Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pzqr2CpA2eSuimg01amJdswVuM4.roa
File: Pzqr2CpA2eSuimg01amJdswVuM4.roa (raw, json)
Hash identifier: da/KdG5nuXqoYSwBNWIGxTPMLe/RT3EGanchOh4y3Fk=
Subject key identifier: 3F:3A:AB:D8:2A:40:D9:E4:AE:8A:68:34:D5:A9:89:76:CC:15:B8:CE
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01933071462400F5247833F866CDA50E8081
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pzqr2CpA2eSuimg01amJdswVuM4.roa
Signing time: Fri 15 Nov 2024 15:29:10 +0000
ROA not before: Fri 15 Nov 2024 15:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39005
IP address blocks: 88.219.0.0/16 maxlen: 16
95.157.192.0/18 maxlen: 18
2a00:e080::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:71:46:24:00:f5:24:78:33:f8:66:cd:a5:0e:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Nov 15 15:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f3aabd82a40d9e4ae8a6834d5a98976cc15b8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:be:dd:e6:97:b3:79:36:a0:e7:25:83:d9:
98:ff:be:e3:a3:a7:02:b3:c7:48:ed:39:5f:d6:88:
0c:dc:2a:57:e2:11:2f:31:02:47:d7:eb:6c:93:78:
a8:e4:ee:0a:66:ae:79:80:c6:11:49:38:00:33:d1:
7b:ab:c3:0b:4f:98:54:e5:2c:af:33:9c:0b:13:02:
ab:64:58:ba:cd:f6:ae:49:b3:63:87:66:cd:61:65:
fe:fd:3e:a3:45:a3:ea:dc:84:3d:0b:0d:31:1b:1a:
04:2f:e2:1a:49:41:9f:92:84:c3:90:e8:bd:16:b6:
07:ba:e6:39:fd:0a:ff:a2:41:05:1d:b1:d0:b7:6c:
8a:6e:50:01:9e:d6:f9:6d:0d:2f:70:78:28:4a:7f:
21:2c:6d:f1:ad:75:7f:7f:f8:da:21:ce:65:87:86:
f3:4a:bb:9b:5c:57:19:fe:80:92:a2:5e:67:53:03:
6c:e4:3c:09:79:d9:75:54:34:4c:82:a2:7b:00:c6:
11:81:6b:75:dc:38:25:4e:d2:d1:4c:e2:34:22:24:
dc:db:14:3c:b9:fc:b3:7b:8a:3b:c6:1f:ca:4a:7a:
d6:7a:89:78:1c:ff:2f:db:24:0e:cf:03:72:23:75:
00:5d:09:f1:d0:43:0e:f3:ce:c5:39:dd:8f:db:01:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:AB:D8:2A:40:D9:E4:AE:8A:68:34:D5:A9:89:76:CC:15:B8:CE
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pzqr2CpA2eSuimg01amJdswVuM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.219.0.0/16
95.157.192.0/18
IPv6:
2a00:e080::/32
Signature Algorithm: sha256WithRSAEncryption
9a:9d:7f:4c:33:4e:00:44:e5:20:b0:40:55:ca:26:1e:f7:b5:
b7:c7:69:8c:e6:e7:8c:f7:6f:88:21:23:0e:81:b4:7e:23:c2:
72:61:65:7f:47:1a:2f:0f:a1:4f:f8:51:a2:2a:df:d4:1d:87:
1f:7b:ee:81:39:62:b0:44:fb:a9:3f:c2:f6:7f:e7:8c:ff:bd:
85:ee:95:d1:3a:49:23:36:0b:03:4f:47:c9:8b:39:8a:e4:a6:
c7:ec:b9:9d:77:3f:b1:bc:be:c0:7e:52:f6:5c:fe:b3:c9:75:
85:76:d1:3b:91:49:d8:d2:1c:48:0d:bc:e5:f2:49:be:b6:6b:
41:1a:e4:f6:56:3c:51:d9:13:d8:73:3b:5a:0c:73:79:46:88:
8d:cb:b4:17:4a:05:f7:73:5f:da:bb:39:f3:96:53:24:60:8b:
6d:a0:68:eb:c3:6d:01:dc:80:2c:c2:f6:68:ec:ec:6d:5e:f5:
a9:c5:17:48:7a:d4:2d:7a:4b:97:67:b8:1f:bc:45:7d:8c:0a:
dc:32:1d:a1:57:5c:d6:1c:a0:41:bf:bc:de:46:d5:cf:21:e2:
0f:19:d0:25:d2:b9:91:02:4e:81:49:2f:ad:49:bb:ed:2c:2a:
07:ea:b9:47:e0:a4:82:29:48:f4:72:f8:6e:ff:01:78:2f:f3:
62:8d:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:42:58 2025 by rpki-client