Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/PjLCIkJr0vfUaxW7OvyQJKy8dTE.roa
File: PjLCIkJr0vfUaxW7OvyQJKy8dTE.roa (raw, json)
Hash identifier: s8YuUyJXj28Un1FAnqENb+erZqD2b7yIjwp9XJYDUg8=
Subject key identifier: 3E:32:C2:22:42:6B:D2:F7:D4:6B:15:BB:3A:FC:90:24:AC:BC:75:31
Certificate issuer: /CN=2631b29ac75ab548ba752b5f6251d97cb1c55e11
Certificate serial: 01872DE6214F6EFFD620095D01A344C8136B
Authority key identifier: 26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjGymsdatUi6dStfYlHZfLHFXhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/PjLCIkJr0vfUaxW7OvyQJKy8dTE.roa
Signing time: Wed 29 Mar 2023 15:04:29 +0000
ROA not before: Wed 29 Mar 2023 15:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:e6:21:4f:6e:ff:d6:20:09:5d:01:a3:44:c8:13:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631b29ac75ab548ba752b5f6251d97cb1c55e11
Validity
Not Before: Mar 29 15:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e32c222426bd2f7d46b15bb3afc9024acbc7531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:1d:28:5b:86:f3:5f:0b:7b:e8:65:b4:84:
c0:e0:65:1c:a7:ee:88:0e:83:5e:c3:49:c0:7b:2e:
5d:5b:0b:3a:a2:30:1e:79:be:ca:fe:d6:b2:9a:22:
7e:f4:0b:50:40:66:52:05:9c:fd:f6:3e:8c:61:79:
ca:6b:15:42:ee:ed:13:e8:38:aa:b6:02:e7:5e:2d:
d3:a1:ad:5f:e5:89:6e:ad:d4:eb:9b:73:55:60:d2:
3c:71:30:42:c0:15:22:da:61:f4:6f:a6:7e:8d:d7:
b7:6d:c3:f4:01:f8:9c:8a:3f:bd:67:ba:7a:ed:96:
25:3e:7c:f5:07:0e:05:11:5a:f8:01:8d:62:02:46:
08:11:e7:09:d7:67:3a:60:eb:d6:4b:e1:86:eb:c7:
7c:26:46:aa:3f:74:db:2e:f7:b6:70:6e:18:c3:1b:
5e:d7:2a:1e:22:28:c9:41:32:14:d5:19:0f:04:fe:
93:a6:58:54:ef:dc:c8:76:50:0e:df:c1:d9:b7:92:
18:54:49:f3:77:ae:45:46:13:f2:c7:2a:d0:f8:84:
d3:4e:84:82:e8:73:14:99:f6:f8:80:7a:c6:8c:b1:
cc:c5:48:f4:e0:b6:d5:2c:c4:00:08:5c:e8:b9:cd:
c5:97:2d:32:7b:7d:dc:c8:4f:a9:e7:f6:6f:b9:fa:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:32:C2:22:42:6B:D2:F7:D4:6B:15:BB:3A:FC:90:24:AC:BC:75:31
X509v3 Authority Key Identifier:
keyid:26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjGymsdatUi6dStfYlHZfLHFXhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/PjLCIkJr0vfUaxW7OvyQJKy8dTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/JjGymsdatUi6dStfYlHZfLHFXhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
16:88:ff:65:71:64:92:0f:5f:6b:30:0b:64:9f:47:d8:70:54:
50:10:af:1d:6c:bd:ce:d6:08:1a:73:9a:aa:3a:b0:8a:e7:38:
ca:77:ee:70:72:0a:db:c4:cf:b7:dc:2c:a3:c9:7d:90:16:c9:
81:bd:b0:87:9b:17:b4:0d:66:98:64:3b:43:4b:10:f4:ed:0c:
61:cb:7d:e3:6e:ba:4a:87:3a:51:89:f7:df:80:38:63:ae:40:
f4:5d:26:90:96:63:18:ca:ca:d9:5c:85:d0:c6:e0:77:a3:87:
5d:0d:04:f1:23:9a:63:06:be:d6:95:b9:51:69:0b:9e:93:ae:
79:d8:4f:a6:af:a9:af:48:9a:fa:e2:69:74:a4:58:3d:56:5c:
50:cf:67:5f:46:b2:cc:55:45:07:9a:c2:a6:f3:cd:b0:55:32:
2c:f7:93:54:e9:5b:9a:95:d2:a2:fd:7b:42:5c:61:d8:ec:73:
fa:82:38:de:b9:5b:ed:69:b2:68:a0:54:2c:ea:aa:28:e3:53:
3b:fc:e2:06:01:da:03:25:91:78:65:66:cd:c7:ff:a6:bd:87:
1f:2d:e0:7e:19:97:2b:40:e6:b4:fe:e4:e6:77:94:a5:a5:23:
0e:de:11:7c:c0:ef:98:98:7d:29:e9:d0:0b:0c:db:9f:4a:e8:
b7:bc:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:33 2025 by rpki-client