Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PG5DPUzHhisMDmHNMi2OiyC4Krk.roa
File: PG5DPUzHhisMDmHNMi2OiyC4Krk.roa (raw, json)
Hash identifier: 5vgSE6xpOM3tTVvShPg0nfAqcYxZUDm3VYRogPEs1nM=
Subject key identifier: 3C:6E:43:3D:4C:C7:86:2B:0C:0E:61:CD:32:2D:8E:8B:20:B8:2A:B9
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019497D723F432B1DD906BB21685E8FD07B0
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PG5DPUzHhisMDmHNMi2OiyC4Krk.roa
Signing time: Fri 24 Jan 2025 10:24:06 +0000
ROA not before: Fri 24 Jan 2025 10:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25846
IP address blocks: 185.126.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:d7:23:f4:32:b1:dd:90:6b:b2:16:85:e8:fd:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 24 10:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c6e433d4cc7862b0c0e61cd322d8e8b20b82ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:26:c1:58:e3:75:0e:43:b1:1d:89:20:39:
78:fa:1d:bf:71:c3:a1:4c:c7:f7:6b:e6:3f:f9:f3:
79:0b:cf:dc:06:33:ae:51:86:9f:f6:15:4a:b2:44:
87:9f:8f:0f:a5:3a:04:f9:28:63:39:7a:7a:30:08:
b8:cf:a1:4e:42:a3:f2:66:f6:10:5f:d5:ab:79:e7:
e9:91:e0:bf:1d:cc:46:5d:f7:6f:35:76:ef:ef:23:
6f:49:61:6c:d1:1a:66:a1:2f:f9:f3:0c:25:d3:24:
14:c6:8d:eb:c6:24:7b:53:8f:80:ed:84:ea:00:67:
17:d8:75:20:85:ba:d0:9a:60:7b:62:0a:8b:1d:f8:
ff:24:62:e8:e8:e0:34:dc:e2:b5:12:13:88:6c:d8:
1a:c1:f2:52:10:39:04:ef:8a:d5:24:a1:52:07:88:
51:d4:0a:b8:ef:64:1e:ad:76:de:59:16:1a:84:2a:
8b:fc:4e:70:d0:84:66:c4:f7:ad:e3:39:52:7e:38:
82:9a:c2:56:19:64:46:14:6b:c6:ce:e2:7e:08:d0:
a1:c4:eb:85:1e:53:5c:91:75:df:d4:c7:ca:da:d2:
2c:bf:a9:b6:fa:3c:e6:e0:0a:c1:91:e9:c8:87:b7:
93:59:ce:39:fb:16:51:3b:ea:c5:05:71:46:b4:7a:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:43:3D:4C:C7:86:2B:0C:0E:61:CD:32:2D:8E:8B:20:B8:2A:B9
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PG5DPUzHhisMDmHNMi2OiyC4Krk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:02:ad:e2:ae:c4:ab:65:9d:33:03:5c:b4:4c:c7:01:e5:fb:
64:12:69:6a:01:4b:6c:44:0d:cf:ac:9e:1b:0d:7c:82:11:62:
f6:6b:aa:0a:c0:c1:92:fa:34:54:66:c7:53:d7:2e:64:7e:ae:
23:34:f8:16:41:b3:5c:52:eb:13:14:d9:73:54:0d:be:a6:ce:
61:8f:f7:3e:d8:a0:0d:db:4b:03:bc:0e:0d:d7:42:25:62:cc:
17:6d:be:d6:ea:29:69:ea:09:77:2b:91:7b:38:f4:96:26:6b:
fc:f4:6d:08:a4:1f:0c:71:9c:a0:2c:15:4e:e9:bb:f1:0c:b6:
a8:76:83:2b:f0:ec:70:df:50:e5:1a:c5:84:44:ea:00:ca:b5:
d9:9a:7e:f4:a2:7c:64:b4:00:a1:f8:43:19:0c:27:56:53:4c:
37:ab:29:0b:0f:83:a1:94:92:86:e9:07:64:7e:9c:5d:5c:be:
cb:00:4a:86:9b:5f:e7:d0:46:0d:2a:56:f7:d3:e1:7b:ae:c6:
fa:26:22:c6:2b:2a:17:92:ce:86:91:92:07:e8:5e:56:28:93:
16:be:3e:67:db:00:b7:a2:53:85:a4:d4:33:08:a2:91:79:54:
b1:59:03:31:65:f7:04:fa:8d:0a:35:c8:21:0c:f4:66:8f:4d:
58:8f:ff:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSX1yP0MrHdkGuyFoXo/QewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjUwMTI0MTAyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzZlNDMzZDRjYzc4NjJiMGMwZTYxY2QzMjJkOGU4YjIwYjgyYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vcmwVjjdQ5DsR2JIDl4+h2/ccOh
TMf3a+Y/+fN5C8/cBjOuUYaf9hVKskSHn48PpToE+ShjOXp6MAi4z6FOQqPyZvYQ
X9WreefpkeC/HcxGXfdvNXbv7yNvSWFs0RpmoS/58wwl0yQUxo3rxiR7U4+A7YTq
AGcX2HUghbrQmmB7YgqLHfj/JGLo6OA03OK1EhOIbNgawfJSEDkE74rVJKFSB4hR
1Aq472QerXbeWRYahCqL/E5w0IRmxPet4zlSfjiCmsJWGWRGFGvGzuJ+CNChxOuF
HlNckXXf1MfK2tIsv6m2+jzm4ArBkenIh7eTWc45+xZRO+rFBXFGtHpkZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDxuQz1Mx4YrDA5hzTItjosguCq5MB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvUEc1RFBVekhoaXNNRG1ITk1pMk9peUM0S3JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6eMA0G
CSqGSIb3DQEBCwUAA4IBAQBfAq3irsSrZZ0zA1y0TMcB5ftkEmlqAUtsRA3PrJ4b
DXyCEWL2a6oKwMGS+jRUZsdT1y5kfq4jNPgWQbNcUusTFNlzVA2+ps5hj/c+2KAN
20sDvA4N10IlYswXbb7W6ilp6gl3K5F7OPSWJmv89G0IpB8McZygLBVO6bvxDLao
doMr8Oxw31DlGsWEROoAyrXZmn70onxktACh+EMZDCdWU0w3qykLD4OhlJKG6Qdk
fpxdXL7LAEqGm1/n0EYNKlb30+F7rsb6JiLGKyoXks6GkZIH6F5WKJMWvj5n2wC3
olOFpNQzCKKReVSxWQMxZfcE+o0KNcghDPRmj01Yj//u
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:54 2025 by rpki-client