Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/PLgTSJDM8uR1juxDHza74Z8KK_I.roa
File: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (raw, json)
Hash identifier: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=
Subject key identifier: 3C:B8:13:48:90:CC:F2:E4:75:8E:EC:43:1F:36:BB:E1:9F:0A:2B:F2
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 019424458131A0D2008E6B23275F7F5BB2E6
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/PLgTSJDM8uR1juxDHza74Z8KK_I.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203030
IP address blocks: 185.27.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:81:31:a0:d2:00:8e:6b:23:27:5f:7f:5b:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb8134890ccf2e4758eec431f36bbe19f0a2bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:ef:d5:a7:06:c7:d2:e0:23:e4:8f:37:66:
02:f1:ad:eb:65:ca:6f:cd:c6:c7:eb:8a:1b:11:ae:
fb:75:01:d5:56:e2:c8:14:67:aa:9b:d9:33:d1:01:
db:ef:8c:a9:b9:52:af:f1:5a:85:b1:2a:7a:97:32:
91:27:e1:e4:90:3c:ee:3d:34:4f:96:03:bb:57:ec:
3e:bf:59:8c:ff:72:fc:c4:63:32:ee:b7:90:b6:4f:
a8:00:b5:ff:7e:ee:bf:47:97:98:f9:33:42:81:db:
c0:4a:67:36:4c:c5:9f:52:a0:6f:b7:96:7c:06:ef:
e8:fa:ef:14:df:f5:e5:ef:be:f8:c8:82:9d:59:e6:
bd:6f:2d:3a:de:cd:aa:9f:38:93:02:46:2e:59:77:
f0:a6:f8:ce:58:2f:96:03:82:d6:0d:21:c0:e1:7b:
f5:61:13:5b:f0:2b:d5:04:90:73:1d:38:34:c1:b4:
b1:67:86:bb:b8:87:40:c2:24:32:d5:f3:c0:b8:c4:
d1:17:ca:8f:7a:ac:79:61:f1:13:7a:6e:21:59:80:
4a:48:62:1f:2d:53:a8:48:9d:eb:ee:f3:99:5c:ca:
1d:14:31:87:ae:42:05:a1:98:d8:ad:92:b4:af:ea:
82:3b:2b:6b:c1:e1:85:7e:e3:8a:4a:64:19:fc:3c:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:13:48:90:CC:F2:E4:75:8E:EC:43:1F:36:BB:E1:9F:0A:2B:F2
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/PLgTSJDM8uR1juxDHza74Z8KK_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:03:c7:79:42:3e:35:c4:56:36:48:91:6c:65:e4:ce:5c:ea:
a5:24:84:af:70:a6:69:23:22:90:42:52:8b:48:91:45:5a:37:
d4:b8:3f:b9:4c:fa:11:49:28:62:67:e9:27:7c:16:e0:56:ac:
9f:ac:7b:0d:89:8b:47:4c:84:07:a8:4b:8f:1f:a9:a9:05:bd:
14:2f:ea:89:86:4c:05:a7:83:f9:56:52:28:5f:49:30:a7:5e:
d7:46:47:20:bc:22:77:33:a5:57:9c:0d:bd:56:78:16:4a:6e:
2c:e6:53:35:99:94:59:a6:4a:d9:5d:ab:c7:ee:2f:0e:58:cb:
1c:b3:a2:e6:ba:39:cf:64:94:4b:f9:d3:32:56:34:ff:db:55:
13:88:62:12:54:01:01:cc:fe:de:15:c6:cf:1d:55:e3:26:b9:
8d:a0:8c:81:d8:05:39:06:58:bd:23:66:7e:76:3b:7f:0b:a3:
99:e6:52:8a:f1:f6:39:58:89:26:f5:34:03:10:35:b5:fc:18:
94:6f:a4:d0:02:0c:90:68:d9:b7:ef:ad:d7:c2:fa:24:a5:ba:
df:41:1d:31:35:44:0b:3e:d6:0d:73:c5:d1:63:09:69:53:34:
f9:4c:c2:06:47:5d:96:01:74:9d:8f:d1:4a:7d:31:15:31:3b:
77:b3:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:47 2025 by rpki-client