Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Pv8X3F1zPnpxxnBc5zXyerGYRJs.roa
File: Pv8X3F1zPnpxxnBc5zXyerGYRJs.roa (raw, json)
Hash identifier: Ivls/nFiNxdDzsLDIQcZCvPxUvrC63TksV/NTdmGlHM=
Subject key identifier: 3E:FF:17:DC:5D:73:3E:7A:71:C6:70:5C:E7:35:F2:7A:B1:98:44:9B
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CA79EA18F7F2C573EA03398741512
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Pv8X3F1zPnpxxnBc5zXyerGYRJs.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27323
IP address blocks: 194.62.166.0/24 maxlen: 24
193.42.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a7:9e:a1:8f:7f:2c:57:3e:a0:33:98:74:15:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eff17dc5d733e7a71c6705ce735f27ab198449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:99:b4:d2:cf:37:5e:d2:94:58:bb:5b:17:bf:
85:fc:41:f8:8b:8e:4a:e9:94:c7:b3:66:7b:27:31:
eb:4b:f8:b5:4b:1d:e1:d7:2b:bb:76:c8:a5:e9:4f:
dd:b3:4b:7f:e8:ba:e6:e4:0b:dd:80:de:d0:82:da:
39:e2:b3:e4:4e:38:52:38:d9:b8:dd:01:7c:f9:5d:
01:31:a7:fb:d5:64:21:f5:b8:13:6b:2a:0d:e2:18:
fc:5e:5d:83:3e:94:63:82:9a:a6:f0:07:11:db:b5:
56:97:90:df:e4:38:a2:60:76:c7:5b:9d:04:de:f4:
9e:a8:c4:ae:81:74:94:59:44:56:85:c0:b6:4b:e4:
94:ce:a6:c1:a7:06:3b:73:a5:da:aa:27:c5:b5:e9:
ba:0e:ed:53:4d:bf:ad:6a:f6:0a:17:35:f7:23:76:
d0:a6:e0:f8:71:ae:a0:da:a6:af:da:e2:d3:3d:35:
9a:47:50:36:ce:d0:78:3a:5a:dc:84:4e:40:f9:58:
62:fe:53:4b:ac:55:ef:3d:d4:10:73:e9:12:e3:ec:
f8:2e:f9:90:57:89:8d:48:f8:df:a2:aa:bd:10:39:
2d:39:19:3d:c5:ea:94:26:b9:17:a4:f7:3f:10:b3:
ba:48:d3:c4:7b:4a:91:5e:ed:23:6d:16:9a:35:3e:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:17:DC:5D:73:3E:7A:71:C6:70:5C:E7:35:F2:7A:B1:98:44:9B
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Pv8X3F1zPnpxxnBc5zXyerGYRJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.244.0/24
194.62.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4d:35:e2:8f:0b:12:a7:01:ea:6b:73:50:be:a2:93:7c:4b:
2b:30:09:0d:39:ef:31:5d:c8:aa:c7:81:19:69:12:6a:7b:da:
54:5e:62:ee:29:c8:fd:94:41:2c:82:d6:3a:d9:34:48:f7:0d:
62:55:75:a1:bf:3f:8a:88:d1:13:65:7d:61:3f:65:1a:ba:5b:
b7:a0:70:15:c7:3b:ef:a9:50:16:e3:b6:30:03:4c:64:e3:00:
fa:07:ad:29:67:8e:f1:dd:1b:ed:e4:6f:5e:3f:9a:25:ed:e1:
62:d9:fc:52:d0:98:d6:16:49:7f:46:34:68:98:d7:1b:af:53:
45:21:05:f5:6e:22:fb:7e:f6:4d:70:1c:77:d2:50:40:8f:a3:
7b:51:89:e7:44:c5:c0:1c:2c:fa:42:e7:9c:fd:07:59:3b:56:
ef:62:fe:7f:ac:0f:c5:37:27:16:69:35:a9:77:be:15:83:71:
45:da:79:8c:2e:c3:78:d6:4e:c7:e5:f8:61:99:86:ca:0f:46:
eb:41:0d:5a:f0:7d:f6:b7:bd:94:5e:be:d7:94:b5:dc:e6:e7:
d0:7d:d9:d8:e5:a9:b2:80:41:3a:34:43:50:93:e5:f5:94:0a:
e4:4a:d6:0e:12:fc:87:c8:85:63:94:6f:d2:b2:47:83:c7:73:
41:8b:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org