Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/PMaHuXs3WWXL_wMiCfpWp06YsGo.roa
File: PMaHuXs3WWXL_wMiCfpWp06YsGo.roa (raw, json)
Hash identifier: 9cmCaAVftyHuRhOLzikzJqVe0HoECs2yXEC681pBBp4=
Subject key identifier: 3C:C6:87:B9:7B:37:59:65:CB:FF:03:22:09:FA:56:A7:4E:98:B0:6A
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0195DD1BED57D3A2D166B702FF57C4E2F6CB
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/PMaHuXs3WWXL_wMiCfpWp06YsGo.roa
Signing time: Fri 28 Mar 2025 14:15:49 +0000
ROA not before: Fri 28 Mar 2025 14:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 45.86.228.0/24 maxlen: 24
45.86.229.0/24 maxlen: 24
45.86.231.0/24 maxlen: 24
45.129.199.0/24 maxlen: 24
45.143.166.0/23 maxlen: 23
62.106.66.0/24 maxlen: 24
77.72.85.0/24 maxlen: 24
91.211.27.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
91.242.241.0/24 maxlen: 24
146.19.143.0/24 maxlen: 24
146.19.254.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
185.123.53.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
193.200.16.0/24 maxlen: 24
193.200.17.0/24 maxlen: 24
194.26.141.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
212.46.38.0/24 maxlen: 24
213.109.147.0/24 maxlen: 24
213.109.192.0/24 maxlen: 24
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:4::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:9::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:d::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:11::/48 maxlen: 48
2a10:1fc0:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:1b:ed:57:d3:a2:d1:66:b7:02:ff:57:c4:e2:f6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Mar 28 14:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cc687b97b375965cbff032209fa56a74e98b06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:03:e6:33:c7:b4:b9:fe:5a:3e:ff:93:d0:
34:7d:bc:2a:e9:37:e2:83:0b:0c:cf:06:10:f4:82:
8e:59:1e:c6:21:74:f4:22:f1:44:d9:32:f5:27:a9:
00:14:58:ea:4b:45:20:23:2e:c6:45:a8:7f:69:a0:
3f:c1:93:19:0a:84:7a:34:d7:76:a5:0d:39:11:f6:
37:21:17:2b:f6:2f:a3:68:55:09:57:bf:b7:5b:9f:
e3:b1:82:66:ac:7e:12:2f:a0:9d:95:d9:e4:83:6c:
71:f4:7b:c9:22:a3:43:ec:ad:79:0f:04:af:37:76:
93:21:6b:03:32:9a:13:5f:ef:ab:f6:06:2c:8f:08:
30:af:84:98:66:3f:f0:b9:bb:c3:32:7f:9e:74:c5:
0f:c7:cc:38:d4:d6:19:fd:76:f5:4c:52:28:9d:04:
71:f2:ec:a4:3f:97:d8:18:39:80:32:2b:1b:fa:be:
8c:03:c8:84:59:97:f7:1c:6c:48:fb:a4:b6:b9:ca:
21:13:4d:3a:fd:e5:f8:82:f5:b5:6c:8b:f8:2f:09:
9b:80:bb:50:dc:3e:78:a2:ac:37:69:cd:ff:ea:86:
cc:3a:0e:fc:25:2f:26:44:49:3f:08:9d:e1:ab:8b:
d6:c3:4c:b4:bd:b3:3c:56:5f:f1:0b:ec:07:da:86:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C6:87:B9:7B:37:59:65:CB:FF:03:22:09:FA:56:A7:4E:98:B0:6A
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/PMaHuXs3WWXL_wMiCfpWp06YsGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.228.0/23
45.86.231.0/24
45.129.199.0/24
45.143.166.0/23
62.106.66.0/24
77.72.85.0/24
91.211.27.0/24
91.235.234.0/24
91.242.241.0/24
146.19.143.0/24
146.19.254.0/24
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.109.120.0/24
193.200.16.0/23
194.26.141.0/24
194.61.120.0/23
195.54.160.0/24
212.46.38.0/24
213.109.147.0/24
213.109.192.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/47
2a10:1fc0:b::-2a10:1fc0:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6c:0b:0b:97:32:94:b6:23:94:42:7e:b5:f0:53:60:df:07:d9:
4c:f6:29:af:c2:b9:15:9f:73:4a:93:13:8f:5b:97:a4:66:80:
aa:ee:8a:d8:83:3d:ba:33:29:14:d2:d4:27:3c:8e:21:45:cd:
f8:f3:b1:ef:1e:10:f2:6a:70:d4:f2:e6:2d:45:6d:c8:af:0e:
33:89:64:9d:2d:e0:47:44:2c:ce:95:77:ba:b8:92:30:44:ce:
54:03:e6:60:c1:9c:5d:fd:58:64:89:0e:f2:e1:37:14:68:ae:
0e:47:96:b7:44:ff:3c:14:26:d1:94:e8:18:a9:dc:fc:00:fc:
69:c6:22:a7:71:da:4b:31:77:db:fd:55:05:75:79:be:55:5b:
68:3b:c9:84:a9:cc:8d:3e:e5:47:dd:f6:53:d1:1e:5e:cd:40:
dc:bf:8f:c8:2f:38:28:e1:fb:cf:74:51:5a:90:5e:9e:3e:37:
14:0f:22:c2:4c:86:eb:4c:08:b9:7e:3c:82:20:eb:48:b2:91:
70:9b:87:2c:ce:b9:8f:d1:9a:31:df:07:43:70:8f:60:d7:9f:
bb:25:38:c4:b0:60:1b:a3:70:15:f8:ca:1a:ec:0d:cb:cc:e8:
4b:13:d4:d0:bb:7a:a6:44:10:e2:e3:bb:f0:1d:2f:09:cd:74:
25:e5:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:37 2025 by rpki-client