Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/pNlFvC-ThONwUDItOe39MOTdmuo.roa
File: pNlFvC-ThONwUDItOe39MOTdmuo.roa (raw, json)
Hash identifier: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=
Subject key identifier: A4:D9:45:BC:2F:93:84:E3:70:50:32:2D:39:ED:FD:30:E4:DD:9A:EA
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 01942747988E5649A76B57E019DC6A8455AC
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/pNlFvC-ThONwUDItOe39MOTdmuo.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50774
IP address blocks: 193.108.142.0/23 maxlen: 23
193.108.142.0/24 maxlen: 24
193.108.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:98:8e:56:49:a7:6b:57:e0:19:dc:6a:84:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4d945bc2f9384e37050322d39edfd30e4dd9aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:48:18:91:ba:19:cc:b1:5d:d6:03:e7:38:
03:6f:9b:47:68:4d:b2:eb:e9:18:0b:65:6d:27:25:
17:03:13:5b:76:0d:06:38:ea:1f:53:9d:47:7a:f8:
54:3a:29:ad:47:7c:5d:a6:95:a1:bb:bb:ec:27:a0:
6d:2a:5c:51:14:6e:9e:16:6c:41:0a:cb:d6:66:72:
e2:7e:09:65:25:46:95:31:33:ab:24:31:d7:c1:80:
19:b5:33:89:a8:5b:b5:f1:3a:40:5f:76:13:6c:31:
4f:77:f4:14:68:7c:34:c9:09:6e:96:21:94:8f:99:
20:06:1a:5a:69:c6:7d:92:8a:dc:ab:3b:a8:ee:a0:
bf:31:56:6e:ba:d2:89:96:bd:70:fa:77:76:e2:66:
c2:4f:04:f9:c1:7e:0f:31:57:5c:36:e5:e9:d7:bd:
dc:47:ac:31:da:dd:08:c7:37:df:99:8a:52:56:16:
f8:a9:b3:a6:43:f6:9a:22:ff:38:d3:e5:3d:3c:6a:
2a:d6:5a:d5:12:d5:1f:c0:db:50:d7:f0:37:4c:8a:
a4:71:7f:63:f4:93:98:f4:f3:b3:b6:47:f6:36:69:
54:f7:bb:ba:ab:67:5b:4e:7e:63:28:bc:02:93:5c:
20:59:97:f9:a9:d5:9f:82:58:f4:dc:58:34:41:20:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:45:BC:2F:93:84:E3:70:50:32:2D:39:ED:FD:30:E4:DD:9A:EA
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/pNlFvC-ThONwUDItOe39MOTdmuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.142.0/23
Signature Algorithm: sha256WithRSAEncryption
82:79:6c:a9:67:ed:c3:12:12:a1:61:d2:f7:00:44:ea:cc:ae:
49:ac:38:3b:db:6e:ea:d7:80:c5:8e:2e:b6:ff:5d:dc:fc:52:
30:21:f1:1b:df:bd:dc:39:7f:46:b7:0c:04:60:98:77:3a:0e:
f2:f2:16:66:e5:72:11:d8:d8:33:c2:29:93:c9:a8:a5:28:8f:
6d:68:b3:5c:52:7b:3a:52:87:15:7b:a4:39:ee:e0:6b:55:8f:
ee:a3:70:ec:c1:ba:59:71:c7:38:29:b9:0e:e3:19:e9:eb:3d:
da:52:bb:1a:a5:29:1e:27:cd:1d:33:25:d6:9e:72:db:c9:6a:
e5:bf:13:cd:62:82:c5:95:0e:bf:1b:3d:2d:ab:9e:27:62:66:
8f:6f:81:0f:31:20:b8:ab:5e:54:5c:a1:38:c3:ac:e1:04:6b:
48:d0:92:f9:f2:72:3d:0e:92:c4:93:fc:6a:d9:6d:8e:03:b0:
ae:9c:4e:13:d9:75:4d:05:68:99:07:70:ec:5c:ef:c3:92:99:
6d:24:5c:e4:93:03:a9:07:d4:41:14:17:9c:e3:58:c0:96:93:
88:62:c9:29:86:88:61:76:ce:20:a6:b7:ce:1a:29:9f:dd:7f:
0f:a0:43:ae:98:fa:8b:10:bf:b3:4f:d8:de:20:90:00:b7:9b:
b2:35:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:28 2025 by rpki-client