Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/PgqVT9ukkcrXuWbpUoYAACn3O1o.roa
File: PgqVT9ukkcrXuWbpUoYAACn3O1o.roa (raw, json)
Hash identifier: b70naks3NV4RQm2HxnuN2eXtJ2dW+2L/cHhUfY4NMj0=
Subject key identifier: 3E:0A:95:4F:DB:A4:91:CA:D7:B9:66:E9:52:86:00:00:29:F7:3B:5A
Certificate issuer: /CN=29cff291a03badab85e3647aa2350f13c5f26661
Certificate serial: 01856E8B500EC8F8A57575686384DFCB1EBD
Authority key identifier: 29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/PgqVT9ukkcrXuWbpUoYAACn3O1o.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 195.64.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:50:0e:c8:f8:a5:75:75:68:63:84:df:cb:1e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29cff291a03badab85e3647aa2350f13c5f26661
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e0a954fdba491cad7b966e95286000029f73b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:9c:a3:95:79:4e:b8:67:62:f7:6e:9a:cc:
b1:ba:92:cc:b3:65:b0:88:53:d9:b7:57:81:68:9b:
b1:f8:85:b6:6f:01:c6:c6:ae:be:c1:55:88:8c:2a:
72:d9:44:f4:df:91:b6:41:24:7b:9b:b2:10:4b:0b:
83:49:35:c0:a5:81:49:62:85:04:fc:22:4f:f5:e0:
d1:2f:de:30:00:5a:a0:18:b1:ae:7f:2f:06:54:9e:
d0:67:62:53:4d:4f:09:07:4a:66:71:a3:ca:6f:de:
d2:c4:c8:f9:39:1b:7c:5c:17:e5:18:81:a0:34:12:
0c:7c:67:96:03:30:6c:94:99:ce:9e:2f:e9:cd:78:
62:70:42:99:bb:4c:ff:f6:98:16:39:df:38:a8:06:
78:44:64:07:81:92:03:36:5d:cb:b4:8f:65:9e:3a:
76:e3:5b:46:4c:fe:31:6b:b7:a3:9c:10:b3:0f:9f:
f8:5b:40:5d:c1:e7:0e:51:fa:f1:01:f0:80:01:29:
3f:9c:d4:03:cd:86:d3:42:d3:20:74:1a:b1:68:0c:
f8:4d:36:cc:5f:f2:3c:8b:6a:76:e3:a7:80:da:4b:
d2:f6:72:de:22:8b:cf:ea:5c:fb:d6:f7:b7:d4:ac:
c6:ea:8a:68:3d:b8:22:2d:a4:9e:33:5c:b5:f7:b0:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:95:4F:DB:A4:91:CA:D7:B9:66:E9:52:86:00:00:29:F7:3B:5A
X509v3 Authority Key Identifier:
keyid:29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/PgqVT9ukkcrXuWbpUoYAACn3O1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.121.0/24
Signature Algorithm: sha256WithRSAEncryption
19:77:1b:3e:8d:28:f9:ec:6d:12:c3:9a:4c:c2:d4:f7:94:eb:
bd:2d:ab:fc:37:d1:3e:fb:0c:45:43:91:36:f9:cd:dd:3f:60:
3a:f8:64:b6:8b:f0:9f:5e:7b:4f:ba:76:40:02:1e:80:1b:86:
af:41:74:a8:ba:71:8c:a0:73:f8:41:fd:45:4d:71:45:b5:af:
95:69:98:f2:f8:26:83:c7:07:f8:81:ab:c5:0e:8a:1b:2b:64:
24:f8:b5:2c:22:ae:30:da:8b:ae:4f:3a:04:20:70:54:11:bd:
1c:fa:44:45:5a:13:b5:d4:37:46:94:5f:b4:a6:2d:44:ac:59:
7c:d3:38:bc:33:7c:01:5f:2a:f1:a4:b6:1f:87:b2:1f:0c:44:
f1:cb:d2:65:39:22:cc:ac:29:e1:c5:1a:6b:8b:b7:8f:55:38:
e3:dd:2a:ac:fe:69:19:29:84:64:e3:85:40:ba:28:9e:1e:f2:
52:63:88:57:49:88:ab:c0:bc:ec:af:88:db:9e:f0:5e:1e:4e:
ca:06:24:17:79:b3:a3:e7:ad:55:18:c8:2c:27:51:b8:b7:f7:
2a:a8:8e:3d:16:17:87:e5:f3:33:17:ad:2f:61:16:72:dd:4e:
55:08:49:1d:99:3b:8d:9f:f6:4a:34:19:7c:c8:63:e0:c5:fe:
bd:97:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:36 2024 by rpki-client on console-ams.rpki-client.org