Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/PIXelnmXw-eGHY_Wi6d6IX8sbcw.roa
File: PIXelnmXw-eGHY_Wi6d6IX8sbcw.roa (raw, json)
Hash identifier: WRygF+YPArR3H1un8+I8/JHI8ip4ZSrXSAMA6JqACfg=
Subject key identifier: 3C:85:DE:96:79:97:C3:E7:86:1D:8F:D6:8B:A7:7A:21:7F:2C:6D:CC
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C49314314C28E755F5AEEF41A30C6
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/PIXelnmXw-eGHY_Wi6d6IX8sbcw.roa
Signing time: Sun 01 Jan 2023 22:55:42 +0000
ROA not before: Sun 01 Jan 2023 22:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.39.10.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:49:31:43:14:c2:8e:75:5f:5a:ee:f4:1a:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c85de967997c3e7861d8fd68ba77a217f2c6dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:21:4e:db:3a:e8:23:03:7b:8a:03:ed:06:
0e:f8:44:8a:39:f6:ee:50:52:fc:44:62:cb:59:43:
ae:6c:31:d1:12:a9:4f:3e:16:44:7d:9a:c5:bf:58:
76:f8:40:5f:0a:1c:e8:0c:4e:65:e3:b5:fd:43:61:
00:a0:b8:50:48:02:46:a3:ed:02:7f:55:40:4a:ea:
1d:3f:f4:55:e8:b2:d1:b6:5e:1e:0c:99:2a:1e:44:
42:31:e2:ce:c1:de:83:b8:ca:c0:95:92:30:06:7e:
3a:bd:a3:04:c7:82:76:4f:73:c5:78:b0:a5:c8:b4:
f1:2e:0a:3f:84:a9:0a:5b:61:5e:f8:67:4b:b9:11:
f0:97:41:bd:33:fb:3f:67:8d:c2:21:ba:75:ba:82:
22:b2:ba:27:5e:26:5c:26:93:99:50:45:be:59:67:
10:50:6b:a3:86:12:c6:4c:ea:26:d1:0c:53:37:3d:
e3:54:b6:09:4f:c2:38:4d:ec:70:1d:c4:00:00:d5:
4c:51:54:7f:05:a9:e7:de:47:18:db:b6:3a:ea:f8:
cc:ed:5e:d5:5b:e5:f7:66:e6:9b:3c:4e:b4:6d:b8:
ee:3f:f6:82:d0:b8:6c:ce:fa:a1:fb:bd:ad:54:8f:
7f:e2:ee:b1:71:cc:ca:c3:bb:c5:69:99:ab:18:6f:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:85:DE:96:79:97:C3:E7:86:1D:8F:D6:8B:A7:7A:21:7F:2C:6D:CC
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/PIXelnmXw-eGHY_Wi6d6IX8sbcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
45.87.173.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ed:f6:1e:04:45:ca:8a:7d:8c:fe:44:e7:3b:56:d4:e3:dd:
69:86:6d:c4:7f:2e:0c:db:26:c4:93:4d:96:89:e8:42:14:6f:
57:cd:4c:20:2b:b4:f5:5b:29:27:e9:8e:a3:90:88:55:09:3b:
ae:76:36:57:88:20:00:35:75:7f:ac:27:f7:a9:44:e9:47:61:
87:d5:5e:2b:54:71:00:fd:71:52:d1:6a:d3:96:60:88:e2:6c:
f9:9b:9b:06:ff:57:77:2b:0e:de:97:85:99:d8:b7:2d:06:a5:
f1:33:81:ea:51:49:38:00:76:78:15:97:69:ec:57:d1:9b:76:
ba:87:fe:b6:c3:8a:85:38:89:d1:fa:c0:f9:cd:f5:6f:2f:8f:
3e:3d:39:8d:e5:70:ab:94:72:0a:04:f0:67:29:61:5d:db:d8:
da:4c:05:ca:ac:4d:1e:04:f9:24:30:06:84:7c:e6:2e:ec:b6:
20:1c:4a:e9:66:ea:b2:90:2e:1b:6c:7b:55:82:4b:cc:fd:02:
cc:83:c1:94:f7:29:5d:2b:3c:c8:89:3e:3a:28:07:e8:d8:44:
15:6c:2e:3e:3a:2d:45:dd:9e:25:8b:41:86:8b:62:d2:e8:17:
7f:dd:49:85:27:70:aa:40:10:18:4b:53:bb:4c:88:08:a1:57:
7b:81:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:27 2025 by rpki-client