Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/PSL2OSxsoutF8sVX_uvIaiWUApI.roa
File: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (raw, json)
Hash identifier: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=
Subject key identifier: 3D:22:F6:39:2C:6C:A2:EB:45:F2:C5:57:FE:EB:C8:6A:25:94:02:92
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019423D755C1B45BE074DBE4AFA56E03850C
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/PSL2OSxsoutF8sVX_uvIaiWUApI.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35829
IP address blocks: 193.151.172.0/22 maxlen: 24
206.190.220.0/22 maxlen: 24
2a0d:e8c0::/29 maxlen: 31
2a0d:e8c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:55:c1:b4:5b:e0:74:db:e4:af:a5:6e:03:85:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d22f6392c6ca2eb45f2c557feebc86a25940292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:af:7f:1b:13:22:8a:92:0b:63:ac:35:58:
a4:bd:45:0f:46:5f:75:7a:7c:d5:1c:cd:01:2f:68:
4f:45:a7:98:54:78:20:0b:ee:69:5f:c0:b9:33:5b:
07:16:49:f5:c6:04:77:9e:4e:43:ae:9e:9c:43:d8:
b2:8b:1b:19:49:fe:f2:de:57:ac:1b:1b:b6:38:3c:
0b:f5:a2:23:fa:f3:61:f7:0e:82:ea:3f:3a:01:d1:
89:36:33:98:84:55:74:7d:cc:96:d8:a8:b7:94:37:
ea:0b:cd:9b:6f:cc:e3:43:e1:10:e9:41:07:65:f7:
44:3c:d0:d6:b4:87:a6:5b:aa:7e:ce:9f:20:29:8b:
8b:c4:a2:c0:9b:2c:d0:3a:ac:df:83:a7:f9:2a:6d:
f6:1c:c4:da:5f:88:7d:b4:f9:92:5f:e6:ff:99:7e:
56:35:e5:f1:f1:1a:04:26:f8:69:4c:d2:9b:61:14:
80:bd:d8:44:f3:72:df:5d:a3:3e:a7:74:00:b9:d3:
61:2d:47:22:81:68:a1:4a:e9:52:5a:48:80:08:f8:
ce:10:a1:72:37:5f:71:f2:32:75:d2:f1:fd:2d:8e:
eb:c9:82:1a:bb:27:cb:bb:65:b2:72:dd:95:73:3b:
77:d5:37:13:a2:d2:28:af:50:a3:98:e1:3b:76:6b:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:F6:39:2C:6C:A2:EB:45:F2:C5:57:FE:EB:C8:6A:25:94:02:92
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/PSL2OSxsoutF8sVX_uvIaiWUApI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.172.0/22
206.190.220.0/22
IPv6:
2a0d:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:ca:5f:87:11:01:9c:2c:9d:38:a8:d1:62:6b:9c:e4:9d:68:
38:4f:bd:f7:e7:2d:1a:90:a2:a1:3b:26:04:14:38:33:36:a3:
a2:41:70:72:18:32:e5:06:a7:ce:c2:38:fb:bc:2a:e9:3a:90:
e8:80:73:b5:70:3e:bb:d9:55:23:54:ce:11:0a:a7:0e:9d:e5:
4c:e6:af:f8:3a:ed:ee:87:cb:83:a5:39:b8:01:d1:7d:fb:94:
ec:ed:c7:02:84:3c:13:d0:dd:d9:5e:b0:58:21:a6:8f:6b:de:
29:93:6c:80:ae:d6:b3:3c:07:b3:2a:af:fa:8e:e4:01:36:00:
14:e4:ea:af:d5:93:79:2f:42:b3:44:68:83:dd:75:dc:b7:b9:
7a:52:8d:f1:7c:ec:b8:63:ad:05:14:fe:47:77:3b:68:42:cc:
77:ac:12:06:37:8c:3e:92:36:26:92:50:6f:22:0f:4b:6c:98:
29:48:be:96:fa:10:51:3d:27:22:bd:9c:7e:a3:27:1c:32:1d:
14:9d:d5:82:3f:2d:db:dc:e3:06:7b:6c:4c:90:1f:b4:9e:03:
b0:33:5e:87:9d:7a:f3:90:44:22:5d:27:74:23:9d:a0:e7:57:
9a:a7:63:b2:4f:55:6a:08:dd:bc:2e:7c:2e:48:06:4e:c9:99:
9f:38:03:79
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQj11XBtFvgdNvkr6VuA4UMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3
YjQ0MzgwHhcNMjUwMTAxMjE0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDIyZjYzOTJjNmNhMmViNDVmMmM1NTdmZWViYzg2YTI1OTQwMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrCvfxsTIoqSC2OsNVikvUUPRl91
enzVHM0BL2hPRaeYVHggC+5pX8C5M1sHFkn1xgR3nk5Drp6cQ9iyixsZSf7y3les
Gxu2ODwL9aIj+vNh9w6C6j86AdGJNjOYhFV0fcyW2Ki3lDfqC82bb8zjQ+EQ6UEH
ZfdEPNDWtIemW6p+zp8gKYuLxKLAmyzQOqzfg6f5Km32HMTaX4h9tPmSX+b/mX5W
NeXx8RoEJvhpTNKbYRSAvdhE83LfXaM+p3QAudNhLUcigWihSulSWkiACPjOEKFy
N19x8jJ10vH9LY7ryYIauyfLu2Wyct2Vczt31TcTotIor1CjmOE7dmskHwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFD0i9jksbKLrRfLFV/7ryGollAKSMB8GA1UdIwQY
MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct
ZjQ0MTY2YmIyZGIwLzEvUFNMMk9TeHNvdXRGOHNWWF91dklhaVdVQXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw
LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCwZesAwQC
zr7cMA0EAgACMAcDBQMqDejAMA0GCSqGSIb3DQEBCwUAA4IBAQBeyl+HEQGcLJ04
qNFia5zknWg4T7335y0akKKhOyYEFDgzNqOiQXByGDLlBqfOwjj7vCrpOpDogHO1
cD672VUjVM4RCqcOneVM5q/4Ou3uh8uDpTm4AdF9+5Ts7ccChDwT0N3ZXrBYIaaP
a94pk2yArtazPAezKq/6juQBNgAU5Oqv1ZN5L0KzRGiD3XXct7l6Uo3xfOy4Y60F
FP5HdztoQsx3rBIGN4w+kjYmklBvIg9LbJgpSL6W+hBRPScivZx+oyccMh0UndWC
Py3b3OMGe2xMkB+0ngOwM16HnXrzkEQiXSd0I52g51eap2OyT1VqCN28LnwuSAZO
yZmfOAN5
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:08:35 2025 by rpki-client