Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa
File: PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa (raw, json)
Hash identifier: RTH/rFrhQw74U5knflYk2x+P7ymGF/LwjJP/pIPOpvM=
Subject key identifier: 3C:62:D1:4F:B5:2A:C4:15:6D:E5:91:82:06:C2:61:BF:CA:CF:EA:A4
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 019427B5BAB60BDC579841AD2B8A108C1D16
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44444
IP address blocks: 85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.38.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.48.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.55.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.57.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
86.111.223.0/24 maxlen: 24
157.167.4.0/24 maxlen: 24
157.167.5.0/24 maxlen: 24
157.167.6.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.129.0/24 maxlen: 24
157.167.130.0/24 maxlen: 24
157.167.131.0/24 maxlen: 24
157.167.132.0/24 maxlen: 24
157.167.133.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.158.0/24 maxlen: 24
157.167.159.0/24 maxlen: 24
157.167.160.0/24 maxlen: 24
157.167.161.0/24 maxlen: 24
157.167.162.0/24 maxlen: 24
157.167.163.0/24 maxlen: 24
157.167.192.0/24 maxlen: 24
157.167.200.0/24 maxlen: 24
185.4.96.0/24 maxlen: 24
185.4.97.0/24 maxlen: 24
185.4.98.0/24 maxlen: 24
185.4.99.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ba:b6:0b:dc:57:98:41:ad:2b:8a:10:8c:1d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c62d14fb52ac4156de5918206c261bfcacfeaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:b1:53:2c:42:90:ed:22:83:09:b5:61:52:
6c:2d:0b:e1:ae:ac:ed:a2:cd:bd:a1:55:03:64:d4:
1c:bd:f5:af:eb:d6:ca:7b:94:da:68:c2:40:d2:a1:
d0:79:17:e4:3b:66:40:fa:9b:2a:61:57:66:05:8c:
a9:5d:b2:da:4d:bd:b4:a3:25:b8:ca:a0:7f:81:70:
4c:ef:99:c2:82:71:bb:75:8e:c4:3a:bd:4d:e0:a4:
50:01:dc:fa:91:fd:77:cc:72:25:5f:9a:92:cb:5c:
4e:2c:ca:63:8b:2b:e5:3a:99:7d:40:30:d1:4b:71:
2d:c3:1b:8e:52:55:6c:df:12:3c:7d:2d:a8:0a:97:
83:8b:d0:2b:38:9e:c1:b3:c4:8a:2f:84:06:a9:73:
c0:01:49:1c:c2:d1:1c:51:fb:69:c7:ff:de:79:59:
50:7d:5e:05:2f:5a:5b:11:82:a4:80:1e:f0:ad:88:
a3:3c:91:ef:11:10:c4:68:ad:09:eb:17:a9:53:b3:
eb:f8:fc:00:af:c9:bd:0d:ad:48:0c:96:7a:bf:20:
1a:19:a1:50:28:58:17:4e:f0:42:b7:3b:cc:4c:bf:
ce:3e:07:7e:40:f4:bb:7a:cc:ee:20:b3:55:ab:0d:
a6:4c:60:4a:ee:49:9e:a4:51:5b:e1:2b:ed:3c:1a:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:62:D1:4F:B5:2A:C4:15:6D:E5:91:82:06:C2:61:BF:CA:CF:EA:A4
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0/19
86.111.222.0/23
157.167.4.0-157.167.6.255
157.167.10.0-157.167.133.255
157.167.157.0-157.167.163.255
157.167.192.0/24
157.167.200.0/24
185.4.96.0/22
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
70:f4:3c:0f:75:00:1c:d9:69:d1:1e:e7:6c:ad:0f:1e:17:3d:
9e:e1:be:c7:67:52:9a:02:c5:ac:20:a5:2e:2f:6e:db:f1:d5:
75:a9:5c:70:0e:e1:c3:0c:74:bd:3e:fd:8d:fa:13:98:c1:20:
72:eb:29:28:08:05:d2:65:ce:ba:e7:39:c6:8d:f2:74:09:a5:
dc:db:61:85:8c:c3:36:3c:97:b6:95:cf:4e:8c:77:10:06:84:
72:aa:8a:9c:d9:e6:7c:61:ae:6d:19:3f:50:28:39:f7:60:3b:
2f:47:17:de:ba:76:e3:f3:d2:9f:9d:32:e0:61:bb:ba:65:67:
66:f6:f7:cb:82:c4:ab:49:76:d6:43:06:33:e2:14:3c:be:fa:
6b:05:c0:d3:6b:e7:7b:11:76:ac:56:8b:5b:2a:09:0b:1f:04:
71:b8:a3:76:0b:d4:0d:2b:68:ed:59:7b:94:6b:ff:5f:89:e6:
b4:ef:cb:24:65:93:79:2e:c6:a4:9b:a1:1e:83:aa:11:53:24:
c7:35:62:81:97:e1:50:92:6a:66:70:81:26:48:81:81:26:67:
aa:3f:e3:a1:44:24:0f:93:5f:a3:8e:7f:bf:48:05:c5:31:db:
61:b8:4f:dd:53:d2:2e:57:c4:cf:32:a2:4d:20:bd:23:9b:de:
b2:d8:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:15 2025 by rpki-client