Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/pl66MpODxtxRoZhLJAW-nkoD_Sc.roa
File: pl66MpODxtxRoZhLJAW-nkoD_Sc.roa (raw, json)
Hash identifier: sJLlhjSfYMWQixCxG3V31R8LPRit/+p4sujJjRjMO3E=
Subject key identifier: A6:5E:BA:32:93:83:C6:DC:51:A1:98:4B:24:05:BE:9E:4A:03:FD:27
Certificate issuer: /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial: 0194228D81759F0A245CDF1321C3075C1291
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/pl66MpODxtxRoZhLJAW-nkoD_Sc.roa
Signing time: Wed 01 Jan 2025 15:48:06 +0000
ROA not before: Wed 01 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 185.11.121.0/24 maxlen: 24
185.11.122.0/24 maxlen: 24
185.11.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:81:75:9f:0a:24:5c:df:13:21:c3:07:5c:12:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a65eba329383c6dc51a1984b2405be9e4a03fd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:d3:89:c1:70:ee:cd:05:d7:a8:5d:bf:91:
2e:28:d7:d0:c6:96:03:bb:a0:04:66:d7:71:6d:f3:
11:de:83:ce:86:40:02:1c:2b:55:85:d8:da:f5:8a:
ea:12:8e:4a:6b:22:17:a4:a7:b0:a5:18:05:30:1f:
a8:f5:f8:7e:75:77:06:72:f5:eb:13:a9:07:6b:40:
dd:04:fa:5a:f3:94:49:00:8d:17:35:f4:15:47:96:
0e:5c:df:46:cc:03:5b:c0:4c:6c:11:6f:2f:f1:d5:
3c:d0:d1:72:38:f7:dd:6f:23:0f:b9:b9:75:de:91:
3b:44:6f:75:e8:32:0f:18:c9:2c:1b:47:c7:a3:a0:
86:ca:17:a3:3b:c0:4c:c7:34:5f:4b:6e:cc:f8:1e:
df:5d:28:e8:e8:19:2e:65:1d:d0:11:c1:db:ed:27:
30:aa:23:e4:72:b5:fd:c3:3e:fb:18:0a:47:c6:01:
24:92:45:80:53:e3:0a:a4:26:44:8f:e5:96:fc:81:
7c:e9:65:6e:7a:7d:49:30:46:df:f8:4a:3e:a9:0d:
33:f6:dd:cf:b5:c1:4a:1e:51:dc:01:e7:b7:29:ca:
63:09:95:e1:13:d1:75:41:24:7a:98:7c:13:d2:9b:
36:5b:9c:53:6c:67:f9:ad:4f:9a:e9:26:5f:8a:66:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5E:BA:32:93:83:C6:DC:51:A1:98:4B:24:05:BE:9E:4A:03:FD:27
X509v3 Authority Key Identifier:
keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/pl66MpODxtxRoZhLJAW-nkoD_Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.121.0-185.11.123.255
Signature Algorithm: sha256WithRSAEncryption
60:d4:ca:73:68:f4:43:5e:67:d2:a6:26:f4:a2:22:31:b1:bb:
8e:08:18:28:4d:9a:78:be:53:5c:eb:b8:dc:f5:59:9d:59:02:
95:09:85:e6:b8:36:04:80:1a:6a:da:3e:9e:71:16:15:94:c0:
0b:21:35:91:11:be:26:eb:1b:37:15:6d:e4:ca:b6:7f:c1:03:
ff:17:0f:26:61:02:fa:0b:08:69:0b:16:b2:3c:47:f0:1e:dd:
08:92:f8:7d:ce:f0:72:c3:fa:1f:ef:07:e4:f2:a5:bf:cf:df:
a1:c4:83:13:74:cc:28:62:81:9f:d8:67:8d:83:bb:1f:75:9a:
cd:f5:1b:26:ab:81:bc:58:dc:ad:be:2b:32:80:db:21:98:71:
ad:c6:0e:63:2f:33:28:4a:8e:e4:41:09:3f:18:03:ed:f3:d3:
2d:16:f2:70:60:ab:e8:9c:78:3d:e2:04:41:55:47:9b:08:72:
e6:a4:95:ef:87:9e:cc:87:4b:86:85:be:b9:1b:da:2b:0d:8a:
6d:44:9e:1c:19:5c:80:18:74:2c:b7:14:bb:2d:2a:48:68:0e:
30:e0:f0:1c:77:a1:d2:41:c6:c1:cd:6b:64:f5:74:35:16:fa:
58:7b:63:81:80:9f:57:41:32:c7:b1:6e:d0:f3:14:cb:75:1f:
74:b3:58:19
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQijYF1nwokXN8TIcMHXBKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YTE0ZjI0MzA0ODc1ZmYxNTRmZTJiMmIyY2I2ZWJhMGFm
OTQ1MjMwHhcNMjUwMTAxMTU0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjVlYmEzMjkzODNjNmRjNTFhMTk4NGIyNDA1YmU5ZTRhMDNmZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx37TicFw7s0F16hdv5EuKNfQxpYD
u6AEZtdxbfMR3oPOhkACHCtVhdja9YrqEo5KayIXpKewpRgFMB+o9fh+dXcGcvXr
E6kHa0DdBPpa85RJAI0XNfQVR5YOXN9GzANbwExsEW8v8dU80NFyOPfdbyMPubl1
3pE7RG916DIPGMksG0fHo6CGyhejO8BMxzRfS27M+B7fXSjo6BkuZR3QEcHb7Scw
qiPkcrX9wz77GApHxgEkkkWAU+MKpCZEj+WW/IF86WVuen1JMEbf+Eo+qQ0z9t3P
tcFKHlHcAee3KcpjCZXhE9F1QSR6mHwT0ps2W5xTbGf5rU+a6SZfimZskQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKZeujKTg8bcUaGYSyQFvp5KA/0nMB8GA1UdIwQY
MBaAFGehTyQwSHX/FU/isrLLbroK+UUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjZGUEpEQklkZjhWVC1LeXNzdHV1Z3I1UlNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iNDBmMjYtNGFmNC00MzlkLWEzZDAt
NWMzMDczNGFjYjM4LzEvcGw2Nk1wT0R4dHhSb1poTEpBVy1ua29EX1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iNDBmMjYtNGFmNC00MzlkLWEzZDAtNWMzMDczNGFjYjM4
LzEvWjZGUEpEQklkZjhWVC1LeXNzdHV1Z3I1UlNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5C3kD
BAK5C3gwDQYJKoZIhvcNAQELBQADggEBAGDUynNo9ENeZ9KmJvSiIjGxu44IGChN
mni+U1zruNz1WZ1ZApUJhea4NgSAGmraPp5xFhWUwAshNZERvibrGzcVbeTKtn/B
A/8XDyZhAvoLCGkLFrI8R/Ae3QiS+H3O8HLD+h/vB+Typb/P36HEgxN0zChigZ/Y
Z42Dux91ms31GyargbxY3K2+KzKA2yGYca3GDmMvMyhKjuRBCT8YA+3z0y0W8nBg
q+iceD3iBEFVR5sIcuakle+HnsyHS4aFvrkb2isNim1EnhwZXIAYdCy3FLstKkho
DjDg8Bx3odJBxsHNa2T1dDUW+lh7Y4GAn1dBMsexbtDzFMt1H3SzWBk=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:08 2025 by rpki-client