Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Pwru1ms3rswTdeP7mDo9T3oJ3Tc.roa
File: Pwru1ms3rswTdeP7mDo9T3oJ3Tc.roa (raw, json)
Hash identifier: CQ+EuLT6MmBG/IgV6dpFIa8pWMEUV5bK+xKWi6IuG/o=
Subject key identifier: 3F:0A:EE:D6:6B:37:AE:CC:13:75:E3:FB:98:3A:3D:4F:7A:09:DD:37
Certificate issuer: /CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Certificate serial: 019426D9A20B6107ED5F5BF22842934C986F
Authority key identifier: 26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Pwru1ms3rswTdeP7mDo9T3oJ3Tc.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215057
IP address blocks: 193.24.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a2:0b:61:07:ed:5f:5b:f2:28:42:93:4c:98:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f0aeed66b37aecc1375e3fb983a3d4f7a09dd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:83:17:a7:a6:c7:16:09:6e:5e:b6:6f:60:
ff:9d:93:37:5c:7a:d7:95:5f:c6:81:5e:39:36:a1:
95:8b:d6:8c:f3:aa:87:73:29:61:c1:67:88:68:30:
69:4f:f0:37:19:0c:9e:29:3c:98:d0:e0:fd:67:ec:
31:31:71:12:2d:b5:95:7d:c2:7c:f6:4f:59:ff:f5:
51:3e:00:a7:2f:d1:bf:17:4e:40:23:8a:86:b4:13:
64:72:86:34:5a:f3:e6:2e:fe:8a:9c:07:09:d3:c2:
42:cc:78:09:4b:2a:74:94:b0:39:dc:8a:eb:c6:f3:
e8:48:dc:3e:2d:21:f8:b0:93:81:5f:97:6f:f1:37:
d8:3f:01:64:32:27:d2:a5:f8:12:be:45:19:43:a5:
42:d3:8e:c9:f8:07:4a:74:4f:32:9c:1c:45:45:1e:
47:36:7c:75:98:14:c3:15:23:e6:1b:4d:2d:5b:50:
e1:a5:e3:c8:2e:e6:bd:25:fb:6b:9d:12:b2:0c:09:
58:96:a7:53:b0:93:a9:a3:5e:5c:8e:f6:36:6b:cb:
fa:c6:69:1b:4b:1f:e3:bb:7f:0d:4f:61:b8:37:90:
a6:7b:b8:a1:ad:fa:09:de:5d:a5:c4:67:d9:c1:87:
b4:64:8d:0c:26:fc:15:de:86:a7:73:25:71:ef:21:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:EE:D6:6B:37:AE:CC:13:75:E3:FB:98:3A:3D:4F:7A:09:DD:37
X509v3 Authority Key Identifier:
keyid:26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Pwru1ms3rswTdeP7mDo9T3oJ3Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.124.0/24
Signature Algorithm: sha256WithRSAEncryption
01:df:5b:ad:c6:47:c8:58:91:76:90:5d:d6:8b:92:a7:d2:e8:
7a:9c:25:f9:e7:65:36:7b:30:a1:d1:1e:ef:f4:22:68:7a:7c:
9a:ef:51:d5:53:f4:c1:ab:df:b2:81:e6:7f:d4:82:f9:83:f5:
c4:46:30:f0:a7:18:cf:1d:bb:47:e7:f1:e8:d5:4a:cf:5f:58:
2f:e4:63:74:4a:ee:90:ec:26:13:4f:52:a7:e1:b7:41:61:85:
d1:c1:75:81:2e:6f:19:50:59:ba:45:51:79:47:44:06:e7:8d:
7d:e2:75:5d:0f:9c:97:7b:71:44:5d:8d:8f:16:2c:2b:d0:7a:
f6:46:0b:0a:61:a5:2b:99:26:6b:e4:07:2d:b8:7e:22:da:e9:
74:0a:c2:5b:75:a6:a3:6e:2c:8a:02:e8:f5:fd:3d:8a:ff:4f:
00:b9:d7:92:6d:61:0d:3d:f1:ac:38:98:5c:3d:d8:70:8f:2c:
52:16:1b:4a:02:86:00:c1:ff:68:7d:0d:48:c1:0d:9a:08:53:
60:8f:53:73:4b:61:76:07:bb:ba:3d:98:e1:0f:e7:a0:74:e0:
fb:64:a9:c6:c3:37:92:67:f0:9e:4e:93:ff:d9:07:5f:f8:c0:
2b:c5:fa:7a:39:74:e5:cd:4a:6d:cf:e5:e1:8d:62:b2:41:63:
41:39:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:13 2025 by rpki-client