Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/PmXtkWTGLwaPv1gIXbnoxFaOMGQ.roa
File: PmXtkWTGLwaPv1gIXbnoxFaOMGQ.roa (raw, json)
Hash identifier: rkA6WOqJsY8Hu359S1NDBaq42AW9wYo9dKhTAxc/Fto=
Subject key identifier: 3E:65:ED:91:64:C6:2F:06:8F:BF:58:08:5D:B9:E8:C4:56:8E:30:64
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018CC9BC4300DD95E38391C04F2B2D39F763
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/PmXtkWTGLwaPv1gIXbnoxFaOMGQ.roa
Signing time: Tue 02 Jan 2024 10:33:27 +0000
ROA not before: Tue 02 Jan 2024 10:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41718
IP address blocks: 195.216.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:43:00:dd:95:e3:83:91:c0:4f:2b:2d:39:f7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e65ed9164c62f068fbf58085db9e8c4568e3064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:b9:7a:04:32:93:35:43:5a:9c:fb:0c:22:
14:64:cb:2f:4b:b6:72:38:a7:d8:c9:ac:f7:96:f6:
00:9f:c7:b5:a2:47:3e:88:86:7a:d2:fa:93:35:c1:
0f:29:f5:b3:03:bb:ef:e2:f6:1f:85:3e:e1:23:02:
68:64:6a:c2:93:9f:69:51:ae:54:b7:b9:6f:27:d5:
f7:98:74:7d:1d:71:e2:a2:fa:9b:66:50:9d:20:a6:
b8:85:b2:88:ba:9d:25:af:ff:b9:cd:e6:83:8c:c1:
e4:a4:34:fc:6e:22:2d:1d:96:cf:77:c8:79:f5:55:
d9:43:c6:60:ef:a8:95:0c:e3:6c:bb:b8:b8:29:5f:
55:21:8c:26:d2:b3:f1:d0:58:5f:6c:66:6b:d9:e7:
51:bc:d1:f8:62:ba:d8:ec:d6:90:e0:61:85:c2:0d:
8a:b3:d5:bf:bb:27:12:4b:4a:cb:b7:3d:c1:78:b8:
b5:ea:57:4f:88:dd:19:3f:a0:cb:0f:39:b7:5d:30:
cc:33:16:26:ec:fc:9b:fe:65:d6:30:c3:dc:e6:75:
df:ac:28:ea:01:3f:47:90:92:3f:3a:bc:ad:09:c5:
0f:49:b0:be:fc:a9:ac:ba:c2:06:6d:f7:24:64:07:
19:41:62:1e:51:62:8b:6c:73:92:17:4a:32:10:fc:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:ED:91:64:C6:2F:06:8F:BF:58:08:5D:B9:E8:C4:56:8E:30:64
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/PmXtkWTGLwaPv1gIXbnoxFaOMGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.153.0/24
Signature Algorithm: sha256WithRSAEncryption
98:57:ed:2a:81:71:a1:d5:4b:a5:68:aa:42:b6:31:44:c0:05:
8c:9d:39:94:3d:ea:d0:4d:cd:c0:1d:71:ed:aa:d1:23:3f:86:
0e:de:54:04:a9:7d:6d:a7:05:71:81:e9:87:b9:4e:39:51:01:
10:a7:d8:06:d5:15:89:1b:34:5e:d1:aa:4f:53:45:aa:b7:b2:
ed:43:92:e8:6a:93:38:22:24:e3:27:c8:c2:1c:8f:04:ca:cb:
2c:b2:66:eb:b1:43:67:56:8a:a7:26:1b:20:89:f4:7c:37:8a:
c3:c3:62:43:37:39:6c:93:ba:36:72:27:da:c8:7e:cd:e7:f4:
8b:eb:ce:51:f6:f1:a6:41:59:27:6a:c7:21:60:46:65:b2:ce:
55:67:ca:e6:5f:0f:6a:32:7c:9b:f9:d4:07:ea:c7:3a:4a:66:
20:78:45:e8:5d:6b:c3:e4:e3:f6:fe:b5:a7:fa:04:cf:f7:e2:
b2:14:d9:d4:86:fa:db:45:a3:2e:cb:77:b0:75:4a:a8:b2:5c:
1e:b0:5e:bb:fb:ab:ed:b8:6b:51:01:67:49:df:a8:68:db:37:
82:82:c7:c4:00:57:ea:1f:72:1d:ef:f5:ea:93:2a:88:14:22:
59:d6:65:fd:25:8b:9c:16:cf:15:c6:24:a7:0a:ae:43:5b:20:
f9:0f:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:16:08 2025 by rpki-client