Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/PEiuIrxRAt_nWSHWFCZ-Y1OnDuo.roa
File: PEiuIrxRAt_nWSHWFCZ-Y1OnDuo.roa (raw, json)
Hash identifier: ZSdReMmjCAzPhYFnV9uySINs/4oWCSJNtieIfzwYQ/s=
Subject key identifier: 3C:48:AE:22:BC:51:02:DF:E7:59:21:D6:14:26:7E:63:53:A7:0E:EA
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA0C02A789022C0D0DA56C8A0159A2
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/PEiuIrxRAt_nWSHWFCZ-Y1OnDuo.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 193.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0c:02:a7:89:02:2c:0d:0d:a5:6c:8a:01:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c48ae22bc5102dfe75921d614267e6353a70eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:a0:cb:1b:0b:c4:bc:d5:06:71:9c:1d:cc:
c6:d3:c8:67:8b:2d:54:69:d4:e2:82:cf:b6:a4:72:
b0:75:45:fb:2b:63:64:b3:61:63:85:e7:ce:d0:c8:
4b:c1:6d:79:3c:b9:cc:2f:9e:c3:66:0f:04:7f:ad:
3f:89:31:3f:06:5f:d1:e1:47:5d:df:58:0f:eb:42:
87:83:a7:8d:7d:0c:c5:53:88:47:56:b7:19:3a:22:
7e:60:ee:82:df:aa:78:cc:d4:d1:dd:5d:c6:ba:d1:
4e:7f:a1:47:2d:e7:83:35:73:a7:b7:d3:1e:27:c6:
39:f3:60:fd:7a:6e:5f:3f:f3:3b:83:46:42:33:ff:
ab:07:de:50:79:8b:cd:ae:01:04:cc:dc:a2:55:b9:
2f:03:40:4c:c7:85:85:01:0f:a3:a7:f7:4e:d3:4c:
95:58:15:d8:66:93:f0:6e:8a:ce:98:ed:39:7b:a3:
e4:15:ec:39:7e:ed:71:32:81:2e:a1:c0:06:15:31:
22:9c:c4:02:a6:70:27:93:4f:24:da:6b:a1:80:11:
41:c7:4a:06:b5:12:b8:9e:0b:6b:d6:f1:99:5f:5d:
ea:4b:31:b3:bb:ed:18:f7:8e:bc:6a:82:7d:da:4e:
86:fa:6b:5f:7c:01:86:80:ff:0b:00:03:4c:66:ef:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:AE:22:BC:51:02:DF:E7:59:21:D6:14:26:7E:63:53:A7:0E:EA
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/PEiuIrxRAt_nWSHWFCZ-Y1OnDuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:60:49:29:99:ee:4c:86:6c:26:75:9c:a1:b2:26:2e:20:e8:
62:9a:66:7d:1f:72:82:25:44:0b:bd:8e:4b:56:a0:79:f5:68:
16:e5:d8:68:fa:85:88:2b:ae:e1:25:f2:00:ea:f0:44:0c:13:
e8:96:d4:cc:85:b1:ee:cf:2b:00:9d:30:16:f6:e6:cc:20:76:
42:37:d0:74:85:6d:92:40:f4:48:ef:ea:8e:5d:5a:c7:26:8c:
9b:d4:83:bb:b3:c5:75:ed:f6:cc:07:c2:de:d1:4a:ae:18:49:
92:31:e8:fa:26:99:99:86:0d:09:d4:bf:e9:d5:a4:12:66:28:
f0:f7:e4:d1:29:d4:33:e7:96:c1:58:97:3a:a9:ef:df:3e:f9:
5f:b8:9d:09:05:24:66:81:40:81:56:d7:7a:80:42:d3:d9:e8:
a6:11:85:22:b4:bd:e0:d6:22:2f:73:dc:38:b5:3c:24:2c:b2:
c1:cf:53:e4:e2:d1:1d:06:ca:19:86:a8:32:b4:49:f9:1e:7f:
d8:eb:d7:8c:79:4e:80:13:4a:1b:e0:f2:ec:a4:f7:9a:08:b0:
9c:d2:ce:5b:6d:65:c3:d8:27:16:f7:52:3e:e7:a5:81:72:d4:
6b:a8:3f:51:46:fa:22:92:0b:4e:d6:2c:5d:f3:28:58:8e:f9:
dd:8c:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:00:53 2025 by rpki-client