Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/Pzj8Kj7Uh6qWSXpTpjPKOcSCiQs.roa
File: Pzj8Kj7Uh6qWSXpTpjPKOcSCiQs.roa (raw, json)
Hash identifier: 1I5uMv1iSQGtVeTYdfFK3cSoq9YucKTh6YIV0H/zBGs=
Subject key identifier: 3F:38:FC:2A:3E:D4:87:AA:96:49:7A:53:A6:33:CA:39:C4:82:89:0B
Certificate issuer: /CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Certificate serial: 0185739F2713738B5886975A7418505C3770
Authority key identifier: 33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/Pzj8Kj7Uh6qWSXpTpjPKOcSCiQs.roa
Signing time: Mon 02 Jan 2023 17:54:47 +0000
ROA not before: Mon 02 Jan 2023 17:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.62.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:27:13:73:8b:58:86:97:5a:74:18:50:5c:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Validity
Not Before: Jan 2 17:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f38fc2a3ed487aa96497a53a633ca39c482890b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:7a:36:09:5d:f2:d6:fa:4f:af:49:db:45:
ac:9b:ef:7b:79:0f:a6:b2:54:5c:a1:73:79:96:a7:
bd:66:13:e3:d9:18:b4:e9:60:3b:e3:0a:77:3c:cc:
2b:1c:20:5c:c9:54:3c:94:c1:f5:6c:f3:c6:aa:ef:
69:37:8e:88:c4:d0:93:77:98:95:09:dc:07:d6:0e:
ce:a4:7f:a9:72:ce:f2:70:ba:84:3a:9e:be:b9:dc:
1c:5d:5e:e9:18:d7:cd:d8:68:95:b2:b9:38:35:97:
4b:03:bc:46:37:f5:db:21:b0:50:c2:79:7d:da:0d:
5a:10:41:32:01:e4:42:9a:15:87:86:b7:69:df:9c:
62:20:fb:01:4d:7e:15:cc:42:aa:c4:15:99:de:6b:
5d:79:3d:38:70:e2:bd:1e:b8:d3:7c:97:0b:ac:57:
07:b7:ba:40:0c:76:61:84:5a:7f:07:ab:67:1b:84:
e6:65:fd:69:63:b4:04:40:a9:49:ca:2a:41:c6:03:
2f:e5:0d:68:d2:cb:95:a4:e1:dd:27:26:e1:b6:fd:
20:17:ee:45:a7:08:45:ba:6b:c3:7d:67:26:87:88:
4d:d3:fe:4f:ae:90:bd:35:36:79:13:03:d0:7b:dd:
0d:22:ad:cc:5d:5d:21:86:24:6d:ce:99:65:ec:72:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:FC:2A:3E:D4:87:AA:96:49:7A:53:A6:33:CA:39:C4:82:89:0B
X509v3 Authority Key Identifier:
keyid:33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/Pzj8Kj7Uh6qWSXpTpjPKOcSCiQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c2:44:21:c4:7f:1b:94:4f:9e:f1:df:f7:ca:43:98:87:64:
7a:b8:2b:a0:ec:f1:80:e6:b3:4b:77:d1:f8:54:2b:03:ba:e8:
b5:a0:2a:d6:53:2b:54:53:b2:08:6b:5e:12:36:d4:3a:67:d2:
83:38:34:9e:dc:07:ff:50:1e:07:b7:49:30:6e:11:da:a8:4c:
77:bd:2c:6d:f9:f2:e8:07:64:e8:e6:b4:aa:d1:b5:1f:b4:18:
0a:0a:b5:0b:0b:c2:03:be:3e:35:c1:7f:94:a9:12:c9:8f:4d:
c7:db:03:9b:2d:1c:fa:b4:f8:49:5e:d6:52:3e:d7:8d:41:a8:
84:24:5b:b1:9a:f8:08:18:c6:5f:ba:6a:9c:75:62:29:08:6f:
a5:9b:e2:a9:68:a2:de:a7:73:84:b7:5b:e9:b5:eb:d4:78:2c:
1d:6b:90:47:48:f2:b9:1d:5d:22:6c:2e:4b:36:1d:8f:6d:c5:
55:ec:16:ae:d3:c9:8f:37:a4:5c:55:7d:e9:7e:fc:4b:b4:5c:
61:27:13:19:73:35:dc:ce:51:71:f8:45:2f:63:84:89:32:0f:
8c:b8:6e:7e:34:8e:55:ba:69:44:01:4f:37:04:e4:4d:22:77:
12:2b:51:aa:62:5d:34:1b:51:a5:7a:e2:1c:8b:b1:ac:db:2a:
15:55:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:09 2025 by rpki-client