Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/PAAVgOudpAsUIfqhJcqm8oy8JDE.roa
File: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (raw, json)
Hash identifier: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=
Subject key identifier: 3C:00:15:80:EB:9D:A4:0B:14:21:FA:A1:25:CA:A6:F2:8C:BC:24:31
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 0195C94AFD65B0C5E16040F5094C1596671E
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/PAAVgOudpAsUIfqhJcqm8oy8JDE.roa
Signing time: Mon 24 Mar 2025 17:54:49 +0000
ROA not before: Mon 24 Mar 2025 17:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47716
IP address blocks: 185.164.60.0/22 maxlen: 22
193.186.162.0/24 maxlen: 24
194.0.104.0/22 maxlen: 24
2a0a:c400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:4a:fd:65:b0:c5:e1:60:40:f5:09:4c:15:96:67:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Mar 24 17:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c001580eb9da40b1421faa125caa6f28cbc2431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:e4:cc:5f:df:b9:48:d4:07:18:46:6d:5e:
88:87:f9:79:81:db:1e:86:60:06:64:1f:9d:81:e3:
60:0a:75:b8:81:30:fc:f5:a4:25:d1:8d:c8:a0:c3:
86:88:7e:ce:7b:5d:69:e6:b9:e5:0b:ea:cf:a6:64:
fd:02:4c:2c:13:2b:ef:e8:21:80:cb:9c:7f:b6:6e:
d3:32:f2:ad:97:7d:e7:13:a6:d4:b1:a3:13:2e:7d:
b3:b1:c0:ee:f3:0e:4a:83:ef:e4:78:90:72:60:fa:
c9:49:0f:8f:9f:1b:31:89:5c:17:f0:9d:7e:1e:e7:
06:81:32:3d:36:cf:46:d6:7f:2d:5c:5c:f1:50:61:
cd:38:a6:62:22:64:4b:6d:ef:10:5f:66:18:0f:91:
8a:76:ff:df:07:bf:40:aa:d8:87:f6:ef:3d:59:2b:
b8:23:eb:66:d8:a1:34:72:bd:35:29:80:0e:09:88:
08:cf:49:3b:db:6a:28:ff:48:b2:34:1e:6a:b6:82:
98:67:ec:fa:3b:d6:ca:e3:56:80:c7:f0:34:fc:f2:
32:27:20:d5:ea:d5:1b:4e:b8:48:16:8d:a0:39:66:
c7:cd:91:24:e0:a7:f7:80:4b:ea:bf:18:a6:35:5b:
e8:b2:65:3c:c0:71:04:86:67:f6:63:a0:d7:84:d2:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:15:80:EB:9D:A4:0B:14:21:FA:A1:25:CA:A6:F2:8C:BC:24:31
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/PAAVgOudpAsUIfqhJcqm8oy8JDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.60.0/22
193.186.162.0/24
194.0.104.0/22
IPv6:
2a0a:c400::/29
Signature Algorithm: sha256WithRSAEncryption
2e:64:3e:a6:de:89:14:f7:70:b0:7d:39:ec:49:92:ce:a9:0c:
24:1a:88:53:3e:99:9c:86:21:2d:3c:22:d6:6f:df:50:ae:6b:
fe:05:fb:33:5f:a6:4a:ca:cd:5b:82:c9:10:be:10:ba:88:54:
78:44:73:fd:ae:55:fa:b0:be:75:52:54:5a:42:df:df:fa:69:
e1:5b:6d:89:e4:6e:4d:92:5b:f2:2c:18:b1:a5:88:b6:40:9c:
88:fa:b8:54:c0:4f:cd:27:e1:b4:d0:2e:fa:64:48:9f:a2:2e:
82:5d:0f:38:62:02:d5:7a:30:f7:f1:a3:6f:25:ec:ce:70:eb:
67:26:e1:16:8b:f2:18:20:f6:83:62:54:a5:cc:9c:46:55:ce:
dc:43:94:9b:0d:aa:c9:a0:70:13:47:fa:34:a5:64:ba:7b:85:
12:09:26:ec:08:1f:c5:8c:71:a7:19:83:3f:e6:e2:b0:05:69:
f6:4d:a1:2a:02:f3:b7:65:d4:9c:3a:90:58:92:d2:ad:87:dc:
ab:d3:84:e8:68:df:30:ec:9f:8a:1e:63:ec:63:80:73:f9:43:
09:8b:ca:2f:d0:40:8f:42:31:3b:9f:f1:28:c6:03:30:01:32:
18:8d:35:14:92:53:98:8f:de:bc:fc:94:a1:b6:21:e7:76:37:
17:27:a4:cf
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZXJSv1lsMXhYED1CUwVlmceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNTkxMTQzM2JhMjA2ZjQ1MGFjOWJkMDY1Yzg2Yzk2NjA4
NDAxYzEwHhcNMjUwMzI0MTc1NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzAwMTU4MGViOWRhNDBiMTQyMWZhYTEyNWNhYTZmMjhjYmMyNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCvkzF/fuUjUBxhGbV6Ih/l5gdse
hmAGZB+dgeNgCnW4gTD89aQl0Y3IoMOGiH7Oe11p5rnlC+rPpmT9AkwsEyvv6CGA
y5x/tm7TMvKtl33nE6bUsaMTLn2zscDu8w5Kg+/keJByYPrJSQ+PnxsxiVwX8J1+
HucGgTI9Ns9G1n8tXFzxUGHNOKZiImRLbe8QX2YYD5GKdv/fB79AqtiH9u89WSu4
I+tm2KE0cr01KYAOCYgIz0k722oo/0iyNB5qtoKYZ+z6O9bK41aAx/A0/PIyJyDV
6tUbTrhIFo2gOWbHzZEk4Kf3gEvqvximNVvosmU8wHEEhmf2Y6DXhNJKAQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDwAFYDrnaQLFCH6oSXKpvKMvCQxMB8GA1UdIwQY
MBaAFMxZEUM7ogb0UKyb0GXIbJZghAHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekZrUlF6dWlCdlJRckp2UVpjaHNsbUNFQWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjBmZGQtNzZhZS00MWYxLTk4YzAt
MmIyNzUwNDM3MTlmLzEvUEFBVmdPdWRwQXNVSWZxaEpjcW04b3k4SkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNjBmZGQtNzZhZS00MWYxLTk4YzAtMmIyNzUwNDM3MTlm
LzEvekZrUlF6dWlCdlJRckp2UVpjaHNsbUNFQWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuaQ8AwQA
wbqiAwQCwgBoMA0EAgACMAcDBQMqCsQAMA0GCSqGSIb3DQEBCwUAA4IBAQAuZD6m
3okU93CwfTnsSZLOqQwkGohTPpmchiEtPCLWb99Qrmv+BfszX6ZKys1bgskQvhC6
iFR4RHP9rlX6sL51UlRaQt/f+mnhW22J5G5NklvyLBixpYi2QJyI+rhUwE/NJ+G0
0C76ZEifoi6CXQ84YgLVejD38aNvJezOcOtnJuEWi/IYIPaDYlSlzJxGVc7cQ5Sb
DarJoHATR/o0pWS6e4USCSbsCB/FjHGnGYM/5uKwBWn2TaEqAvO3ZdScOpBYktKt
h9yr04ToaN8w7J+KHmPsY4Bz+UMJi8ov0ECPQjE7n/EoxgMwATIYjTUUklOYj968
/JShtiHndjcXJ6TP
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:09 2025 by rpki-client