Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/Pxd_EEfpwB9V2AJk_PaQKPgjCIw.roa
File: Pxd_EEfpwB9V2AJk_PaQKPgjCIw.roa (raw, json)
Hash identifier: SmlTwlPBLbZy48QapwvJkTsAywGxLHHxHF4+EwjpHYg=
Subject key identifier: 3F:17:7F:10:47:E9:C0:1F:55:D8:02:64:FC:F6:90:28:F8:23:08:8C
Certificate issuer: /CN=e368116c6849228210905122016d722091197be5
Certificate serial: 01875A1203398953D384ADBDEB054F39E52D
Authority key identifier: E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/Pxd_EEfpwB9V2AJk_PaQKPgjCIw.roa
Signing time: Fri 07 Apr 2023 04:55:42 +0000
ROA not before: Fri 07 Apr 2023 04:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 193.201.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:12:03:39:89:53:d3:84:ad:bd:eb:05:4f:39:e5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e368116c6849228210905122016d722091197be5
Validity
Not Before: Apr 7 04:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f177f1047e9c01f55d80264fcf69028f823088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:a0:8f:16:83:b9:4f:aa:96:d8:bb:91:e8:
52:9d:71:2d:55:43:c5:fd:05:33:b2:bb:3a:1a:69:
64:b3:8b:79:23:ac:b3:08:a1:81:46:f9:cc:e5:dc:
f3:e2:08:e8:f4:01:b5:52:13:87:6a:fb:fd:55:6f:
bb:93:ac:df:7f:68:67:94:88:bd:e9:c4:b4:9a:71:
b2:a5:cd:87:d1:6b:88:b9:07:f2:73:ff:ca:46:aa:
da:55:18:f9:6f:1d:73:3b:35:8a:71:77:e7:dd:b5:
7c:bd:51:cc:34:f7:e4:c6:d8:0a:3a:01:03:be:23:
84:0b:bb:20:07:39:bb:02:a1:9f:03:58:72:04:8b:
be:0d:66:01:59:8e:34:af:0f:ed:0b:31:7b:a1:7e:
e2:bb:87:af:ad:47:bf:03:7f:ba:6f:1c:50:52:c5:
18:90:55:63:19:cd:3d:1a:00:9e:b2:ae:ce:e0:a8:
38:51:d4:fa:ec:dd:ad:fd:95:0b:75:27:0f:60:70:
27:71:da:36:32:d2:80:77:18:83:95:98:da:bd:93:
90:ad:77:80:58:f7:b4:51:86:ba:e4:d0:e9:5d:25:
70:d3:43:9d:7c:1e:c5:a3:0c:04:96:00:ed:e7:71:
61:0a:09:19:42:5c:53:69:99:00:27:f1:57:56:df:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:7F:10:47:E9:C0:1F:55:D8:02:64:FC:F6:90:28:F8:23:08:8C
X509v3 Authority Key Identifier:
keyid:E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/Pxd_EEfpwB9V2AJk_PaQKPgjCIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:14:ee:a9:14:65:1c:c0:a8:8d:80:0b:8a:df:40:57:c3:
18:dc:ad:b5:8c:6e:4e:17:c6:41:0d:18:41:5b:8c:28:17:ad:
a2:bc:51:c0:03:74:3c:c8:6e:f3:b5:d7:da:f6:d9:d1:fd:a0:
7a:c5:0f:1a:ee:62:c7:4c:bd:c1:50:83:74:ab:0e:23:a8:f4:
c6:4a:71:8e:21:39:f5:97:96:d0:9b:b8:b9:05:e6:c4:b7:df:
54:79:b1:4d:67:04:c4:70:07:f7:63:27:bf:fb:e3:db:6c:6b:
f0:b9:72:be:39:6b:84:2b:ca:6b:0a:8b:cd:f8:d8:85:21:20:
6a:19:b2:bf:d3:35:10:7c:75:43:94:5a:bb:1e:c4:b9:4f:e7:
ec:91:07:62:4d:bb:f8:10:da:cf:71:a6:bb:26:31:c9:03:62:
0f:fc:11:cd:dc:01:fa:ab:27:ed:2e:f9:e3:6a:2c:35:f3:80:
37:b7:88:e5:91:7b:91:67:e5:70:d0:de:41:74:77:5f:c5:68:
27:36:8b:d3:de:8b:79:f2:62:5e:3b:6c:76:dc:bc:2d:e6:de:
a7:84:7d:69:f4:7e:88:52:cb:fb:3b:0a:1e:7f:2c:4c:5d:59:
36:e7:d8:e9:ae:3e:b9:6e:d4:c7:bd:9b:e9:b4:d7:97:2a:6f:
0a:08:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:29:48 2025 by rpki-client