Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/PJCVggPHwfYZfUTkO4fM94mUYRs.roa
File: PJCVggPHwfYZfUTkO4fM94mUYRs.roa (raw, json)
Hash identifier: JUr0yDMZpEcMvoLjutR9W+fwsH7zwJ90ptv+1rjtz4Q=
Subject key identifier: 3C:90:95:82:03:C7:C1:F6:19:7D:44:E4:3B:87:CC:F7:89:94:61:1B
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0188F843DC822F5F75C28EB3B7E95C3420CA
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/PJCVggPHwfYZfUTkO4fM94mUYRs.roa
Signing time: Mon 26 Jun 2023 15:12:56 +0000
ROA not before: Mon 26 Jun 2023 15:12:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62229
IP address blocks: 178.22.72.0/21 maxlen: 24
45.157.245.0/24 maxlen: 24
45.157.244.0/24 maxlen: 24
45.157.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:43:dc:82:2f:5f:75:c2:8e:b3:b7:e9:5c:34:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jun 26 15:12:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c90958203c7c1f6197d44e43b87ccf78994611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:72:27:30:19:ab:82:ba:90:0f:6a:42:95:
e5:36:c2:83:4b:b2:95:67:5f:2b:d5:9b:b2:dc:b6:
ba:b1:07:88:b2:12:99:4b:5a:a3:cb:42:8f:c0:39:
a2:68:4a:37:cf:8f:a5:17:08:b2:d6:18:a8:0a:c9:
14:c9:19:c3:16:9f:fc:d4:7c:51:af:25:4d:f4:18:
80:fb:a7:c9:0f:5c:b1:19:e3:04:69:6e:f7:7a:61:
f3:3d:4c:3c:c2:95:5e:87:6d:eb:6f:4c:c0:1c:c6:
69:c2:62:a2:26:08:9a:92:31:24:1d:32:f2:d5:ee:
57:3c:77:31:d6:04:0b:e7:f3:fb:89:45:97:43:44:
b0:c9:47:f1:54:ee:17:0f:4d:dc:c1:d8:41:7c:89:
f1:ed:ed:a6:c5:06:6b:a8:48:cc:2c:d5:4f:e3:79:
c9:a0:ba:50:df:60:de:f9:5e:80:48:44:eb:8e:be:
fd:48:13:14:b1:5f:eb:e8:0d:4a:5d:51:57:bf:8b:
12:61:4f:32:1f:ee:c3:80:56:db:27:e1:f5:08:8f:
1c:05:51:62:8d:58:8b:bd:17:06:ae:d7:be:d0:85:
a1:c6:73:bf:08:cf:cd:b0:1c:2e:13:96:4b:2d:6e:
55:09:e4:29:83:75:53:a7:d7:ce:2d:7a:35:80:15:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:95:82:03:C7:C1:F6:19:7D:44:E4:3B:87:CC:F7:89:94:61:1B
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/PJCVggPHwfYZfUTkO4fM94mUYRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0-45.157.246.255
178.22.72.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:84:0f:f8:0e:ba:04:32:e7:fc:61:b2:e7:0a:df:07:2c:2d:
87:c3:99:6d:85:24:0c:ca:ef:7e:b9:8f:6a:a1:22:32:fb:b2:
02:63:d1:84:96:a9:96:d3:aa:24:c0:f7:f1:84:88:b0:b6:c3:
0f:e8:32:98:d4:84:e3:1a:19:96:46:78:c9:3b:0e:72:b3:49:
56:cf:b4:48:a2:2c:01:c0:35:ce:ff:8b:11:53:e3:5f:02:02:
d7:fd:a3:d5:22:92:e0:71:ff:b2:96:c7:9a:c8:c2:7e:e4:74:
65:a4:9d:f8:39:33:f5:b5:71:43:1c:67:26:54:e9:d6:33:fc:
b0:e7:36:0a:f0:ee:ec:bc:07:4c:4b:30:ea:34:b1:19:9d:d6:
be:48:1a:33:ee:52:7e:1c:47:d7:b2:38:f8:73:2b:f1:24:27:
c9:6b:9f:88:14:ac:cd:c7:53:d7:0e:4c:97:9f:58:97:3f:cd:
08:d8:f7:88:cf:02:af:f5:29:d6:12:e3:ff:7b:f4:30:37:bd:
73:68:3c:ce:9f:b4:47:54:43:7c:dd:10:5f:50:b2:61:69:5d:
ae:a0:8a:52:12:de:ce:9f:42:0a:af:f2:a7:6c:df:b5:73:3a:
95:52:8a:6f:f8:13:00:bd:96:8a:c3:6e:76:55:8c:b6:8e:1e:
6f:67:fd:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:50:32 2025 by rpki-client