Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa
File: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (raw, json)
Hash identifier: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=
Subject key identifier: A6:59:4E:08:51:55:20:3C:25:7F:84:27:2A:B8:26:4B:1E:12:B2:68
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01956201309DD3BCECB959603C333238A090
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa
Signing time: Tue 04 Mar 2025 16:33:19 +0000
ROA not before: Tue 04 Mar 2025 16:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47952
IP address blocks: 91.106.216.0/24 maxlen: 24
91.106.217.0/24 maxlen: 24
91.106.218.0/24 maxlen: 24
91.106.219.0/24 maxlen: 24
185.185.235.0/24 maxlen: 24
193.35.204.0/24 maxlen: 24
193.35.205.0/24 maxlen: 24
193.35.206.0/24 maxlen: 24
193.35.207.0/24 maxlen: 24
194.127.116.0/24 maxlen: 24
194.127.117.0/24 maxlen: 24
194.127.118.0/24 maxlen: 24
194.127.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:62:01:30:9d:d3:bc:ec:b9:59:60:3c:33:32:38:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 4 16:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6594e085155203c257f84272ab8264b1e12b268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:6a:fa:c0:19:92:92:80:c9:88:9a:b2:29:
3e:1b:3c:b1:9e:54:c3:91:78:9c:05:ad:f0:48:19:
d4:49:d3:fe:a3:fa:a4:32:ed:3b:13:be:56:86:10:
d3:06:10:11:f2:4d:64:eb:ba:1a:a5:a5:0c:00:67:
74:eb:9c:28:bb:d8:93:c3:e2:a5:a5:9e:5f:80:81:
52:3c:ac:55:ba:96:42:8c:3f:f3:f1:07:1e:53:49:
c7:4b:c2:75:b9:e4:a4:7f:33:4e:09:20:14:c4:7d:
be:e1:23:b9:22:ec:cd:3b:d1:0e:86:84:b4:82:f2:
26:40:b1:be:77:a9:bc:b2:90:29:df:3d:aa:d0:6d:
30:07:ee:9c:2b:97:a9:07:e1:18:87:cf:89:2a:d6:
6c:4b:12:3a:43:58:bb:32:ec:af:a0:f7:46:f9:54:
ba:00:49:0f:52:3e:5f:f2:e4:49:bf:20:48:d4:53:
7d:cb:f7:83:c6:01:74:dd:8a:93:df:97:17:fa:7e:
c9:72:b5:74:26:4c:2c:b1:b7:2a:4f:b6:ca:eb:df:
3d:24:df:52:53:60:ff:bc:0f:44:6e:48:0d:69:21:
64:ac:6a:79:23:c7:7b:3b:8e:a4:e1:f8:b6:95:c9:
ac:73:f4:4f:c5:ea:f9:83:b6:99:61:b1:7f:8b:ec:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:4E:08:51:55:20:3C:25:7F:84:27:2A:B8:26:4B:1E:12:B2:68
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.216.0/22
185.185.235.0/24
193.35.204.0/22
194.127.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:0e:53:24:00:f9:cc:3b:fa:05:d1:05:fc:78:eb:59:22:96:
51:f7:cd:fc:a8:b2:4f:ef:98:7a:38:55:29:53:2a:30:94:dc:
b2:b9:b3:5b:f8:c8:50:2c:a5:bb:a4:b9:87:67:40:e4:e1:37:
78:a4:39:d0:00:f2:b7:82:04:be:ff:0d:61:3a:e0:66:7f:94:
e5:c8:d3:ad:40:6a:8a:70:9c:40:dd:4e:6d:79:2c:72:0a:2b:
75:36:6a:4c:ae:c0:bc:d3:05:49:c5:e2:1a:33:06:9f:f6:fd:
cd:2a:73:83:36:eb:68:cc:f8:ae:1c:84:b3:1f:71:9b:b9:78:
55:40:bd:b7:24:df:a1:60:f0:1c:5e:97:e4:35:8e:a9:fd:bc:
5a:06:73:7e:16:aa:7d:bf:a9:6d:6e:53:1c:70:65:7f:5d:cd:
3d:c9:61:71:29:5f:af:8f:7c:b9:76:d5:e0:83:80:dc:3b:8f:
6c:8d:8b:08:fc:e1:c4:23:13:80:ee:f6:7b:4f:91:a2:b0:11:
c3:b8:1a:88:7a:85:07:c5:f7:22:a4:78:0f:8e:cf:07:51:dc:
15:df:ad:15:b1:72:fc:c6:85:cc:a3:dc:45:50:ea:c2:d9:0b:
db:61:a7:4f:a7:f3:69:2f:0c:10:02:ba:25:e4:52:55:55:6b:
4d:24:ca:00
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZViATCd07zsuVlgPDMyOKCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMzA0MTYzMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjU5NGUwODUxNTUyMDNjMjU3Zjg0MjcyYWI4MjY0YjFlMTJiMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKlq+sAZkpKAyYiasik+GzyxnlTD
kXicBa3wSBnUSdP+o/qkMu07E75WhhDTBhAR8k1k67oapaUMAGd065wou9iTw+Kl
pZ5fgIFSPKxVupZCjD/z8QceU0nHS8J1ueSkfzNOCSAUxH2+4SO5IuzNO9EOhoS0
gvImQLG+d6m8spAp3z2q0G0wB+6cK5epB+EYh8+JKtZsSxI6Q1i7MuyvoPdG+VS6
AEkPUj5f8uRJvyBI1FN9y/eDxgF03YqT35cX+n7JcrV0JkwssbcqT7bK6989JN9S
U2D/vA9EbkgNaSFkrGp5I8d7O46k4fi2lcmsc/RPxer5g7aZYbF/i+z+EQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKZZTghRVSA8JX+EJyq4JkseErJoMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvcGxsT0NGRlZJRHdsZjRRbktyZ21TeDRTc21nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW2rYAwQA
ubnrAwQCwSPMAwQCwn90MA0GCSqGSIb3DQEBCwUAA4IBAQA7DlMkAPnMO/oF0QX8
eOtZIpZR9838qLJP75h6OFUpUyowlNyyubNb+MhQLKW7pLmHZ0Dk4Td4pDnQAPK3
ggS+/w1hOuBmf5TlyNOtQGqKcJxA3U5teSxyCit1NmpMrsC80wVJxeIaMwaf9v3N
KnODNutozPiuHISzH3GbuXhVQL23JN+hYPAcXpfkNY6p/bxaBnN+Fqp9v6ltblMc
cGV/Xc09yWFxKV+vj3y5dtXgg4DcO49sjYsI/OHEIxOA7vZ7T5GisBHDuBqIeoUH
xfcipHgPjs8HUdwV360VsXL8xoXMo9xFUOrC2QvbYadPp/NpLwwQArol5FJVVWtN
JMoA
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:02:23 2025 by rpki-client