Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/PQxMmPt5KFsRR9472S0lkkXYnSI.roa
File: PQxMmPt5KFsRR9472S0lkkXYnSI.roa (raw, json)
Hash identifier: E7Q2yK02+ooBzmaRRw+UO7vOYjJ0QAMuNsAS9PbrM/k=
Subject key identifier: 3D:0C:4C:98:FB:79:28:5B:11:47:DE:3B:D9:2D:25:92:45:D8:9D:22
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 019180BB94D3313436C5EA562B812F6189D9
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/PQxMmPt5KFsRR9472S0lkkXYnSI.roa
Signing time: Fri 23 Aug 2024 19:34:22 +0000
ROA not before: Fri 23 Aug 2024 19:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200191
IP address blocks: 185.21.184.0/24 maxlen: 24
185.21.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:80:bb:94:d3:31:34:36:c5:ea:56:2b:81:2f:61:89:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Aug 23 19:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d0c4c98fb79285b1147de3bd92d259245d89d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:0e:fa:f9:2b:d7:65:8b:e1:33:35:0c:99:
2c:fc:0a:54:e4:d7:af:6c:c3:fc:fe:e5:61:d0:a9:
92:cb:94:40:ff:4a:95:31:96:3c:17:f1:da:c2:45:
fc:81:96:17:92:20:d7:8d:aa:da:34:17:89:21:fb:
5b:1f:51:98:fa:5d:87:1f:51:6d:4b:55:f2:2a:0d:
b7:16:86:48:a9:74:fd:7b:da:32:72:01:ff:78:cb:
99:ad:50:74:87:c5:72:66:27:49:0b:7d:79:1e:0f:
e3:78:1a:cd:05:f2:62:55:3f:56:b9:dc:23:ba:02:
e9:87:35:65:b5:49:a5:92:1d:db:63:29:18:f5:dd:
38:20:c0:b2:c7:2f:fe:dd:3a:58:f7:81:e0:5a:52:
1e:ae:69:79:d5:38:9f:a1:3c:a4:8d:3c:d1:a6:22:
2b:b6:68:40:8a:87:3b:52:8c:0e:48:25:d0:eb:ec:
4d:77:67:cb:1c:90:84:2b:04:c6:62:5b:93:4f:af:
1f:12:c0:96:ee:e0:20:24:b1:96:d6:73:10:f7:f8:
c7:1d:a9:63:90:b1:32:c2:a3:cb:da:61:59:5b:9f:
4c:4f:27:f3:62:d3:43:c0:7a:8b:4f:4c:7c:73:e5:
50:6e:c4:e9:e4:94:56:06:17:a4:07:dc:cd:df:d3:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:4C:98:FB:79:28:5B:11:47:DE:3B:D9:2D:25:92:45:D8:9D:22
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/PQxMmPt5KFsRR9472S0lkkXYnSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.184.0/23
Signature Algorithm: sha256WithRSAEncryption
90:0d:45:f4:81:a4:f4:2b:e9:7a:6e:f0:fd:63:6c:98:4d:a5:
c9:6c:02:7f:b7:2c:22:06:3e:2c:cf:06:9a:d8:ce:bf:fd:49:
4c:e2:13:0f:92:a3:82:d8:8b:1a:2d:82:4f:3a:03:ad:33:b8:
23:5c:b4:9b:67:1f:2d:10:e7:a9:5c:1a:b0:09:06:09:9c:0a:
3c:69:c0:68:39:50:bd:43:72:12:b7:30:52:95:ef:5a:5b:f4:
a6:98:84:7e:9f:78:a4:99:f9:62:63:fc:77:ba:0b:bf:ed:4a:
37:f2:a1:3c:a3:58:40:dd:eb:3c:b5:e2:6f:6c:c5:30:26:8c:
be:14:98:67:3d:3e:14:f0:14:1e:8f:98:69:21:ad:a3:72:c5:
df:83:3b:40:50:ea:b7:9f:5f:90:24:c7:0a:e9:55:be:37:58:
f3:66:94:df:ad:78:cd:3c:2e:68:d1:da:f8:6d:da:8d:c9:19:
55:1f:55:6a:51:32:7d:cb:2d:b0:78:9c:b9:42:b0:12:06:1b:
ba:dd:39:d6:92:19:04:f5:97:d6:37:7a:73:4e:65:da:a3:85:
79:0a:c4:e0:b5:be:0b:b6:47:70:77:3b:3c:1b:91:6e:c8:1c:
43:84:d5:ab:bd:90:b5:76:63:2a:96:9b:cc:51:0f:2b:12:62:
bf:d3:50:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGAu5TTMTQ2xepWK4EvYYnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz
NjczMTAwHhcNMjQwODIzMTkzNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDBjNGM5OGZiNzkyODViMTE0N2RlM2JkOTJkMjU5MjQ1ZDg5ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkskO+vkr12WL4TM1DJks/ApU5Nev
bMP8/uVh0KmSy5RA/0qVMZY8F/HawkX8gZYXkiDXjaraNBeJIftbH1GY+l2HH1Ft
S1XyKg23FoZIqXT9e9oycgH/eMuZrVB0h8VyZidJC315Hg/jeBrNBfJiVT9Wudwj
ugLphzVltUmlkh3bYykY9d04IMCyxy/+3TpY94HgWlIerml51TifoTykjTzRpiIr
tmhAioc7UowOSCXQ6+xNd2fLHJCEKwTGYluTT68fEsCW7uAgJLGW1nMQ9/jHHalj
kLEywqPL2mFZW59MTyfzYtNDwHqLT0x8c+VQbsTp5JRWBhekB9zN39MBJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0MTJj7eShbEUfeO9ktJZJF2J0iMB8GA1UdIwQY
MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut
MmQ2ZWVmOTA1NjA3LzEvUFF4TW1QdDVLRnNSUjk0NzJTMGxra1hZblNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3
LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuRW4MA0G
CSqGSIb3DQEBCwUAA4IBAQCQDUX0gaT0K+l6bvD9Y2yYTaXJbAJ/tywiBj4szwaa
2M6//UlM4hMPkqOC2IsaLYJPOgOtM7gjXLSbZx8tEOepXBqwCQYJnAo8acBoOVC9
Q3IStzBSle9aW/SmmIR+n3ikmfliY/x3ugu/7Uo38qE8o1hA3es8teJvbMUwJoy+
FJhnPT4U8BQej5hpIa2jcsXfgztAUOq3n1+QJMcK6VW+N1jzZpTfrXjNPC5o0dr4
bdqNyRlVH1VqUTJ9yy2weJy5QrASBhu63TnWkhkE9ZfWN3pzTmXao4V5CsTgtb4L
tkdwdzs8G5FuyBxDhNWrvZC1dmMqlpvMUQ8rEmK/01D0
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:53 2025 by rpki-client