Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Pj3zogl5ZYWOBY3ig7th641eV9A.roa
File: Pj3zogl5ZYWOBY3ig7th641eV9A.roa (raw, json)
Hash identifier: 7ElQ3zJdzTdZczGF6CkoIorKYRoi8e4nnKid4Ex6yb0=
Subject key identifier: 3E:3D:F3:A2:09:79:65:85:8E:05:8D:E2:83:BB:61:EB:8D:5E:57:D0
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B40256FCCE3D2031B22FF9B568443B
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Pj3zogl5ZYWOBY3ig7th641eV9A.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12129
IP address blocks: 147.189.140.0/24 maxlen: 24
176.111.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:02:56:fc:ce:3d:20:31:b2:2f:f9:b5:68:44:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e3df3a2097965858e058de283bb61eb8d5e57d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:e6:9d:80:eb:0b:6a:08:d0:70:8b:d4:7a:
96:37:e3:f7:51:fc:77:c2:6a:c7:5f:db:39:bb:11:
55:d0:b7:49:bc:be:fd:af:af:4d:43:84:bb:76:fb:
73:65:aa:65:22:79:ed:8b:7b:83:71:47:fe:88:9a:
15:60:e5:ac:b9:7f:e4:91:06:aa:08:69:b5:55:4e:
59:bb:1d:96:13:ed:56:43:60:81:62:11:08:1b:7e:
93:30:b3:32:22:7c:88:76:f9:4b:6a:3e:4e:c2:8c:
53:24:7b:b9:fe:7c:a7:c6:9f:99:aa:a2:6f:71:43:
69:48:0f:2d:d0:79:45:e2:38:cf:a1:fb:1d:73:2c:
5d:bc:04:ec:17:9b:c6:b7:fd:7f:a3:69:0d:a8:22:
76:f5:3d:e8:fe:8f:34:87:52:f8:1e:20:8d:4c:7e:
c8:7f:9a:4c:72:46:bf:f1:94:3a:13:ae:27:a0:0c:
6f:25:59:ce:c3:1b:ee:84:08:ef:0c:49:9a:34:a7:
20:ed:b8:b1:54:6b:3c:98:ca:03:cd:a6:4b:65:7b:
44:b1:99:dd:8e:c3:22:6b:3d:ee:ed:1f:a4:e6:63:
02:0c:12:f0:33:c1:94:b8:61:57:24:8e:fa:5d:98:
66:f0:56:b7:e3:ae:a3:d9:70:88:3d:b9:61:f8:c5:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:F3:A2:09:79:65:85:8E:05:8D:E2:83:BB:61:EB:8D:5E:57:D0
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Pj3zogl5ZYWOBY3ig7th641eV9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.140.0/24
176.111.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9c:74:ad:ea:6f:c5:00:55:32:ed:13:6e:9a:73:a7:07:9a:
f8:c7:f6:62:37:c0:59:45:0a:a0:ad:ca:3f:af:1f:17:0d:63:
fb:40:37:f5:27:64:e6:bb:74:fe:9d:38:ec:24:ec:e6:29:00:
ce:0e:18:a5:7b:6c:60:a9:86:91:cc:69:ef:2f:f1:2d:4c:03:
4c:25:92:d2:0c:4f:89:33:4a:b7:8f:aa:92:9e:10:1c:2d:50:
34:86:b4:ea:e0:39:36:7a:cf:e8:f7:32:f3:c8:c7:e4:56:3b:
68:9f:16:f4:97:97:3c:1e:6c:2f:fc:1f:e0:13:93:99:91:6b:
6f:cd:fd:5b:59:0b:d2:06:b0:1b:c3:d7:c1:40:45:67:66:61:
6e:b9:9e:23:7d:9a:e6:76:88:cf:f1:7a:73:37:ea:04:70:95:
80:37:70:f1:d1:37:73:42:7f:19:38:1c:b9:62:58:17:f3:b2:
d8:4b:99:b5:e2:5e:54:b1:ac:b8:18:4d:26:6c:90:83:12:27:
6b:02:84:5d:dd:74:bf:be:13:ab:52:ac:86:9b:5a:12:5d:09:
a0:3f:ba:a2:fc:73:16:84:75:7c:a9:df:61:b6:7f:18:84:df:
4c:8d:cc:92:54:77:66:b8:40:61:bc:ad:67:cc:d3:23:ff:31:
16:2c:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:08:59 2025 by rpki-client