Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/PBUDbe-1MDz1g3Ius_F53GCRPGA.roa
File: PBUDbe-1MDz1g3Ius_F53GCRPGA.roa (raw, json)
Hash identifier: dFkmaX4EOxUZSsdYPb0M70E7s4dtSgsYh60lLyTQn4Q=
Subject key identifier: 3C:15:03:6D:EF:B5:30:3C:F5:83:72:2E:B3:F1:79:DC:60:91:3C:60
Certificate issuer: /CN=19a9eb9004c6f603ef2a9506cd51eaa6ee8bce7b
Certificate serial: 01856F0B6C45EC45277D38043E37B50E1891
Authority key identifier: 19:A9:EB:90:04:C6:F6:03:EF:2A:95:06:CD:51:EA:A6:EE:8B:CE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GanrkATG9gPvKpUGzVHqpu6Lzns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/PBUDbe-1MDz1g3Ius_F53GCRPGA.roa
Signing time: Sun 01 Jan 2023 20:34:57 +0000
ROA not before: Sun 01 Jan 2023 20:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29243
IP address blocks: 185.168.212.0/22 maxlen: 23
109.163.208.0/21 maxlen: 22
80.83.0.0/20 maxlen: 24
2001:1430::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6c:45:ec:45:27:7d:38:04:3e:37:b5:0e:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a9eb9004c6f603ef2a9506cd51eaa6ee8bce7b
Validity
Not Before: Jan 1 20:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c15036defb5303cf583722eb3f179dc60913c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:f1:41:22:3e:a3:5f:36:c0:3c:6a:4a:7f:
87:5d:e6:1b:80:0a:ae:9c:b0:26:ce:83:3e:ce:b4:
2f:95:12:72:8c:82:83:35:e3:b2:af:84:0d:84:f0:
ef:9e:3f:86:de:c8:3d:2c:dd:4f:6a:db:1a:56:06:
5a:de:0a:0e:8a:ad:64:bf:8d:9c:d2:33:e5:58:26:
44:63:b7:93:01:0f:db:45:4a:46:db:eb:59:7a:3c:
5d:8f:5e:bc:d3:12:6f:c5:41:a2:b9:e2:14:b3:36:
ac:87:be:ce:5e:d9:15:fc:7f:62:d7:fb:9d:24:f2:
83:0a:41:41:5d:c2:6d:56:12:21:aa:4e:86:cd:dd:
e7:fc:1c:9c:ca:91:42:fd:56:fb:8a:63:cb:44:2c:
56:72:77:57:99:de:18:5a:b8:d4:f4:70:4d:47:e9:
46:25:a1:f2:72:29:a7:ce:ba:e4:cf:d6:e5:4a:40:
a7:24:ff:47:1e:1a:ab:67:ce:51:ca:b2:58:0e:4f:
ae:3f:b8:82:d5:02:7c:05:d4:12:07:6d:ca:23:61:
05:e0:9b:55:02:f0:e2:12:82:12:69:fd:54:46:09:
83:9d:ea:34:d2:d7:37:8f:af:d1:6e:40:2f:90:8d:
f1:3b:67:23:52:75:de:23:af:31:d4:09:40:48:61:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:03:6D:EF:B5:30:3C:F5:83:72:2E:B3:F1:79:DC:60:91:3C:60
X509v3 Authority Key Identifier:
keyid:19:A9:EB:90:04:C6:F6:03:EF:2A:95:06:CD:51:EA:A6:EE:8B:CE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GanrkATG9gPvKpUGzVHqpu6Lzns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/PBUDbe-1MDz1g3Ius_F53GCRPGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/GanrkATG9gPvKpUGzVHqpu6Lzns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.0.0/20
109.163.208.0/21
185.168.212.0/22
IPv6:
2001:1430::/32
Signature Algorithm: sha256WithRSAEncryption
5c:07:0f:32:8d:69:02:df:2a:0a:4d:18:be:43:02:ce:be:cb:
d1:06:30:0d:59:98:ac:00:d7:7d:b6:db:63:b2:ab:a3:5c:a8:
c4:81:1f:b7:03:c9:de:a7:1c:2e:8f:68:bc:77:89:03:36:a6:
a6:5b:0a:dd:18:b2:03:8f:e5:31:96:b3:75:e6:cb:4d:b1:bf:
b7:92:99:04:42:5a:e2:05:fa:78:5f:ae:ee:8e:25:c2:25:9a:
f6:20:dc:a1:56:2a:08:71:c4:52:82:7d:9f:9a:de:b5:36:f8:
49:83:8a:a4:bd:77:b8:f1:d3:1b:ed:3b:75:8e:06:dc:3c:35:
0e:0c:55:38:77:36:5a:7f:fd:0d:45:f6:0f:fe:45:bb:fb:36:
43:eb:6e:6f:ba:e6:c6:41:d7:9a:9a:d7:c8:e3:44:d3:33:41:
2b:43:36:12:bd:6e:9a:08:14:90:15:5a:e6:5f:30:d2:60:27:
2d:cb:bd:74:f9:08:f9:7c:4d:e8:dc:85:2c:3b:6a:5a:d7:63:
59:17:70:ac:fb:9d:70:d7:6b:da:b5:9b:75:87:b9:19:87:3b:
79:69:84:1a:85:c4:02:ec:22:9c:72:ec:2f:9d:6f:79:e7:18:
f8:cf:26:de:86:23:1f:64:28:84:3b:76:ba:1e:15:80:ab:ea:
80:ae:da:ed
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVvC2xF7EUnfTgEPje1DhiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YTllYjkwMDRjNmY2MDNlZjJhOTUwNmNkNTFlYWE2ZWU4
YmNlN2IwHhcNMjMwMTAxMjAzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzE1MDM2ZGVmYjUzMDNjZjU4MzcyMmViM2YxNzlkYzYwOTEzYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh/xQSI+o182wDxqSn+HXeYbgAqu
nLAmzoM+zrQvlRJyjIKDNeOyr4QNhPDvnj+G3sg9LN1PatsaVgZa3goOiq1kv42c
0jPlWCZEY7eTAQ/bRUpG2+tZejxdj1680xJvxUGiueIUszash77OXtkV/H9i1/ud
JPKDCkFBXcJtVhIhqk6Gzd3n/BycypFC/Vb7imPLRCxWcndXmd4YWrjU9HBNR+lG
JaHycimnzrrkz9blSkCnJP9HHhqrZ85RyrJYDk+uP7iC1QJ8BdQSB23KI2EF4JtV
AvDiEoISaf1URgmDneo00tc3j6/RbkAvkI3xO2cjUnXeI68x1AlASGEF1wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDwVA23vtTA89YNyLrPxedxgkTxgMB8GA1UdIwQY
MBaAFBmp65AExvYD7yqVBs1R6qbui857MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2FucmtBVEc5Z1B2S3BVR3pWSHFwdTZMem5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MmI3NmUtZGE2Zi00MTgzLWEwMDMt
YzBhMWVjNjAzMzMzLzEvUEJVRGJlLTFNRHoxZzNJdXNfRjUzR0NSUEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MmI3NmUtZGE2Zi00MTgzLWEwMDMtYzBhMWVjNjAzMzMz
LzEvR2FucmtBVEc5Z1B2S3BVR3pWSHFwdTZMem5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUFMAAwQD
baPQAwQCuajUMA0EAgACMAcDBQAgARQwMA0GCSqGSIb3DQEBCwUAA4IBAQBcBw8y
jWkC3yoKTRi+QwLOvsvRBjANWZisANd9tttjsqujXKjEgR+3A8nepxwuj2i8d4kD
NqamWwrdGLIDj+UxlrN15stNsb+3kpkEQlriBfp4X67ujiXCJZr2INyhVioIccRS
gn2fmt61NvhJg4qkvXe48dMb7Tt1jgbcPDUODFU4dzZaf/0NRfYP/kW7+zZD625v
uubGQdeamtfI40TTM0ErQzYSvW6aCBSQFVrmXzDSYCcty710+Qj5fE3o3IUsO2pa
12NZF3Cs+51w12vatZt1h7kZhzt5aYQahcQC7CKccuwvnW955xj4zybehiMfZCiE
O3a6HhWAq+qArtrt
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:01 2025 by rpki-client