Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PgYgGFElQ5q1n0LGZNZBRta_Qd4.roa
File: PgYgGFElQ5q1n0LGZNZBRta_Qd4.roa (raw, json)
Hash identifier: 69CNmBY++9WnYAnXQ2BFsg1ecbH6Dliq6fHkpb2sLS4=
Subject key identifier: 3E:06:20:18:51:25:43:9A:B5:9F:42:C6:64:D6:41:46:D6:BF:41:DE
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 0194228E33222EA5743A0ADDBAD2F9736C8D
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PgYgGFElQ5q1n0LGZNZBRta_Qd4.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50675
IP address blocks: 195.200.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:33:22:2e:a5:74:3a:0a:dd:ba:d2:f9:73:6c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e0620185125439ab59f42c664d64146d6bf41de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:a2:72:5f:76:92:f9:e1:67:94:5d:f8:65:
9c:ba:98:67:7b:65:78:cd:13:63:ac:4a:4a:8f:9e:
f3:fe:32:06:04:2f:5c:8f:6f:61:df:43:9e:64:62:
0d:89:e5:99:9d:00:7b:ae:12:07:84:b9:08:77:60:
7e:54:98:16:58:50:3e:57:46:f1:b2:93:3e:10:e7:
28:49:d6:ea:ac:9e:72:cb:f5:61:8d:72:aa:78:45:
d6:88:61:84:f5:f0:40:21:14:88:0d:40:d5:10:45:
c9:51:61:af:3d:e5:e4:53:6d:c5:fe:0d:3e:3c:ff:
22:30:3c:0b:19:a3:5f:c3:e4:eb:26:8d:6d:9a:e9:
d7:7f:30:12:79:77:4a:90:25:d3:9f:95:50:e6:c0:
b3:4b:bc:af:62:3a:df:62:d7:33:67:77:8c:80:fe:
c0:79:11:24:9c:33:73:8b:e1:7d:50:da:12:6b:2d:
3f:0d:c4:42:86:9e:74:ab:45:f1:7f:f4:1a:af:f7:
45:81:19:c1:5d:33:7c:a6:c6:d2:a3:4a:08:e2:0d:
20:10:7a:ac:f4:10:01:6b:55:17:b8:62:84:67:54:
d0:e1:65:f0:71:e7:e1:79:8b:f3:d6:bb:ea:c5:f6:
e1:94:62:fd:ab:a5:22:20:2f:bb:0f:23:4d:4a:46:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:06:20:18:51:25:43:9A:B5:9F:42:C6:64:D6:41:46:D6:BF:41:DE
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PgYgGFElQ5q1n0LGZNZBRta_Qd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.24.0/23
Signature Algorithm: sha256WithRSAEncryption
63:56:e1:24:6b:10:21:cc:7d:3a:99:f3:93:bb:d7:f7:d4:9b:
2d:8e:a6:d2:cb:d6:c0:fd:87:f4:0f:0b:c6:3d:d3:20:3c:85:
08:11:74:c9:1f:73:dd:d9:79:3e:0b:7a:1a:7b:bb:81:13:6a:
e2:9f:84:2b:ee:49:00:4f:69:2d:26:90:98:b3:01:95:b8:2b:
0c:9d:7d:7d:36:89:9d:20:dd:23:cb:52:2d:48:7f:a8:31:65:
93:44:59:ad:2f:88:fa:1b:8c:f2:e3:56:ed:2b:64:8b:cc:a6:
3c:02:ad:b8:29:67:b4:f9:52:30:c2:60:43:50:44:64:bd:70:
bd:d0:91:c8:67:80:82:2f:26:e5:e5:cc:a4:2f:cf:c4:74:fa:
57:84:89:6b:40:e1:1a:c9:35:45:d6:c7:4b:5a:ff:2b:93:3c:
0a:38:0d:75:0f:94:7c:c1:5a:50:55:2f:a4:75:ff:0a:74:ce:
63:be:6a:bb:e3:da:fb:ed:c0:92:8a:9d:9f:d9:f9:fe:13:24:
10:d1:82:49:87:00:e9:1d:b6:d9:40:5c:1e:7d:0e:b9:df:a1:
81:07:70:65:30:7a:7c:f5:5c:5a:6e:a7:8f:e3:e8:2e:32:c3:
78:4d:2b:bb:bb:5e:7f:88:26:e2:6c:6b:bb:c4:a3:63:cd:5f:
e3:6a:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net