Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/PT68lLdfHWq61L0p7mbOXLRwHhw.roa
File: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (raw, json)
Hash identifier: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=
Subject key identifier: 3D:3E:BC:94:B7:5F:1D:6A:BA:D4:BD:29:EE:66:CE:5C:B4:70:1E:1C
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019420D63EB0AB61C8A125ACF1ED3A94F716
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/PT68lLdfHWq61L0p7mbOXLRwHhw.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 193.24.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3e:b0:ab:61:c8:a1:25:ac:f1:ed:3a:94:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3ebc94b75f1d6abad4bd29ee66ce5cb4701e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:02:8d:d8:07:3c:bb:86:c6:a6:60:d6:62:73:
f5:ca:5b:03:53:31:95:d6:05:15:fa:50:d5:51:6b:
c4:df:6c:0a:21:cc:84:88:59:74:0b:d6:a3:13:4a:
e0:47:d1:10:bb:85:7f:e4:a5:8c:d5:a3:1c:4b:d3:
02:f7:95:94:c7:bb:8f:ae:78:88:02:1e:3e:da:f8:
ac:b0:20:c7:7b:85:b5:12:1c:f0:82:d9:a4:e1:1a:
09:f3:b7:46:95:94:b8:ac:f3:37:49:57:96:5f:9c:
11:77:b6:ce:d0:97:29:57:8c:f8:a7:bd:24:ff:e7:
39:d5:83:0e:0c:9a:51:86:42:55:44:51:52:c4:e9:
58:a8:6c:b8:23:88:48:0a:67:85:d1:a1:fb:cd:75:
14:02:c9:e3:e6:d1:c3:32:a2:4b:72:47:a6:88:7b:
1e:d3:62:34:e2:30:62:1d:5e:23:ae:af:59:d2:6b:
f6:e7:67:49:5a:1f:49:c9:4e:72:fd:bc:15:18:fe:
c0:aa:36:a8:3f:fd:d4:d4:d6:15:06:bf:28:02:ad:
f5:f9:bc:d6:6e:26:74:a2:4e:94:e8:61:14:43:70:
b9:a6:c7:5d:86:ca:ca:28:ed:81:45:0a:d4:39:9b:
3c:1f:40:93:a0:7b:0e:e7:81:5c:93:c3:b9:3e:00:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:BC:94:B7:5F:1D:6A:BA:D4:BD:29:EE:66:CE:5C:B4:70:1E:1C
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/PT68lLdfHWq61L0p7mbOXLRwHhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.120.0/24
Signature Algorithm: sha256WithRSAEncryption
61:85:4c:5b:4c:77:32:56:85:5f:81:e6:49:13:ab:7e:df:70:
aa:c5:13:74:f7:37:3f:e6:00:d5:61:c0:74:bd:8c:a1:f9:0f:
c7:a7:67:3c:21:61:f2:c7:70:51:61:1c:a8:0c:d8:79:9a:ed:
b4:3d:81:49:87:6b:67:99:f9:d9:ec:25:59:98:1a:af:d1:34:
8e:fd:78:c5:6a:e5:10:2a:f6:60:3a:39:79:87:47:a1:44:7c:
3e:4d:48:34:19:ca:2c:19:58:64:d1:74:f3:01:e7:56:8a:6c:
47:fc:4b:cb:e2:61:4c:fb:e0:62:cc:77:0f:88:72:c3:85:9b:
3e:55:a7:a6:27:c8:aa:c6:36:1d:fd:84:20:e0:d4:c1:c4:71:
b8:e9:68:46:d9:68:b1:c1:a5:e5:ac:4c:c8:f3:8c:ff:05:91:
39:bb:00:2a:db:9e:16:47:5b:39:49:6a:52:20:08:72:19:03:
91:f6:36:2f:17:22:26:95:b2:b0:ed:7c:89:9b:7c:1f:0b:c9:
1d:69:0c:4f:30:cb:e2:2d:ac:13:3e:e2:9c:59:21:38:44:ff:
ca:fc:72:38:b2:f5:49:79:e1:25:ea:b7:14:6b:f1:6c:d8:98:
4b:b8:9b:8c:5e:9b:8f:bf:35:4c:24:18:02:0f:17:9c:b8:3e:
72:ae:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:18:17 2025 by rpki-client