Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/PMHtyfhgz862DMbQxgmvEiXjKn4.roa
File: PMHtyfhgz862DMbQxgmvEiXjKn4.roa (raw, json)
Hash identifier: Xd7cPVGv/DQRgE9JW92e9P5Sipnh4XHA/d08jKTCYR4=
Subject key identifier: 3C:C1:ED:C9:F8:60:CF:CE:B6:0C:C6:D0:C6:09:AF:12:25:E3:2A:7E
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F9095A21D11869F3A15CCC3D041A
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/PMHtyfhgz862DMbQxgmvEiXjKn4.roa
Signing time: Thu 15 Aug 2024 09:35:00 +0000
ROA not before: Thu 15 Aug 2024 09:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15840
IP address blocks: 193.41.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f9:09:5a:21:d1:18:69:f3:a1:5c:cc:3d:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cc1edc9f860cfceb60cc6d0c609af1225e32a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:16:fb:11:f4:52:f0:28:c9:c4:4c:62:42:
60:2a:c1:d0:15:9d:a5:84:67:81:1e:c7:d3:54:e3:
b9:80:c5:59:2a:19:1c:27:53:75:a0:d9:aa:2a:eb:
68:32:8b:5c:04:f0:8d:31:11:25:9d:d0:82:c4:2c:
2f:88:62:b6:b8:0f:21:f0:8f:71:cf:dd:75:1d:0e:
58:9b:30:e0:cf:e7:9a:10:6d:b9:ee:16:ff:20:29:
b1:8d:40:4d:07:6b:25:3c:05:03:18:61:ec:fe:4d:
e3:6a:dd:7e:34:07:5a:2e:05:a7:f7:96:09:ac:b8:
e4:2e:f7:21:0d:55:06:86:df:ac:ea:7b:4c:db:03:
47:01:57:0c:2b:01:99:f6:a6:ea:10:22:1f:3c:11:
27:bc:eb:0d:21:1c:28:52:63:86:1a:2c:20:ed:35:
f9:89:53:4a:f3:9c:50:e4:7e:1f:97:05:91:f3:f5:
07:39:dd:21:be:18:f7:0f:1b:31:6a:30:5d:11:74:
56:9a:e4:e3:03:9b:be:1f:a3:af:7a:93:46:c2:29:
62:1e:e8:e0:c8:b5:ca:44:b1:41:a0:5e:56:15:e1:
fc:5c:9c:b2:2d:14:a2:7e:8e:4c:16:1d:03:54:60:
1a:0c:88:e5:6b:41:5e:51:1b:00:2a:ed:ff:10:b2:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:ED:C9:F8:60:CF:CE:B6:0C:C6:D0:C6:09:AF:12:25:E3:2A:7E
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/PMHtyfhgz862DMbQxgmvEiXjKn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e8:88:0c:55:b3:32:05:ad:3e:e9:b1:d2:6a:56:7d:bb:06:
c1:da:fa:98:2f:a6:4b:58:65:23:50:b2:58:6b:d9:4c:b6:98:
32:f9:f4:d1:f0:ae:e1:ac:ca:7a:a6:f3:e1:a6:d7:1d:5a:29:
c4:5b:35:40:f3:0a:95:46:e5:eb:6e:78:52:5b:f6:9a:32:e8:
ce:0f:94:f8:1e:27:3b:ef:40:ef:30:73:2f:ca:0e:f1:3e:1c:
4d:c5:18:79:78:23:b0:53:1f:9f:bb:a5:58:28:3a:d6:dd:6f:
92:3b:87:02:9d:66:58:cd:c7:90:e8:95:88:9f:3c:da:20:97:
bf:2e:8e:65:42:92:6a:7f:09:57:54:9f:9e:a5:e7:72:b4:52:
0d:d3:57:3b:6f:7a:48:c5:5e:e0:d8:c6:da:69:65:1f:7b:ae:
8a:9a:33:e8:78:d2:fd:c6:2a:e9:d3:bb:a8:d0:29:7d:ef:da:
fe:b5:c1:d6:46:ab:6a:05:6f:b8:36:03:22:2e:27:a4:b6:64:
1c:25:12:db:06:e7:46:37:87:15:63:10:c6:ed:e4:c6:b9:50:
68:02:a6:58:3f:f2:1e:3f:25:12:a0:5a:13:9a:0f:db:02:af:
d6:a5:36:8f:bd:68:4e:68:cd:c5:85:c4:98:c3:bb:fe:70:72:
c5:ef:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org