Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/PF_eVnR65kNetKj7PMmx-v4rMFw.roa
File: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (raw, json)
Hash identifier: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=
Subject key identifier: 3C:5F:DE:56:74:7A:E6:43:5E:B4:A8:FB:3C:C9:B1:FA:FE:2B:30:5C
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 0194214379A702A7E53216590832BB899E2D
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/PF_eVnR65kNetKj7PMmx-v4rMFw.roa
Signing time: Wed 01 Jan 2025 09:47:37 +0000
ROA not before: Wed 01 Jan 2025 09:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6735
IP address blocks: 194.113.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:79:a7:02:a7:e5:32:16:59:08:32:bb:89:9e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jan 1 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c5fde56747ae6435eb4a8fb3cc9b1fafe2b305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:72:fa:76:9e:aa:66:28:87:01:aa:f4:80:
9d:de:a9:e7:26:71:8d:1c:3b:fd:e7:66:04:5e:8c:
51:59:77:54:85:8e:77:90:c3:98:6c:a0:2e:bf:33:
64:e4:f0:95:b7:38:85:b3:7c:45:b6:0f:2b:e1:4b:
fb:ef:9e:ca:fa:e2:63:d3:d4:71:a7:12:d3:e9:38:
e0:0f:9e:04:d7:3a:c7:74:46:ea:f0:2b:cb:cb:ed:
24:c4:b5:a8:81:23:aa:76:89:2f:18:70:30:60:e1:
34:0a:d0:c3:b5:48:e6:da:73:ee:a0:9f:fa:77:dd:
5e:f4:18:90:3a:4e:3d:a7:3a:ba:6a:e6:35:58:51:
60:a1:a5:33:f4:f6:ca:5c:87:9b:e0:0d:ed:36:e0:
90:9c:0f:ce:e0:d5:0b:8d:29:e4:86:d6:32:7a:f6:
cc:80:fe:cf:60:96:31:b5:3c:c2:83:26:42:16:ad:
b9:13:b0:4c:50:44:88:44:54:1b:ff:70:b9:dc:9f:
97:d9:b7:e1:ef:21:74:72:3f:57:cd:e7:d9:7f:99:
d8:ef:a1:3a:15:ba:5b:1b:b5:dc:4b:d0:d9:4b:87:
d4:71:de:d3:bd:89:8b:10:98:d2:4a:78:d3:1d:64:
85:f5:63:70:e9:35:d7:b2:8f:fc:a8:4b:b7:4d:4c:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:DE:56:74:7A:E6:43:5E:B4:A8:FB:3C:C9:B1:FA:FE:2B:30:5C
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/PF_eVnR65kNetKj7PMmx-v4rMFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:61:a5:f9:98:04:a4:42:2f:c5:ec:94:c5:bc:a3:65:26:3f:
39:c7:be:92:c6:59:d3:b3:69:e7:0e:25:e2:35:65:16:af:3f:
13:fa:ef:ff:14:be:36:2c:55:b2:45:43:70:df:a6:1e:bc:b7:
49:23:22:b5:dd:98:34:78:56:c9:89:c9:9a:a5:24:83:9a:64:
60:87:b5:f3:ee:72:ae:8f:c6:7a:c1:e6:ca:f3:ff:cb:e5:c0:
ca:c4:9a:d4:d6:24:da:f4:8a:f1:ee:11:ed:77:bc:fa:d1:45:
fe:bb:5f:2a:bb:54:95:c2:51:72:3f:ef:20:07:3e:bd:b8:62:
8c:d0:89:eb:d9:0d:0a:90:e3:1b:d2:e8:a2:8b:44:a0:c1:fc:
bc:c0:5b:25:b2:a3:ec:82:4c:6e:b7:45:a0:76:e4:91:43:52:
74:e9:63:f5:11:15:cd:e4:e7:cd:6c:69:7e:a2:e4:6b:97:dc:
a3:52:f5:76:96:b3:41:9f:6b:5a:67:7b:18:0d:bc:6d:58:84:
60:5e:ec:98:ba:53:b7:ee:d6:35:9d:0b:43:b3:0c:5a:ef:b6:
dc:a6:a2:44:19:97:6c:ed:7d:94:dc:bb:0a:ed:6c:22:c9:24:
89:b0:7e:de:f8:a2:24:dc:46:d0:e6:b8:30:fc:fd:cd:6a:a0:
d0:09:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:31 2025 by rpki-client