Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/PFvlb69YB0fSZySNLpY1lM_3gss.roa
File: PFvlb69YB0fSZySNLpY1lM_3gss.roa (raw, json)
Hash identifier: wc0eVHn/e8YZMHF52JmGlLRm41wePaapP+De5vtuY0E=
Subject key identifier: 3C:5B:E5:6F:AF:58:07:47:D2:67:24:8D:2E:96:35:94:CF:F7:82:CB
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 019522BC551C4351E6A1ADB3AD8313FB5957
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/PFvlb69YB0fSZySNLpY1lM_3gss.roa
Signing time: Thu 20 Feb 2025 09:42:02 +0000
ROA not before: Thu 20 Feb 2025 09:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214497
IP address blocks: 176.65.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:bc:55:1c:43:51:e6:a1:ad:b3:ad:83:13:fb:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Feb 20 09:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c5be56faf580747d267248d2e963594cff782cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:31:36:b6:da:4d:c3:46:18:6d:6a:14:0a:
9f:63:18:1e:9e:83:6d:c4:05:42:a3:7f:eb:59:ec:
1c:d9:9e:fa:6c:e9:b1:e3:47:64:df:8d:a7:0e:ef:
9c:50:92:15:0f:01:2f:2b:1a:ae:9f:da:08:7e:67:
db:85:7b:6a:4f:f8:de:c2:68:94:fa:d9:3d:4b:c3:
6d:e7:39:4a:ab:f7:6a:dc:49:90:b1:e0:4a:d6:1f:
63:6e:9f:b1:c6:0b:fc:75:dd:90:64:8c:72:af:5c:
a3:96:f0:ee:28:31:0b:73:1a:5c:76:7e:61:88:5c:
29:86:b1:1a:9a:eb:6f:d5:07:26:0d:13:de:cd:ae:
ed:17:3b:ed:c3:ae:13:df:58:99:a7:62:ff:4d:88:
8a:8f:84:30:7e:14:cc:d4:60:28:c4:ac:27:3a:33:
b5:aa:39:88:19:de:19:16:c9:1f:15:7a:63:9e:4e:
b0:c5:79:af:86:91:08:43:08:e1:8f:8a:51:6b:36:
7c:1c:fc:54:93:22:d6:02:4d:49:42:c5:c0:39:53:
96:d0:3e:d5:51:c4:c9:b6:bc:dc:d5:32:05:91:c5:
4b:74:7a:ce:c0:0b:9f:51:64:80:5a:94:da:f0:33:
2d:25:35:8c:c9:bd:be:51:e5:ea:90:2a:e9:e5:0b:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5B:E5:6F:AF:58:07:47:D2:67:24:8D:2E:96:35:94:CF:F7:82:CB
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/PFvlb69YB0fSZySNLpY1lM_3gss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:73:eb:45:a9:6e:db:46:9a:c2:68:a8:4a:02:9d:76:b6:5a:
bf:21:8d:5e:07:29:a8:bc:df:37:30:cd:60:0d:9d:75:93:25:
74:df:94:21:fa:dd:a7:db:42:fc:d0:6d:ab:97:12:52:07:6c:
9e:8a:cb:65:10:ee:e0:b6:ff:d0:92:fe:cb:6e:d1:97:65:0c:
4f:28:69:d8:2e:e1:d0:a4:02:f8:74:f2:9f:e6:13:48:a3:cc:
40:a6:62:b4:8f:9c:32:fb:30:c6:29:92:d2:57:72:99:98:23:
f4:91:0d:43:51:9c:00:f6:21:6e:86:f1:3b:c2:b1:a4:ff:a6:
90:2d:50:0f:07:b5:8d:3c:2f:d8:44:34:93:ac:9b:f3:c5:41:
5e:86:a8:af:e4:02:a8:44:c0:18:14:20:b2:e8:4f:4b:a1:cb:
90:7b:e9:c5:0c:fa:d7:34:e1:e7:2c:dd:3f:6e:cb:49:24:50:
2f:e6:57:60:ee:32:1b:6c:8f:72:f6:21:d8:07:b3:11:e1:e4:
b1:03:9b:24:68:e2:a2:c7:af:26:60:b6:77:16:21:37:29:3a:
55:48:56:fd:02:f6:c3:a2:4b:c6:7a:7b:1e:0b:8f:49:98:54:
03:c4:97:f2:72:6d:a3:cc:b1:85:1d:ca:91:06:8b:b6:2f:3c:
92:e2:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:35 2025 by rpki-client on console.sobornost.net