Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/PE34AAQM9jiDUgP7ydltWSTBO7Q.roa
File: PE34AAQM9jiDUgP7ydltWSTBO7Q.roa (raw, json)
Hash identifier: jMBDOBg1y6tmmZFLUyZZ+ZXvGwbuxp9x5WGQhnazZwI=
Subject key identifier: 3C:4D:F8:00:04:0C:F6:38:83:52:03:FB:C9:D9:6D:59:24:C1:3B:B4
Certificate issuer: /CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Certificate serial: 018CC8018DCDEC7D729CAA15FC4B4C335B5B
Authority key identifier: DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/PE34AAQM9jiDUgP7ydltWSTBO7Q.roa
Signing time: Tue 02 Jan 2024 02:29:54 +0000
ROA not before: Tue 02 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197901
IP address blocks: 193.150.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8d:cd:ec:7d:72:9c:aa:15:fc:4b:4c:33:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c4df800040cf638835203fbc9d96d5924c13bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:83:7d:8b:19:8f:57:ee:ef:c3:36:78:d6:
32:03:af:19:2c:89:7d:70:b1:2a:f7:ef:3e:46:f6:
27:72:94:41:08:8b:8b:78:f6:e1:b1:6e:e6:76:62:
d0:21:3d:98:38:cd:a5:1f:90:be:f6:28:2d:6e:41:
53:40:2b:f7:06:a7:5e:f6:27:84:6b:73:01:6c:d7:
6e:b6:49:3a:72:a2:4f:fe:c4:40:a7:b5:c8:a3:a4:
80:bc:ee:3d:60:dc:85:c4:79:36:a9:4f:9a:19:24:
5d:bc:6b:31:ae:16:a3:e8:54:a8:0d:fe:69:fa:39:
99:7f:ea:e0:ad:91:25:6b:47:7b:47:7e:ec:46:f1:
b6:f7:90:c2:83:3b:85:b5:a0:cf:26:ac:66:1d:3a:
d5:fc:cb:e4:51:c9:37:c4:b4:73:75:ad:38:e5:b8:
df:c4:52:be:4b:63:64:e7:51:d0:4c:ef:49:4b:7f:
92:45:d0:4f:49:15:62:a0:e1:fa:91:dc:a8:56:f1:
36:5a:cc:c3:2c:56:f3:5b:90:95:33:b2:bd:d5:f6:
2e:b4:93:57:ee:ef:a5:07:47:26:06:2b:71:e7:ac:
eb:e2:50:28:d5:71:ed:68:eb:05:9a:26:9e:e4:d4:
e0:ba:77:79:ef:28:70:1d:58:bc:a4:72:ef:08:ab:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:F8:00:04:0C:F6:38:83:52:03:FB:C9:D9:6D:59:24:C1:3B:B4
X509v3 Authority Key Identifier:
keyid:DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/PE34AAQM9jiDUgP7ydltWSTBO7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
04:02:76:3b:31:54:c6:bc:62:8c:fd:dc:6d:23:d2:92:93:41:
55:01:2c:17:47:b9:73:4d:3f:c8:af:91:38:3a:c4:2d:72:95:
be:c6:58:d4:51:31:d4:cd:2c:90:a8:32:38:f9:e8:29:61:a7:
3f:e6:36:b6:b6:b8:e1:48:82:82:2e:80:cd:e3:a6:47:03:bc:
00:2b:fa:51:bf:90:ed:5d:3a:59:d3:f4:2b:72:54:3b:3c:5b:
c0:88:e3:bb:cc:f2:be:ec:f7:df:5e:1b:2b:3f:56:1d:2d:ab:
71:a1:e9:c9:fd:40:f6:1a:65:4a:d6:28:c5:e6:2d:1e:cf:62:
f3:4d:e5:68:4d:0e:6b:0a:7f:76:c6:ef:4f:1f:47:d2:bd:2a:
fe:30:1d:cb:35:74:da:c3:da:88:db:d3:f2:a1:9a:a8:5d:db:
17:5c:5c:9f:6b:7c:ac:9c:f8:b4:70:0e:b0:55:b4:b4:f1:ec:
90:6b:2b:f3:ee:2b:df:54:a2:64:07:af:80:dd:cc:e1:86:23:
53:51:a1:07:72:1f:89:34:44:42:e1:3a:34:8d:56:e7:e9:22:
17:e1:03:b8:ad:ed:3c:70:60:5f:cd:a9:67:10:20:29:5a:76:
7b:eb:26:fe:9d:4c:23:e4:4d:56:15:24:c0:e3:89:a0:39:21:
fb:a6:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:15 2025 by rpki-client