Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/PYhNNzuk9SlKthV_33iOWNORmCM.roa
File: PYhNNzuk9SlKthV_33iOWNORmCM.roa (raw, json)
Hash identifier: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=
Subject key identifier: 3D:88:4D:37:3B:A4:F5:29:4A:B6:15:7F:DF:78:8E:58:D3:91:98:23
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019423D73C341EC531E1BC8D3D33CF94AC8B
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/PYhNNzuk9SlKthV_33iOWNORmCM.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3330
IP address blocks: 195.242.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3c:34:1e:c5:31:e1:bc:8d:3d:33:cf:94:ac:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d884d373ba4f5294ab6157fdf788e58d3919823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:b1:63:40:78:8e:41:8e:a1:d0:6f:ea:f9:
af:8b:06:40:f0:c0:08:e9:fa:5f:f6:82:2a:3f:41:
28:32:e2:59:97:76:87:ce:d6:67:09:34:ad:e3:dd:
a6:2a:a6:d4:ba:ed:8b:27:76:34:2c:6a:df:a3:6f:
54:37:2d:d3:a3:b8:49:14:ba:b2:f2:3c:88:fb:2b:
c9:ee:6a:03:99:4a:58:b5:90:e5:90:31:7a:f7:79:
10:31:dd:65:0d:e1:c0:a3:ef:b3:d6:e2:df:18:76:
65:f0:52:dd:90:ec:69:cd:3f:29:ab:f1:ef:66:91:
d8:e6:c0:6f:c7:00:a5:51:b7:27:87:a0:02:b4:ac:
aa:71:32:f7:31:7f:62:34:9c:db:67:9e:e6:83:88:
48:f0:4c:e7:1f:55:7f:54:5a:35:d6:a3:bd:82:26:
65:e3:a4:8c:a2:d4:ff:2a:cb:49:6f:71:38:d6:37:
fe:c3:28:57:98:f2:4c:28:5e:7b:22:a4:a3:81:b7:
a5:b1:c9:63:d1:fe:8b:84:93:d2:ec:fd:38:88:9e:
2c:b9:6a:61:27:6d:cc:c1:54:9a:c0:6f:cf:fc:84:
5c:7e:05:9c:2c:99:bd:03:89:2f:5e:3d:90:f3:11:
d5:99:d0:f4:e4:5b:3b:f6:45:61:0d:31:f1:7c:cb:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:4D:37:3B:A4:F5:29:4A:B6:15:7F:DF:78:8E:58:D3:91:98:23
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/PYhNNzuk9SlKthV_33iOWNORmCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b5:61:47:e5:f9:4e:40:79:81:06:88:fd:09:2d:e2:74:4a:
b9:f0:85:a4:c4:d8:01:12:b5:d4:7b:fa:da:e9:d8:f5:f1:13:
d1:1b:65:0f:20:71:89:98:04:de:63:a6:a4:63:7e:39:ba:5c:
5a:09:80:6c:53:d9:13:90:d0:01:5b:da:29:f3:b5:20:f5:49:
b3:df:0d:7f:db:84:4b:f0:9c:c1:16:3a:97:9e:97:3c:7e:93:
ac:e3:e6:81:64:ed:bd:a2:e9:2c:7b:96:c8:5e:7d:45:80:57:
a2:22:ee:6f:d0:b6:b9:8f:36:e7:d5:ba:16:c5:cf:0b:da:73:
19:9b:92:c6:4e:5e:ab:fb:34:11:64:ae:00:bd:54:a8:42:6a:
c1:ad:b5:1e:53:dc:87:cf:ad:d3:92:80:5e:c4:1a:55:86:e1:
ff:e6:a4:64:c4:25:d6:86:d8:51:f4:ff:43:00:68:54:3d:ca:
38:4a:79:b8:c7:a9:5a:65:f8:2a:cf:99:6d:fa:87:06:5b:ae:
f1:00:30:ce:0b:ce:df:05:c7:e5:f1:29:bc:1a:b1:e3:70:18:
7f:81:bf:bb:77:89:16:4f:7b:d4:e4:e3:2e:16:b4:aa:9e:84:
56:46:fe:cb:92:4c:65:e4:c2:2c:eb:e6:b6:3a:2e:f5:2b:a0:
d9:27:c4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:52 2025 by rpki-client