Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/PZqnQv_BdybogdSlMQZcptzL_KQ.roa
File: PZqnQv_BdybogdSlMQZcptzL_KQ.roa (raw, json)
Hash identifier: /x8SLKRrVo3rIy7UksnAUPCHiVa86KkuH3DgNYXld4c=
Subject key identifier: 3D:9A:A7:42:FF:C1:77:26:E8:81:D4:A5:31:06:5C:A6:DC:CB:FC:A4
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 018AFB3139D41DD6EBAD7D459C58DD70E010
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/PZqnQv_BdybogdSlMQZcptzL_KQ.roa
Signing time: Wed 04 Oct 2023 14:57:01 +0000
ROA not before: Wed 04 Oct 2023 14:57:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 178.159.93.0/24 maxlen: 24
178.159.95.0/24 maxlen: 24
194.113.239.0/24 maxlen: 24
45.88.103.0/24 maxlen: 24
45.88.102.0/24 maxlen: 24
185.238.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:31:39:d4:1d:d6:eb:ad:7d:45:9c:58:dd:70:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Oct 4 14:57:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d9aa742ffc17726e881d4a531065ca6dccbfca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:bc:02:1c:04:7a:08:38:db:7f:13:c4:09:
22:3f:0a:3b:51:51:01:12:3a:b9:4e:17:ae:ac:e2:
64:68:e2:f7:92:b6:41:54:5d:96:3a:6a:94:9a:e2:
84:58:8e:81:61:84:d5:b7:9a:b0:e4:b1:0d:13:4a:
65:ff:e3:ec:f4:43:b2:36:bd:40:aa:21:ac:c7:73:
18:6c:ea:18:d7:e2:b0:11:e2:b2:ca:0e:89:a8:2e:
1f:34:35:c4:f7:59:20:86:b0:f7:ab:e9:a9:f8:e5:
19:c6:bb:9c:ef:ca:dc:39:af:d3:d4:57:9a:cd:46:
00:71:ce:8f:d4:b0:a3:fb:a4:d6:bb:53:05:8f:db:
f9:ca:47:4d:21:b3:bd:44:9e:c4:93:75:08:1b:09:
f5:2a:a4:b6:f2:7b:bf:9d:bf:42:f9:ee:fd:a4:cd:
f9:01:51:05:16:5e:cd:e3:76:30:2e:20:eb:81:dc:
5d:d5:d4:df:53:80:df:58:5b:9a:a8:a1:72:40:23:
c3:54:84:90:13:f4:34:81:25:09:0b:e9:b1:f2:db:
b5:77:f6:11:11:ee:b2:04:4f:25:0b:80:2a:59:c6:
1e:32:f1:56:83:f0:fd:b6:bb:5c:83:26:73:e1:14:
8b:e7:4b:cd:08:46:76:7d:dd:7e:54:b2:d4:62:c6:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9A:A7:42:FF:C1:77:26:E8:81:D4:A5:31:06:5C:A6:DC:CB:FC:A4
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/PZqnQv_BdybogdSlMQZcptzL_KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.102.0/23
178.159.93.0/24
178.159.95.0/24
185.238.88.0/22
194.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:25:88:08:51:fb:60:d1:98:54:f4:f8:a2:c2:42:4b:a1:fc:
c3:5f:c3:1c:ee:28:9d:7b:6b:f5:22:21:44:14:6b:06:47:6a:
af:26:a8:53:50:f3:93:a9:f0:55:90:ad:b3:85:7a:f4:23:d0:
65:e1:22:51:9e:87:ab:eb:53:80:78:ac:02:3d:7c:96:71:fd:
d6:c7:6f:37:32:f5:a8:d9:ab:8e:9b:76:80:30:6e:35:e8:24:
fb:d3:00:83:e7:9e:49:29:30:6b:e1:2f:0a:fd:05:10:29:d8:
ed:c2:c8:2d:bf:35:d8:92:70:e9:f4:1c:3a:00:62:b7:46:4b:
8c:2e:f6:b8:6d:a5:9a:0f:59:e9:5d:45:41:b5:51:3e:a8:1f:
7b:b0:d8:68:e1:da:3c:e6:e3:85:4a:f6:b7:5f:1c:45:00:a0:
cc:0d:67:79:99:43:31:a4:df:0e:86:4f:6d:46:2a:0c:e4:78:
e7:51:9e:06:8b:2f:40:f4:31:90:79:cc:d9:58:f3:d3:1a:81:
ad:39:d4:11:13:67:6f:a6:af:a7:ad:42:db:92:a3:5e:88:5f:
8b:2f:3a:c8:c5:0e:7f:63:7c:a8:0a:fd:c8:a2:d0:22:c8:0e:
4c:62:36:ea:fc:0e:9e:36:63:dc:34:00:65:58:5d:c0:0f:99:
3b:d9:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:02 2025 by rpki-client