49:
ae:3d:3a:a8:6f:4c:59:9f:08:1d:8c:7d:46:ce:77:
0e:af:d2:80:3b:a8:16:ee:b5:22:f6:75:1b:81:fc:
c7:4b:9e:aa:a1:0d:ed:48:b2:57:c2:15:6d:7b:d7:
c5:07:b0:6d:84:49:d5:2b:3e:51:3c:3f:6b:8a:16:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FC:60:8C:E2:BA:D6:C4:80:22:34:8A:5C:6A:7D:C0:2A:86:9D:DB
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/pvxgjOK61sSAIjSKXGp9wCqGnds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.242.0-194.15.247.255
Signature Algorithm: sha256WithRSAEncryption
38:09:b7:f7:f4:cc:d6:b8:2a:87:e1:4c:d7:40:6a:81:a7:4d:
17:5e:dd:e4:7d:c9:2e:44:7a:ea:c4:82:3c:27:1b:16:f0:6f:
03:93:71:e0:7a:8d:26:c9:01:b3:67:86:e3:dd:93:7d:26:e9:
fc:6e:b8:a3:db:47:1e:b8:b7:e5:63:67:e4:33:01:b2:aa:95:
13:59:fa:59:a3:31:a6:de:77:d9:64:d2:26:d0:7f:34:93:a1:
fd:bb:6f:78:18:b7:c8:91:50:25:02:00:6e:4a:a4:c5:f1:3d:
8e:f3:a2:15:f0:dd:92:d0:dc:45:1f:2f:44:7d:a7:4f:7c:c0:
16:cd:bb:e1:6c:a2:d8:ee:0c:84:02:d6:92:e5:ed:0f:3d:31:
8a:79:7b:11:87:0a:97:f2:23:4d:5a:10:2b:62:fe:27:3a:29:
50:13:cc:dc:8a:6b:ed:d5:02:0d:f8:fb:48:32:9a:7e:fc:9e:
ad:36:b2:cd:81:ac:a7:91:a2:3a:d6:40:33:c9:7a:1a:a7:1d:
c1:19:3e:5c:82:e2:04:85:ef:23:8c:0b:23:10:6a:a3:3b:ca:
92:15:f3:8a:5c:43:17:ba:7f:68:93:04:92:a0:2e:20:3a:1e:
94:fc:eb:93:02:1e:d8:92:53:cd:be:4b:b1:1e:96:fc:39:27:
26:19:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:25 2025 by rpki-client