Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/PFxWCOip9H8Nz3h73NcwHxaogWI.roa
File: PFxWCOip9H8Nz3h73NcwHxaogWI.roa (raw, json)
Hash identifier: VzphX9JUUBswqZ63o0O8qL2Oj2XpoymfztvOfoJTvhk=
Subject key identifier: 3C:5C:56:08:E8:A9:F4:7F:0D:CF:78:7B:DC:D7:30:1F:16:A8:81:62
Certificate issuer: /CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Certificate serial: 3523D599
Authority key identifier: 9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/PFxWCOip9H8Nz3h73NcwHxaogWI.roa
Signing time: Sat 01 Jan 2022 01:57:10 +0000
ROA not before: Sat 01 Jan 2022 01:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199579
IP address blocks: 82.196.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891540889 (0x3523d599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Validity
Not Before: Jan 1 01:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c5c5608e8a9f47f0dcf787bdcd7301f16a88162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:66:76:59:26:5c:27:ce:9f:1b:aa:bc:e6:
7e:e4:63:90:40:b1:4c:51:4d:26:20:e9:9e:28:3d:
99:fe:21:14:1f:f3:cc:4e:bd:e5:b8:9c:c7:67:98:
c4:cc:b6:c3:3c:88:de:3e:19:20:53:ed:40:2d:2d:
56:79:a3:07:24:7e:0b:16:60:98:9d:db:8b:52:ed:
98:6e:a8:73:05:c6:20:9a:39:b6:4d:de:a5:e4:98:
93:82:8e:43:49:8d:55:b5:3b:4d:38:ac:74:c1:d0:
26:6b:59:e7:ef:b2:49:cb:2f:8e:4d:79:0b:28:98:
d3:d8:de:c8:d0:84:e9:9b:1e:d0:24:4d:48:0f:d4:
98:28:df:01:29:13:4d:a0:01:7f:be:a5:3b:11:ab:
af:fd:da:93:5a:fe:25:64:5b:7c:40:10:c0:86:58:
22:9e:ba:84:6f:47:88:d7:15:6c:a1:c2:ea:86:45:
a5:88:34:aa:56:5d:01:26:36:79:e5:d5:53:08:d9:
02:28:fa:13:93:b3:05:c8:fe:34:55:52:e9:f6:0f:
12:0c:9f:e2:13:ad:d9:51:e3:1a:29:e7:44:35:ae:
96:b5:1c:2f:02:39:b2:d4:c2:26:60:57:b8:08:09:
91:fe:61:4c:e4:28:82:6a:1c:24:bc:21:b3:f0:2e:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:56:08:E8:A9:F4:7F:0D:CF:78:7B:DC:D7:30:1F:16:A8:81:62
X509v3 Authority Key Identifier:
keyid:9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/PFxWCOip9H8Nz3h73NcwHxaogWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/nrXnF8759mRM2ISbihjUHcdPQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:6f:62:ec:2d:d1:78:a0:9a:9b:40:11:10:6d:71:00:33:bf:
31:f7:da:da:c0:6d:e0:82:06:c3:5a:19:6d:fd:27:b2:bd:8a:
83:a3:0a:9d:17:9c:a6:52:69:79:8c:7d:05:3b:41:ee:66:d1:
34:25:12:a6:27:d4:51:d6:bc:8a:9f:be:22:ee:71:81:ba:c7:
66:7f:cb:29:7d:a8:37:15:5e:a3:05:81:11:7d:fb:51:e4:2b:
ac:92:ec:19:1b:a8:ba:17:fd:73:3a:85:30:08:0f:20:a9:e0:
55:77:cf:56:07:fb:2e:e3:fc:a2:ee:ec:d5:3d:d3:ce:32:b2:
13:e2:5e:ca:7b:36:85:ea:36:07:2c:34:70:ea:08:c8:df:ca:
dd:a3:f5:45:7f:6e:46:92:e8:75:0d:7c:4c:4d:3a:3b:bc:e2:
ba:69:53:d7:85:a5:ff:eb:6d:62:33:76:8d:ee:90:ef:4d:d9:
ea:5e:c7:b3:f3:89:66:4b:b1:6c:e7:6d:1b:18:0a:11:51:d9:
03:35:0d:b6:ae:1b:b6:88:a5:e5:d7:99:38:ad:69:35:b9:3e:
46:8f:e3:dc:9b:98:9f:76:b4:d7:ac:b4:57:84:17:34:8d:39:
81:a7:07:b6:46:39:7e:57:a5:c5:11:8d:0f:7d:92:de:1a:d2:
1d:21:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:38 2024 by rpki-client on console-ams.rpki-client.org