Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa
File: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (raw, json)
Hash identifier: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=
Subject key identifier: A6:CF:B7:74:88:B8:13:79:23:CD:83:21:34:B6:3A:81:26:63:CC:42
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019424B392A077C352DCB15EC15A8B9BE438
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204755
IP address blocks: 193.142.147.0/24 maxlen: 24
2a0f:ca80:616::/48 maxlen: 48
2a0f:ca80:666::/48 maxlen: 48
2a0f:ca80:fe0::/44 maxlen: 44
2a0f:ca80:1339::/48 maxlen: 48
2a0f:ca80:b00b::/48 maxlen: 48
2a0f:ca80:beef::/48 maxlen: 48
2a0f:ca80:deed::/48 maxlen: 48
2a0f:ca81:deed::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:92:a0:77:c3:52:dc:b1:5e:c1:5a:8b:9b:e4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6cfb77488b8137923cd832134b63a812663cc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:00:77:f6:0f:79:1b:70:1d:68:b6:33:93:
0f:90:c8:c4:01:cf:59:bd:df:20:2f:4f:37:f9:4c:
cd:d2:d7:2c:c1:b8:64:01:03:2d:f4:e9:9d:a4:d2:
a3:ab:91:6b:fa:b5:7c:11:a0:dc:2c:e6:a2:fa:20:
ec:b4:65:63:ce:df:4b:2c:60:4a:60:18:9e:da:24:
cb:8f:81:94:3c:44:12:0b:a7:78:a6:46:1f:57:af:
28:e4:6b:36:9c:0e:89:67:c7:6a:33:5b:6b:fe:e2:
a4:39:a0:38:fa:5a:29:0c:27:4b:a6:b9:dd:1a:aa:
a7:6e:bd:99:7d:da:c9:f1:99:6a:a6:56:49:4f:b1:
26:8e:88:26:ef:c8:ba:80:ce:93:5d:a3:a3:f1:45:
47:f6:d3:cd:60:f0:58:27:19:63:55:fb:9e:ff:dd:
4d:ce:ac:de:d2:0c:eb:11:db:2a:8d:ec:35:70:7d:
77:ea:93:a2:69:bc:fc:b8:43:c9:61:15:67:64:0f:
5d:24:d9:74:33:ad:65:8a:22:3f:8d:f2:dd:9a:1b:
0c:58:e3:a3:bf:08:f0:42:0e:eb:d0:e5:c8:6b:69:
62:7a:99:d8:d1:f7:0f:ea:08:5a:9f:c3:fd:ab:80:
21:3b:92:4c:3e:cc:5b:67:f1:4c:81:b3:56:d2:3d:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:B7:74:88:B8:13:79:23:CD:83:21:34:B6:3A:81:26:63:CC:42
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.147.0/24
IPv6:
2a0f:ca80:616::/48
2a0f:ca80:666::/48
2a0f:ca80:fe0::/44
2a0f:ca80:1339::/48
2a0f:ca80:b00b::/48
2a0f:ca80:beef::/48
2a0f:ca80:deed::/48
2a0f:ca81:deed::/48
Signature Algorithm: sha256WithRSAEncryption
20:42:55:2e:98:8f:97:4b:63:bc:09:e5:67:8c:93:21:bd:67:
9b:c3:04:90:fc:ed:00:20:b9:2d:cd:39:20:ac:9c:94:c6:e9:
29:af:78:12:c1:a6:3c:9b:2a:07:dd:b8:2a:76:03:ba:94:da:
45:04:44:5f:42:ae:2f:99:03:5d:18:56:aa:9a:f9:22:50:98:
f0:2a:9a:97:e8:37:07:54:18:a3:37:fc:5b:f7:fa:63:4a:aa:
0c:1f:e0:68:fa:9d:cf:94:50:2f:ad:39:bd:24:41:e1:19:22:
a6:4c:12:d4:c4:fb:64:48:58:ca:db:a6:9c:3b:b4:8f:d2:e0:
e6:6a:74:b8:10:19:26:ab:f1:67:84:7f:fd:00:3a:0c:87:1c:
c5:1f:c1:6f:22:1b:28:11:db:2a:a8:d2:9b:62:05:d3:5a:83:
57:12:f6:5b:e1:c4:7e:cf:c5:a2:95:1e:8e:f7:4c:20:92:b1:
82:25:c8:7d:f8:10:29:2f:f9:8e:64:96:6a:f6:2e:05:f5:78:
d4:2e:50:9b:e3:b5:0c:4d:5f:a5:a4:6f:62:ac:ae:ca:b4:18:
4a:5c:1d:bf:b8:29:bc:68:23:94:b1:86:dc:87:6d:5c:d3:b8:
71:00:02:1a:37:49:24:68:b4:b7:22:f9:a1:d0:4b:44:1b:30:
b3:ea:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:46 2025 by rpki-client