Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/PiAJEy9lfHDAKJ5Ilcri4vwYaNI.roa
File: PiAJEy9lfHDAKJ5Ilcri4vwYaNI.roa (raw, json)
Hash identifier: hj31vhrkbnrHemOGAuPTgzeAQ89j93aaaAFzTqJnNvQ=
Subject key identifier: 3E:20:09:13:2F:65:7C:70:C0:28:9E:48:95:CA:E2:E2:FC:18:68:D2
Certificate issuer: /CN=dd0feb9a5fa040341ea18534c5b6aed7ecd2a0de
Certificate serial: 018CC86F9838BC19352165FA55C38A73139F
Authority key identifier: DD:0F:EB:9A:5F:A0:40:34:1E:A1:85:34:C5:B6:AE:D7:EC:D2:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Q_rml-gQDQeoYU0xbau1-zSoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/PiAJEy9lfHDAKJ5Ilcri4vwYaNI.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49729
IP address blocks: 195.64.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:98:38:bc:19:35:21:65:fa:55:c3:8a:73:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0feb9a5fa040341ea18534c5b6aed7ecd2a0de
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e2009132f657c70c0289e4895cae2e2fc1868d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:f7:6f:2f:85:d4:1d:1c:97:d7:e0:55:9b:
36:5c:4e:98:72:99:0b:34:83:7e:25:00:41:b7:bb:
ee:21:ff:b3:36:2a:c2:02:d7:24:e9:bd:63:ce:df:
f6:c3:4a:80:c2:e9:a9:f0:03:94:65:13:c8:e7:25:
45:7a:f4:04:5e:91:35:67:fe:b2:99:aa:85:87:7a:
a4:df:d4:e8:ff:7e:9c:d2:92:7a:f3:b9:66:59:38:
1a:07:29:f1:03:52:bb:ea:4c:ce:fa:ef:a6:b3:8a:
4c:59:d3:ca:a4:d3:26:ce:5d:f0:1a:54:14:23:f2:
db:b6:d1:9d:e8:46:70:02:fe:52:cf:a6:d1:eb:c2:
8a:99:6b:cb:2e:8b:c9:ef:11:07:ae:05:4e:fd:1a:
1e:01:a3:4b:b7:e1:a9:e5:cd:d2:e9:5c:7e:29:de:
01:09:5e:70:6c:8f:fb:63:f1:f1:f3:c9:60:39:34:
24:1c:f7:b2:71:ae:c8:bd:e5:fc:41:b9:e6:e9:b5:
f3:47:12:4f:9e:99:40:36:46:13:f5:b1:64:b1:d5:
34:10:2e:eb:cb:b2:6f:82:23:4d:a2:11:3c:88:dd:
8a:43:70:32:81:46:b2:47:f6:61:11:94:b7:3e:ad:
ad:fd:4d:ab:e2:ec:1f:c4:7a:a1:83:2b:07:20:6a:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:09:13:2F:65:7C:70:C0:28:9E:48:95:CA:E2:E2:FC:18:68:D2
X509v3 Authority Key Identifier:
keyid:DD:0F:EB:9A:5F:A0:40:34:1E:A1:85:34:C5:B6:AE:D7:EC:D2:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Q_rml-gQDQeoYU0xbau1-zSoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/PiAJEy9lfHDAKJ5Ilcri4vwYaNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.126.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cb:80:34:12:7d:15:a9:e3:7d:79:43:d2:0c:23:a8:09:bc:
f5:dd:6e:b4:2d:1c:46:21:5e:33:92:1a:cf:db:30:c6:41:99:
2c:c2:3d:74:8e:54:77:2f:3c:b7:ce:30:2f:61:e3:f9:ea:d1:
e4:ba:ac:ca:78:bd:a8:73:77:03:7c:a0:71:4e:b1:40:2d:b4:
aa:1e:c0:2e:f0:7e:47:08:df:1e:02:4a:49:58:c3:01:57:56:
66:3e:9e:c6:b7:be:01:31:2e:4d:b3:ed:c1:02:00:1d:7e:ce:
4c:81:2e:9f:c1:59:9f:01:9f:0c:6c:57:14:56:92:50:95:04:
e3:4a:3f:b4:18:d6:14:00:4e:7d:47:c8:15:ef:d2:b7:bd:be:
76:bf:05:4c:f5:1f:ff:99:c8:7e:34:b2:9c:fe:ac:af:06:3b:
86:d6:d4:f3:56:3a:b3:e3:30:34:2b:be:80:f1:13:69:db:d1:
fc:e3:b4:d0:5f:0f:e0:ee:76:3f:dd:d7:26:54:9d:d7:75:a7:
3d:e9:c6:c2:09:16:a8:1c:c1:e1:dd:07:9e:ed:d0:f0:ab:cd:
a2:f6:ff:d3:2d:25:60:9f:3e:20:9c:d5:2b:f0:9d:8a:2f:32:
01:37:0f:74:37:ed:dd:22:5a:14:d8:38:c1:6c:fb:23:99:ee:
9b:fc:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:14 2024 by rpki-client on console-ams.rpki-client.org