Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/PqG_UkWWrPzyqCj-z-0YZGBlHWE.roa
File: PqG_UkWWrPzyqCj-z-0YZGBlHWE.roa (raw, json)
Hash identifier: 1qMDxK62tlWW+6AUanrYVA6Q07Cl4aJkVxg/TeHEA10=
Subject key identifier: 3E:A1:BF:52:45:96:AC:FC:F2:A8:28:FE:CF:ED:18:64:60:65:1D:61
Certificate issuer: /CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Certificate serial: 01B8229D
Authority key identifier: 1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/PqG_UkWWrPzyqCj-z-0YZGBlHWE.roa
Signing time: Mon 13 Jun 2022 05:49:04 +0000
ROA not before: Mon 13 Jun 2022 05:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136038
IP address blocks: 193.239.151.0/24 maxlen: 24
193.239.150.0/24 maxlen: 24
193.239.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28844701 (0x1b8229d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Validity
Not Before: Jun 13 05:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ea1bf524596acfcf2a828fecfed186460651d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:68:c5:64:3c:2f:64:23:00:9a:f0:e9:ce:
a3:60:68:60:98:3a:07:08:49:48:79:b9:52:0a:8e:
40:17:ce:a3:89:58:a3:51:f2:fd:d9:d3:f1:95:c5:
5e:37:09:6f:7a:73:45:01:24:9a:71:fa:5d:5b:97:
e3:04:aa:d9:ad:9d:a5:00:df:8f:a3:3c:ae:9d:34:
ec:8b:af:5d:d6:ee:f0:3a:c9:ae:d6:e2:1a:80:27:
af:71:4d:10:ec:e4:25:be:44:7f:6f:03:da:fa:62:
4a:49:14:0e:74:35:41:c9:69:b1:0c:fe:f8:98:6a:
cf:7e:5f:b6:6b:fc:a3:53:fd:4b:fb:e5:b2:6c:e9:
fd:62:d8:8c:18:3d:14:73:e8:ba:9b:be:e0:f9:a1:
ad:43:55:e2:09:95:f7:01:7d:ff:43:23:bd:d0:82:
0f:45:3b:7f:f1:25:49:ec:d2:67:fc:15:6f:61:4d:
6d:19:ad:82:4a:30:f8:50:4d:d8:6f:e2:ae:16:94:
94:e3:ae:e7:51:ab:ec:06:6b:06:eb:0a:0d:94:e5:
33:c0:68:f4:52:81:94:6e:54:13:59:96:e1:7b:0c:
6f:1e:6a:61:aa:15:48:70:4c:f3:3b:51:ef:b5:aa:
1a:60:dc:69:49:a2:6f:86:28:ab:c2:60:67:20:f8:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:BF:52:45:96:AC:FC:F2:A8:28:FE:CF:ED:18:64:60:65:1D:61
X509v3 Authority Key Identifier:
keyid:1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/PqG_UkWWrPzyqCj-z-0YZGBlHWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/Hx0EgHUE3L4auA74TYblFMV-fo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.150.0/23
193.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
81:68:3f:0d:8a:a5:51:d5:55:48:e4:73:1b:42:00:f2:e8:b3:
a0:f2:2c:db:4c:dd:d3:f4:cb:4d:f0:bf:66:45:95:b8:78:ac:
3c:9b:51:24:82:59:cd:43:a9:94:b7:4f:fe:e1:87:43:62:57:
0c:ee:e3:8a:af:23:de:50:d5:36:10:2c:8a:b3:c2:82:8f:20:
ff:ce:4a:65:1b:89:3e:bf:b4:8b:24:4a:c1:3c:56:5a:02:23:
aa:ac:cf:3c:35:3c:a3:02:71:f1:2c:f3:5f:fd:3a:e6:38:e4:
08:68:8c:0d:02:d8:70:da:20:ce:cf:b5:5c:cf:60:87:71:e1:
99:e3:4d:7b:e3:2a:4c:9a:50:f2:34:98:b8:eb:0f:5c:78:5a:
d3:a3:ba:8e:73:0c:88:cc:ae:1e:66:9d:38:a3:d6:70:2e:49:
d1:10:3b:ee:53:62:89:2e:69:7e:56:a6:eb:84:a1:a5:f6:25:
da:b0:42:e4:c2:0a:1d:9f:cf:91:25:9c:82:42:f6:7f:2a:95:
5e:a9:3d:51:f9:d7:de:e7:4b:a6:2c:2d:e3:b4:00:20:b7:ee:
8c:87:eb:c7:e2:49:75:87:48:f2:e9:39:1e:c5:d8:5e:bd:46:
4d:9a:22:5c:c2:d3:1b:0a:c3:ab:7b:70:df:cd:11:50:3d:fd:
36:19:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:12 2025 by rpki-client