Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/PQMjEX4FV4nQMnM5KjmOyYaZsHQ.roa
File: PQMjEX4FV4nQMnM5KjmOyYaZsHQ.roa (raw, json)
Hash identifier: BczZ8hMARcctYPWNR9f3Fryz+CA9EWfyVQqKs0JydDg=
Subject key identifier: 3D:03:23:11:7E:05:57:89:D0:32:73:39:2A:39:8E:C9:86:99:B0:74
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 0185E8D1FE1FC15F7572F2D91265F296E3B9
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/PQMjEX4FV4nQMnM5KjmOyYaZsHQ.roa
Signing time: Wed 25 Jan 2023 12:05:54 +0000
ROA not before: Wed 25 Jan 2023 12:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 193.169.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:d1:fe:1f:c1:5f:75:72:f2:d9:12:65:f2:96:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Jan 25 12:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d0323117e055789d03273392a398ec98699b074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:50:aa:a3:19:81:62:10:77:5e:f4:61:c1:
6b:bc:31:0e:d2:99:44:11:85:93:e7:8a:1d:21:76:
96:87:d9:35:1b:db:d8:a3:50:a7:66:ce:f3:15:e2:
88:3a:44:95:c2:cf:88:ef:21:0a:1e:cb:74:ce:47:
59:2c:fa:48:67:0a:ef:86:5f:34:74:5f:ed:44:3d:
a0:83:2a:15:a1:fb:f4:5b:51:dc:3d:e6:d3:79:4e:
07:c9:71:e4:fa:f6:a9:f6:3e:13:0e:d3:84:a0:63:
fd:57:5a:b7:d3:d0:49:d0:55:36:20:2f:9d:ee:35:
e3:81:63:cc:69:94:23:c8:5b:0e:66:0f:43:64:ff:
a3:0f:31:87:36:36:19:44:7b:69:75:5f:cd:c9:9f:
4e:da:e2:8f:f2:ed:49:25:65:fe:4f:eb:67:9c:a9:
35:3b:3f:8f:c8:53:f6:4e:34:d3:dd:c6:26:07:bf:
85:4a:f4:40:11:21:dd:f9:c5:d6:6b:1e:70:16:07:
3d:7d:11:ce:3a:a5:bb:9e:b0:58:6f:04:ff:f4:54:
7d:ac:61:e8:b1:8e:1b:9a:3b:86:19:15:b8:6f:f9:
60:7a:0a:17:8d:ac:dd:c0:bb:b6:cf:27:76:a4:09:
ea:34:39:c4:d1:66:84:e3:6d:65:e4:78:35:07:52:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:03:23:11:7E:05:57:89:D0:32:73:39:2A:39:8E:C9:86:99:B0:74
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/PQMjEX4FV4nQMnM5KjmOyYaZsHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.250.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2c:24:03:5a:4c:9a:b4:5f:ba:ce:c5:ac:15:85:37:9f:4a:
dd:3b:b6:ef:9e:7e:50:2f:ff:2f:0c:48:49:01:4b:08:aa:d5:
e4:1c:4e:08:93:88:d9:a6:64:92:b4:03:5f:42:70:69:75:cd:
e0:c1:2f:98:c8:5a:10:99:49:eb:b1:8c:54:6b:c3:3d:87:39:
3f:a8:8e:d4:37:61:91:fa:9e:5b:b7:02:b7:eb:9e:b4:d3:01:
71:16:a5:c8:25:6f:26:43:bb:89:67:8d:dc:46:14:d4:5f:0a:
98:55:dd:1c:7d:6e:99:a1:73:b0:c8:c6:ec:55:af:eb:5a:b9:
b0:0d:da:a6:30:0d:21:e5:74:90:78:28:a1:78:87:f4:b1:fd:
38:27:f9:de:ce:1f:cc:a7:f0:e7:c2:5d:04:8a:01:03:f8:bf:
bd:e3:d8:59:7b:1c:45:cc:df:f4:ad:4f:cb:3d:89:8f:72:84:
c0:8f:54:20:5a:76:9f:20:f8:da:76:58:48:a1:8e:62:ed:e5:
3e:9f:13:1b:76:39:e5:0c:47:87:9b:e3:6c:19:66:1c:85:35:
e8:f4:7d:48:df:d0:9a:a5:b4:8b:ad:c5:14:23:78:bf:6f:87:
10:91:c4:10:4b:bd:09:d9:88:95:a9:8a:de:75:7d:cf:db:b4:
02:8a:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:38 2024 by rpki-client on console-fra.rpki-client.org