Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/Pki6gb_S1520VEM07UejShPDZGk.roa
File: Pki6gb_S1520VEM07UejShPDZGk.roa (raw, json)
Hash identifier: 7A7gzwXJGbe4mkaDrxLi5aJVByeCNXa6iSELALDb/bg=
Subject key identifier: 3E:48:BA:81:BF:D2:D7:9D:B4:54:43:34:ED:47:A3:4A:13:C3:64:69
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 019421438D1F860A62B297A1B13BF771A040
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/Pki6gb_S1520VEM07UejShPDZGk.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206380
IP address blocks: 185.188.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8d:1f:86:0a:62:b2:97:a1:b1:3b:f7:71:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e48ba81bfd2d79db4544334ed47a34a13c36469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:db:8f:79:f4:09:42:ae:e6:5c:e7:25:32:
c4:03:2d:83:b3:61:ea:d6:20:d8:3a:b3:d5:e4:15:
28:47:33:10:05:5e:28:c1:01:8e:27:11:80:fe:3b:
bf:ef:2d:c7:a2:bf:8f:60:44:d1:32:79:69:d3:d5:
52:b9:de:d9:b4:8c:dc:85:63:90:d2:94:7e:c7:cf:
16:c1:c2:ba:fc:03:a1:03:3e:a5:3e:18:2f:03:72:
f7:05:cb:c0:f9:10:f4:8b:5c:10:a0:6b:21:b8:48:
ac:d5:92:a2:47:8a:ed:c0:a8:0d:52:57:d8:d0:da:
dd:32:05:30:43:df:fc:be:bf:5a:9e:59:1b:5e:e2:
b9:50:49:a1:cc:01:6c:d9:27:fe:04:f5:d0:96:75:
d4:d0:b0:b5:e7:39:23:6d:31:ec:82:d6:47:2d:75:
d9:0a:dd:74:56:eb:ec:8a:a2:6f:0a:db:48:e1:ce:
cb:9a:6c:9b:87:d9:c5:2b:a5:00:11:a7:5c:71:91:
94:88:2d:34:db:cf:49:88:e6:4b:18:f6:4e:67:c6:
6b:19:cc:a6:12:a0:f3:ae:37:a7:c7:da:9d:0c:1f:
8d:64:76:64:7d:a5:69:88:73:6b:01:c4:27:bc:b3:
5f:06:b6:fc:66:77:83:50:52:09:86:b6:32:e2:c0:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:BA:81:BF:D2:D7:9D:B4:54:43:34:ED:47:A3:4A:13:C3:64:69
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/Pki6gb_S1520VEM07UejShPDZGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.27.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4c:3a:aa:04:3f:d2:09:1b:96:80:98:d2:f9:af:a4:ec:32:
d1:bb:4a:d7:c4:b1:0c:48:cd:16:dd:85:49:c3:d2:67:41:61:
a8:0d:cb:39:d9:18:ee:83:8e:30:02:82:f7:c2:b6:a7:99:63:
15:d5:f4:7e:3e:4d:86:79:88:a3:34:1c:8f:3f:73:06:92:4d:
f9:70:0b:5e:9e:ac:72:1d:df:f4:d4:82:14:59:9a:c5:a4:25:
33:64:1e:6d:f8:0f:84:c5:d7:f9:55:e7:66:61:28:70:ad:bb:
54:20:ab:6f:7b:12:76:a1:6d:ee:69:56:c8:8d:58:28:6b:30:
0f:d1:b1:a2:c4:4f:f7:4e:ed:1b:ef:d8:82:9a:8d:99:9a:63:
02:d8:fe:1a:3e:a1:b0:4f:a5:81:fa:82:fb:33:35:07:e4:ec:
ac:ef:30:a4:31:2e:01:9e:b3:27:c8:8f:6a:58:8e:5f:88:79:
d9:21:d9:a0:79:e7:55:64:73:78:76:13:55:cd:4a:c7:59:f9:
dc:92:d2:df:40:b8:bd:15:f1:f3:74:29:e3:b4:84:57:aa:20:
bc:ff:70:1e:df:51:2f:80:c7:d1:7f:97:9e:54:ab:35:09:7c:
e6:37:25:87:7b:45:c5:4c:f6:2c:74:12:56:ce:ad:e7:dd:cb:
c9:a0:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:33 2025 by rpki-client