Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa
File: PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa (raw, json)
Hash identifier: ekiRbPByfTM7Fnyz7R+Df6+K5P9KMDqYABA3L68ThWc=
Subject key identifier: 3C:14:48:A5:13:FE:62:2D:99:C2:BD:59:9E:43:3F:97:8A:85:3E:0B
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 01942220217C05D57A77C92AAFD316AAF1A8
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59657
IP address blocks: 194.37.255.0/24 maxlen: 24
195.190.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:21:7c:05:d5:7a:77:c9:2a:af:d3:16:aa:f1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c1448a513fe622d99c2bd599e433f978a853e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:8a:51:8c:7f:e6:e9:c4:54:cc:13:21:51:
25:16:86:34:52:a6:ce:ee:f6:03:42:f0:2a:88:a7:
1a:88:17:4b:69:cf:9c:11:2d:9a:1d:2f:50:0f:ff:
89:68:38:b5:bd:f0:7a:66:0d:27:33:5c:e1:93:67:
6c:33:e2:6c:35:1a:a7:fa:ba:70:99:02:01:21:32:
b1:e7:d8:31:72:77:87:be:79:89:60:0e:1c:ff:05:
5f:58:6f:de:48:c1:83:61:9c:9c:03:94:7a:81:33:
a9:d8:e1:58:18:e8:5f:86:57:d0:29:68:00:99:ec:
7f:b5:6d:1e:4f:e9:fe:af:bd:a1:ef:3d:c8:e9:b8:
18:b3:1d:af:63:19:d3:c2:d1:af:36:a9:e3:92:fc:
7f:fc:eb:35:33:22:8e:bf:a2:30:3a:a8:46:5e:07:
a1:ad:d2:41:a0:6b:52:d3:50:dc:f2:02:38:21:27:
2d:75:98:47:8c:9b:1e:38:6f:e9:77:51:66:16:1b:
4b:45:e4:02:02:c7:53:42:2b:dd:e4:93:9e:b5:b0:
af:1d:b3:b4:12:0c:22:46:bd:2d:ee:8d:02:01:ab:
f3:2f:77:79:20:fa:e4:68:db:ed:1e:b3:5f:32:65:
92:2b:f6:84:3f:70:ab:d5:21:44:46:0a:66:e5:00:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:14:48:A5:13:FE:62:2D:99:C2:BD:59:9E:43:3F:97:8A:85:3E:0B
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.255.0/24
195.190.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d9:54:af:86:58:a5:b6:09:e4:83:18:cb:ed:39:9f:34:2c:
3b:e3:70:c3:e5:9c:4e:7a:c1:dc:5f:25:c6:58:f2:55:14:67:
6a:7d:02:dd:96:43:f1:ff:e2:bb:9b:ac:ac:37:c9:68:a8:9b:
2a:e1:00:08:09:23:3c:54:68:4a:3a:d9:e3:3b:85:fe:61:49:
88:5f:79:c2:56:bf:90:c4:99:3b:66:3a:a4:84:8c:70:c5:34:
93:6c:76:80:bf:c6:21:fb:48:02:42:f4:65:42:81:a5:92:e4:
a9:8f:5c:d8:0d:f6:4c:40:d2:4b:47:4b:89:0b:7c:01:68:c2:
e6:f8:0e:32:23:da:16:9e:fc:bb:6b:b9:e7:ac:b1:1d:f6:cc:
40:04:f6:2c:24:37:4a:ac:47:15:8f:fa:1c:1d:dc:3f:4b:54:
6a:15:e7:c3:e4:e3:90:14:57:d8:55:b6:75:28:de:ad:56:63:
dd:8e:02:05:99:9b:69:04:2e:bd:b4:1e:39:cd:c1:e6:e4:03:
b9:9b:5c:d0:e9:2d:d4:2d:d3:e8:91:3f:29:f5:78:17:c1:eb:
cb:71:b6:ae:d1:f3:5d:d7:41:2f:b4:11:b2:79:a0:f2:ab:05:
80:6a:f0:7f:0f:d6:12:1a:1c:2d:f8:92:90:bb:cb:57:de:f7:
21:d6:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:56 2025 by rpki-client