Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/0xP_PdziIG5sIq80gT4_C_yowNc.roa
File: 0xP_PdziIG5sIq80gT4_C_yowNc.roa (raw, json)
Hash identifier: 9zuxqedo6yt12Cd/Ub3C31NZl84oop4acLMfDQtYWRw=
Subject key identifier: D3:13:FF:3D:DC:E2:20:6E:6C:22:AF:34:81:3E:3F:0B:FC:A8:C0:D7
Certificate issuer: /CN=e7a2698960971cbabd0d1c0c920f7408d71649a3
Certificate serial: 018805C976EFD36F5D1CC6124C00A653644E
Authority key identifier: E7:A2:69:89:60:97:1C:BA:BD:0D:1C:0C:92:0F:74:08:D7:16:49:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56JpiWCXHLq9DRwMkg90CNcWSaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/0xP_PdziIG5sIq80gT4_C_yowNc.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 194.104.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:76:ef:d3:6f:5d:1c:c6:12:4c:00:a6:53:64:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a2698960971cbabd0d1c0c920f7408d71649a3
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d313ff3ddce2206e6c22af34813e3f0bfca8c0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:ca:ae:70:1d:1e:65:da:fe:1f:be:a5:09:
f8:75:dc:55:6f:c1:d3:01:42:a6:0c:d9:b8:4b:78:
4a:6d:fe:3c:a2:4f:fb:96:b3:da:32:5e:c5:22:d3:
c2:d2:d8:bb:ef:c2:12:bc:e1:f4:88:01:c0:49:fa:
cf:62:14:55:cc:63:05:f0:fd:16:8d:eb:92:6a:6a:
15:27:a0:ce:08:78:32:f8:74:f3:91:cf:ad:22:7d:
0b:2f:0c:da:cb:2d:78:77:22:69:5b:2d:a4:89:86:
02:d3:a3:c1:ef:e0:3d:f4:c4:cb:e8:fb:a1:65:0a:
b1:a6:12:e9:01:6a:01:10:9b:2c:59:80:c7:df:3e:
30:92:95:86:80:9d:91:a4:77:37:49:f8:3b:f8:59:
92:e6:b7:20:d5:1a:f0:bf:3e:a8:3e:93:ff:c5:51:
aa:68:1c:e2:de:d7:04:39:a4:f0:8b:d5:da:d6:25:
fb:c3:f3:6d:a4:e8:c8:0f:7e:4f:1e:8e:61:c9:8e:
cc:bc:cb:8a:c4:ee:88:92:f8:f7:85:50:7e:56:32:
93:db:7f:7a:bc:ae:83:b0:c3:40:dd:dc:fd:36:a0:
bb:2a:1e:cc:1d:5f:fa:41:3b:27:03:72:a8:c3:40:
df:ae:62:ff:3b:25:3b:4a:3c:2d:53:9e:da:cc:68:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:FF:3D:DC:E2:20:6E:6C:22:AF:34:81:3E:3F:0B:FC:A8:C0:D7
X509v3 Authority Key Identifier:
keyid:E7:A2:69:89:60:97:1C:BA:BD:0D:1C:0C:92:0F:74:08:D7:16:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56JpiWCXHLq9DRwMkg90CNcWSaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/0xP_PdziIG5sIq80gT4_C_yowNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/56JpiWCXHLq9DRwMkg90CNcWSaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.239.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d4:58:e6:96:a9:64:8b:a1:36:b9:bc:81:e5:e4:a1:bd:34:
93:d6:01:73:bb:e5:d8:c1:a8:58:f4:08:73:78:38:54:b0:35:
96:b0:7c:2b:a2:82:0d:cf:62:70:e5:63:4f:f7:0f:f5:3e:25:
a5:ff:ed:e6:4a:9f:77:0f:c0:c6:3b:b2:71:c2:c7:80:12:33:
5f:9e:f7:e1:e6:72:85:8c:c3:8f:30:13:57:7d:f3:5d:78:87:
c1:e2:7c:e2:f1:19:7e:d3:be:00:7f:3d:80:10:b2:b5:b6:84:
9c:f9:cf:b7:b6:a7:41:18:6f:f8:78:f6:96:ac:3c:fb:ea:cc:
81:43:d7:bb:2b:82:24:fa:e4:5a:17:4d:3d:73:63:2e:00:02:
d0:b5:ec:de:bc:da:69:36:59:87:94:56:4f:62:7f:93:ef:1d:
2a:9d:0c:8f:1e:90:7f:64:26:50:0c:9c:dc:ab:94:f2:ca:7c:
39:85:13:ca:43:93:d6:42:89:51:9e:1a:75:e0:5e:73:3a:ff:
ce:42:79:8a:d0:18:50:ec:6f:7e:0e:58:51:3e:ff:6d:f3:f6:
e4:e3:a3:64:f9:25:02:38:4e:4e:25:f7:6c:20:47:02:95:ef:
91:6f:7b:0c:9b:39:72:b1:06:17:3c:6d:54:5b:a2:f4:70:f6:
13:06:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:20 2025 by rpki-client