Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/pcya3bV3_AOX97-a-7lbc32Z9iI.roa
File: pcya3bV3_AOX97-a-7lbc32Z9iI.roa (raw, json)
Hash identifier: cSZ9JqS1yu5iTos2cvV0ko65fX9CR0Kzjms77+HiqLM=
Subject key identifier: A5:CC:9A:DD:B5:77:FC:03:97:F7:BF:9A:FB:B9:5B:73:7D:99:F6:22
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 018CBFE9C6E7CB3EA94D46DDF20DB0B05A38
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/pcya3bV3_AOX97-a-7lbc32Z9iI.roa
Signing time: Sun 31 Dec 2023 12:46:58 +0000
ROA not before: Sun 31 Dec 2023 12:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 194.59.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:e9:c6:e7:cb:3e:a9:4d:46:dd:f2:0d:b0:b0:5a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: Dec 31 12:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5cc9addb577fc0397f7bf9afbb95b737d99f622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:cd:a4:47:ca:25:58:7f:d0:57:d2:49:5a:
47:b7:48:ec:f2:4a:52:eb:a9:ce:e3:65:55:77:60:
97:5c:81:99:46:c4:4c:de:3c:90:de:24:3e:3b:5a:
ac:60:d8:c7:64:10:b3:41:32:09:56:91:f0:40:67:
3b:ab:02:37:63:9b:12:0b:8e:0b:72:2b:3e:04:24:
72:d7:be:b7:5e:56:6e:d3:80:18:13:28:b9:d2:70:
06:56:43:0d:45:d3:b6:b3:ad:7d:98:bb:91:df:49:
55:28:37:8b:fd:6e:c0:b5:de:47:f8:63:91:e3:ed:
88:9e:19:b2:4b:ad:54:5d:44:ad:c0:a9:a3:89:0f:
27:90:2d:1e:8b:56:ca:af:02:05:2a:66:d0:2a:43:
17:09:3a:e9:ef:81:06:b4:a0:66:48:dd:17:4b:d4:
85:94:9c:d1:f1:0f:f4:3c:a0:02:f5:be:e5:f2:74:
cf:4a:75:5a:de:20:96:90:f0:a0:e4:34:93:c2:73:
d5:be:be:5e:a1:c4:8c:5a:60:fb:c6:b6:f8:ba:1a:
27:ed:da:3e:22:16:73:77:c0:34:70:97:2d:5e:3a:
76:9e:35:b5:dc:d3:03:63:83:f9:2a:0e:77:2f:34:
8a:da:6e:e0:89:28:02:a5:c9:22:95:b8:45:6e:68:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:9A:DD:B5:77:FC:03:97:F7:BF:9A:FB:B9:5B:73:7D:99:F6:22
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/pcya3bV3_AOX97-a-7lbc32Z9iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.9.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8d:ef:9d:b1:e6:1f:da:37:b4:45:b3:0d:9d:20:35:04:14:
28:7e:87:63:22:56:71:9a:7c:10:36:8d:7f:8f:1a:10:4a:e6:
ed:fc:f3:54:cc:97:4f:42:71:3d:f5:9a:48:bb:00:f1:05:df:
bb:6b:17:74:16:a9:38:81:57:4a:94:6f:a4:a1:f1:37:47:22:
fc:70:ed:79:24:9f:1c:f0:6e:0e:42:05:37:a2:e1:b7:91:d0:
76:d7:55:fe:f1:b8:66:7b:52:76:54:66:d3:1e:29:65:f9:28:
8f:de:45:99:f6:c0:f1:98:11:e7:3f:d6:72:59:ec:39:74:06:
9e:7e:08:3f:22:75:30:de:8c:a2:c4:1a:37:9c:b1:b2:08:d7:
76:b6:f7:06:cc:ec:79:1d:5b:eb:bb:9c:66:2c:9e:97:24:c2:
0f:a8:a1:de:d2:e5:f9:42:23:2c:55:6c:ab:74:5c:6d:eb:59:
8b:2f:1d:8c:86:63:e4:e4:2e:4b:86:25:46:ee:15:7a:ba:87:
d3:d2:53:d8:f1:98:d3:f3:7c:68:57:8b:77:8d:97:e6:04:dc:
25:c2:e7:1d:dc:00:ca:9b:75:1d:12:dc:ea:46:98:bb:10:b4:
9e:7d:77:2f:2c:e3:26:91:51:7f:86:e0:77:c8:0e:bd:f6:6a:
4c:3a:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org