Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/PMHzHrS6vvRZOElfdDEFLn4owdU.roa
File: PMHzHrS6vvRZOElfdDEFLn4owdU.roa (raw, json)
Hash identifier: UQqloSoHMyhRkRNOpx686QqPQutsxYq/mxr1bVAeLpo=
Subject key identifier: 3C:C1:F3:1E:B4:BA:BE:F4:59:38:49:5F:74:31:05:2E:7E:28:C1:D5
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 01941FFA898133301219325F3E43B28F8F69
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/PMHzHrS6vvRZOElfdDEFLn4owdU.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57644
IP address blocks: 194.50.95.0/24 maxlen: 24
2a13:57c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:89:81:33:30:12:19:32:5f:3e:43:b2:8f:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cc1f31eb4babef45938495f7431052e7e28c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:a9:03:cf:ea:16:db:67:8e:70:67:b7:6c:
03:86:ec:1f:01:52:0a:eb:ea:87:68:90:0e:6f:81:
e0:ee:62:55:85:11:33:ff:14:52:72:20:c5:80:ee:
86:b0:94:bf:cd:96:53:b2:ad:b2:3f:bf:52:94:d5:
58:b2:87:f2:c1:45:22:d9:46:e6:53:e1:63:a7:17:
5e:d9:9d:ad:e6:7b:5c:e6:b5:f6:74:13:40:3c:c3:
5a:bb:9c:a9:e9:dd:e9:80:6d:b5:1f:2c:6f:7b:35:
0d:05:68:a7:96:b2:a5:a9:77:ea:c8:09:ab:a6:76:
46:28:58:74:09:8e:57:d1:db:94:94:19:28:5f:01:
bb:e6:ca:31:ad:90:d6:77:28:af:00:0d:3e:bc:70:
bb:15:21:e8:b0:9d:d1:cb:b1:10:97:ba:7c:7d:a1:
d9:60:b7:6e:9c:b1:04:2b:fe:d1:96:54:39:a3:c0:
ce:92:10:52:5f:4a:4c:0b:b3:46:99:4d:b0:bc:45:
02:a4:87:6d:c0:60:85:9b:52:1a:13:08:b1:59:c6:
48:92:eb:40:bd:0d:65:54:bb:ea:56:61:5b:69:54:
c7:af:56:2e:b7:7c:b2:4b:98:7f:91:71:ca:9a:d1:
76:ac:eb:61:e3:a0:7c:c2:8b:af:9d:b0:aa:af:d5:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:F3:1E:B4:BA:BE:F4:59:38:49:5F:74:31:05:2E:7E:28:C1:D5
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/PMHzHrS6vvRZOElfdDEFLn4owdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.95.0/24
IPv6:
2a13:57c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:2c:ee:19:6a:76:29:0f:f0:0f:55:a2:6b:0b:ce:1d:16:33:
ac:e2:5e:84:89:ad:3a:b1:74:e2:02:aa:1f:1d:10:f2:19:23:
a2:54:bb:c1:d2:35:56:3f:54:8b:84:35:54:42:5b:da:6f:86:
e5:c3:da:45:34:bc:3f:53:b0:47:7c:8e:3b:3a:fb:7f:0c:35:
1d:4e:c1:6c:74:4a:88:ea:f0:f5:7c:74:d6:6b:0d:25:95:2a:
83:7a:77:b5:7a:68:41:97:19:9c:8b:2c:30:1d:94:6b:56:04:
3c:f7:5e:6d:1c:fb:ea:ae:26:a0:c0:0e:9b:81:51:83:4c:6c:
92:5d:50:4d:d5:02:1e:1e:81:7d:85:ba:6e:30:d1:31:29:c4:
2f:11:66:44:ed:4c:97:d8:0f:b0:be:d3:9b:c9:da:95:14:41:
fe:04:17:b0:46:fe:26:c3:7c:51:c8:50:bd:8f:7b:6e:50:a3:
0c:a7:8c:15:e1:e4:8d:eb:ae:9d:ef:f0:40:2a:25:a7:bf:fa:
90:01:82:76:02:9b:48:d4:6b:f9:8c:ad:0e:ed:30:64:05:92:
96:c8:52:6f:06:45:bb:0d:3e:09:d7:b4:da:36:dd:f5:65:ae:
67:ad:c0:69:93:0c:86:df:48:d3:ac:8a:f8:4d:a5:16:c4:54:
81:75:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:05 2025 by rpki-client