Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pc_EuPXhDIKE04l1bhS-fsNK2kU.roa
File: Pc_EuPXhDIKE04l1bhS-fsNK2kU.roa (raw, json)
Hash identifier: sbyOZiyXuDVlXYppApJd22Hlxww7NMkLoQ8kKRmLfo4=
Subject key identifier: 3D:CF:C4:B8:F5:E1:0C:82:84:D3:89:75:6E:14:BE:7E:C3:4A:DA:45
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01927D6CC0B95528A0FA8A728B3A8AAFFBD3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pc_EuPXhDIKE04l1bhS-fsNK2kU.roa
Signing time: Fri 11 Oct 2024 21:12:12 +0000
ROA not before: Fri 11 Oct 2024 21:12:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7385
IP address blocks: 185.216.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:6c:c0:b9:55:28:a0:fa:8a:72:8b:3a:8a:af:fb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 11 21:12:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dcfc4b8f5e10c8284d389756e14be7ec34ada45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:7f:43:5c:21:d2:ee:e1:12:17:a7:e3:eb:
9b:eb:7b:24:4b:6b:1a:f1:97:fa:1e:15:90:18:b1:
0b:24:58:cc:7f:a1:de:97:1a:9b:a3:fb:98:be:4f:
75:cb:38:99:22:de:11:7b:e1:1d:4c:19:63:7d:55:
07:f7:1d:a2:ec:db:f6:d8:d7:a2:ad:b7:d5:20:01:
d6:ec:dd:44:1d:11:d5:cf:f1:bd:aa:b4:7e:3c:33:
81:ee:a0:35:68:a1:e5:51:c5:c7:4a:ff:4b:3a:7c:
42:e8:60:17:6c:97:0f:20:f1:d2:9f:a1:14:94:d5:
4f:5e:c5:4b:7f:0d:99:57:d1:39:97:a8:b3:f2:a1:
d2:21:bd:01:bc:bc:ee:71:96:ce:ec:85:ca:8d:dd:
c9:b2:90:73:3c:b1:7e:51:4e:aa:c7:74:6f:11:99:
f0:fd:a7:e6:84:14:54:73:c9:ff:50:a9:c3:c1:6c:
45:c0:59:64:97:14:71:eb:67:22:53:c0:6c:bf:09:
a7:a5:f9:f5:5b:4c:4d:79:6a:b9:37:e0:8d:ea:ff:
0e:dd:bd:3f:6f:82:c5:ce:b1:c4:c2:10:57:42:fc:
2c:57:6a:9b:94:a6:d5:1d:2e:03:ff:2a:5f:8f:3c:
94:19:e4:5b:11:eb:3f:a9:ae:c2:10:cf:1c:73:3e:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:C4:B8:F5:E1:0C:82:84:D3:89:75:6E:14:BE:7E:C3:4A:DA:45
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pc_EuPXhDIKE04l1bhS-fsNK2kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:a0:8e:45:6b:52:25:f8:3c:2a:b8:b8:3a:20:9a:71:87:e9:
5f:61:54:f5:f6:c1:4a:16:33:e8:7e:09:b9:d2:3a:56:aa:36:
26:ef:cc:e3:0d:ce:c3:ef:33:4e:85:94:a0:40:49:95:51:1f:
d2:16:79:52:cb:66:fa:18:76:67:6e:62:d5:39:c1:f4:da:67:
f6:ca:ff:ff:00:92:95:97:ca:9b:a4:73:83:0f:b2:c7:02:9e:
49:40:c3:b1:d2:d9:15:3e:47:0f:9c:a9:5b:1d:22:6f:92:2f:
8c:ac:f8:62:e6:5e:23:b6:c4:df:a5:a9:bb:17:0b:56:89:1f:
16:30:ad:83:1f:eb:3b:87:e2:75:7b:ba:0a:8c:ee:62:f0:f9:
1e:42:90:4e:14:d9:67:98:fd:b5:fa:31:a1:43:f0:1a:9c:b4:
57:8d:f7:3a:93:ae:71:e8:5f:21:0d:70:ed:95:76:32:3a:9c:
cb:86:37:ea:94:6b:28:11:38:c4:e8:15:ca:e2:05:88:e8:bf:
69:8d:de:a3:24:8f:cb:84:e0:a8:7d:c0:42:67:67:38:1b:56:
55:44:cf:d9:ce:70:58:0f:99:f2:5d:af:0a:58:59:99:e8:d3:
fd:3f:dc:31:9f:aa:f4:81:f8:18:f6:fa:3a:70:a9:47:75:b7:
36:60:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:24 2025 by rpki-client