Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/PIEP2CXc-3i-CBFBObDga7BZcI0.roa
File: PIEP2CXc-3i-CBFBObDga7BZcI0.roa (raw, json)
Hash identifier: VNWoR58glKYYfUUcmsHvY4yQ5ix+1fAWWBhelVRRwBY=
Subject key identifier: 3C:81:0F:D8:25:DC:FB:78:BE:08:11:41:39:B0:E0:6B:B0:59:70:8D
Certificate issuer: /CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Certificate serial: 018815B64F75039D435C73A2E7C5F9A72E83
Authority key identifier: E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/PIEP2CXc-3i-CBFBObDga7BZcI0.roa
Signing time: Sat 13 May 2023 15:24:09 +0000
ROA not before: Sat 13 May 2023 15:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207456
IP address blocks: 185.196.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:15:b6:4f:75:03:9d:43:5c:73:a2:e7:c5:f9:a7:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Validity
Not Before: May 13 15:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c810fd825dcfb78be08114139b0e06bb059708d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:03:8a:89:a9:a8:8f:89:57:97:37:c8:da:
dc:60:01:02:15:dd:b6:09:e8:31:5b:9e:73:7c:9b:
8e:e6:a5:1f:e2:c7:10:17:01:3f:b8:5e:3f:10:0f:
c2:1d:50:9b:dd:c5:6c:91:d5:45:25:36:07:c3:32:
d8:6c:87:02:7a:da:8d:4b:58:27:34:92:eb:3a:2c:
fc:55:86:e4:52:ce:4c:75:ad:84:d3:49:ac:77:db:
7d:ad:09:01:fa:15:2f:7c:81:79:d1:0a:99:de:96:
4a:e8:6a:06:28:f7:73:79:8e:17:f7:a6:a9:fd:6f:
20:ec:92:6e:2f:8b:72:1f:5c:91:c6:36:4b:62:0b:
dd:dd:35:1f:85:2f:ee:c9:0f:ad:ac:d7:4c:97:b9:
91:63:74:98:11:c5:4c:25:29:cf:5f:02:97:b7:f9:
a9:e1:c5:38:4f:a0:da:46:62:61:5c:89:f1:67:fe:
4d:e1:19:27:ac:84:01:82:7a:11:a6:1c:6d:67:e0:
2a:ee:48:31:a4:27:86:e3:b4:f8:63:74:a9:ad:49:
65:ac:bf:d9:51:6a:3f:b3:87:72:e6:a4:14:72:10:
fe:7d:99:95:81:6c:cb:06:e3:a7:5c:3b:68:a4:27:
a2:2d:45:45:5a:ac:0e:01:5a:f8:ab:13:f9:89:82:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:81:0F:D8:25:DC:FB:78:BE:08:11:41:39:B0:E0:6B:B0:59:70:8D
X509v3 Authority Key Identifier:
keyid:E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/PIEP2CXc-3i-CBFBObDga7BZcI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:ba:d9:f7:30:91:47:1f:35:67:6a:26:f1:34:32:cd:0b:c5:
ad:79:d2:93:d0:76:93:cc:4e:88:bc:f0:45:56:ce:2b:57:7a:
0c:ca:50:43:f4:e9:43:d0:aa:18:dd:b4:93:d8:be:e9:d3:6c:
04:8d:80:83:e3:66:9e:1f:a8:87:e1:ca:a8:f7:a5:a0:9e:21:
15:d0:64:d4:00:cb:9c:81:55:3b:5a:e5:cd:e2:4f:b0:88:2a:
72:6b:c2:92:6a:e4:97:35:9a:4e:f4:e5:2f:e6:6e:e5:4e:a9:
97:96:3a:f2:4f:27:dc:77:ba:1c:37:bc:66:bd:81:cc:b4:38:
74:88:4a:8b:eb:0b:2d:67:f4:7b:ea:b4:a8:61:4e:b0:55:8c:
14:68:b4:fa:e2:bf:0d:12:fa:c1:48:70:73:ac:8f:02:08:da:
85:24:59:ef:d0:66:65:31:9a:36:2c:4d:b4:ee:be:a2:6d:81:
37:53:02:0a:d8:07:94:82:d0:c5:f4:c2:73:aa:f7:b7:3c:78:
12:97:28:fe:95:da:5c:2f:70:78:59:7f:58:6e:ff:c5:d9:50:
20:2f:78:73:c9:72:6a:bf:be:e8:5c:80:54:24:9e:ab:26:80:
d0:ef:af:7c:43:76:7d:97:9c:f1:0c:07:46:ed:ab:21:3a:06:
a7:74:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 14:04:00 2023 by rpki-client on console-fra.rpki-client.org