Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PlUStG2dr-GCSpL7gscMHD_NiRU.roa
File: PlUStG2dr-GCSpL7gscMHD_NiRU.roa (raw, json)
Hash identifier: Xr44wMwOqwG7MtWBaqPuk4EAx9c1tW0jolNXx6ppy58=
Subject key identifier: 3E:55:12:B4:6D:9D:AF:E1:82:4A:92:FB:82:C7:0C:1C:3F:CD:89:15
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195DDB79313FF9FD34BEC30A6A4504059E0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PlUStG2dr-GCSpL7gscMHD_NiRU.roa
Signing time: Fri 28 Mar 2025 17:05:50 +0000
ROA not before: Fri 28 Mar 2025 17:05:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 82.153.50.0/24 maxlen: 24
213.130.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:b7:93:13:ff:9f:d3:4b:ec:30:a6:a4:50:40:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 28 17:05:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e5512b46d9dafe1824a92fb82c70c1c3fcd8915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:91:35:29:56:1e:59:30:01:2d:0d:0f:b9:
ba:24:52:39:b6:18:0b:3c:c8:33:86:aa:2b:26:9c:
db:0c:ad:7d:23:2d:18:ef:b9:0d:aa:cb:e5:8a:2a:
3b:38:23:dc:6b:44:01:b1:c9:05:72:05:e9:ff:04:
c5:19:21:df:8e:65:f7:ef:f7:79:f2:55:58:3f:6a:
de:ce:e7:47:3e:01:7e:15:07:58:20:7a:12:79:93:
40:ef:71:10:c4:cc:f5:9a:f4:f6:48:da:ed:46:40:
ea:d5:8a:7b:4f:b8:49:c0:74:3e:e3:09:fa:e5:18:
45:ee:8b:22:e4:e0:c2:c0:58:83:7e:1f:86:01:93:
85:72:82:a4:ea:fe:07:96:dc:ee:10:e6:69:a4:d1:
f7:27:8f:d2:e3:10:a2:ee:0e:f2:c0:4d:a8:d2:e3:
44:79:ab:04:f3:14:a0:2e:41:eb:9b:c6:26:19:c4:
06:eb:00:e1:d9:ed:cc:76:b6:0f:a0:5c:21:16:22:
d1:c7:1e:9e:00:0c:1e:7e:c8:d3:07:15:bc:8c:23:
d0:24:99:9a:e7:69:ec:29:a3:93:9f:ea:10:bd:02:
ce:e4:bd:eb:62:f4:6a:97:ea:40:75:b1:3b:46:89:
58:df:ce:db:a0:65:da:27:77:e3:de:23:ae:ac:3f:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:12:B4:6D:9D:AF:E1:82:4A:92:FB:82:C7:0C:1C:3F:CD:89:15
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PlUStG2dr-GCSpL7gscMHD_NiRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.50.0/24
213.130.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:69:74:30:3b:b5:7d:96:3f:27:2a:b7:fd:c6:fa:6b:46:04:
fe:03:fb:4f:5a:b9:8e:81:90:5a:72:37:d8:9f:6a:c0:06:8d:
26:03:92:4d:44:0e:f1:51:c6:79:f5:46:cf:a0:cf:a2:49:ce:
c3:5a:59:69:79:62:16:db:0b:90:fa:7c:a5:74:53:c0:f6:ee:
48:78:cf:84:9d:b0:7e:0e:7e:03:51:36:f1:a5:ec:78:34:20:
51:0c:2f:f6:35:00:07:5f:23:18:03:1a:9e:91:9c:50:cc:8c:
3f:64:81:99:d3:67:96:68:ce:f6:9b:70:67:93:44:32:bf:73:
43:4f:9d:da:75:cb:b3:99:0f:57:32:df:4e:52:2f:0f:da:cd:
37:8e:c5:4f:a2:25:29:65:05:85:a9:62:1d:3d:81:f3:64:58:
38:fc:be:1c:80:57:4a:ae:4c:11:22:4e:0e:19:86:03:c7:4d:
54:21:dd:66:d0:0d:30:e7:f5:d3:55:15:26:e0:6e:df:cf:66:
72:ca:2c:0e:28:db:24:03:30:96:1c:b7:4d:26:13:05:80:9e:
5c:8a:b1:28:e8:4e:38:75:b7:f3:19:c3:fd:2b:04:9c:03:11:
73:40:14:3f:83:dc:31:e7:ff:84:39:9c:7c:d1:41:a6:12:1c:
26:04:c5:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXdt5MT/5/TS+wwpqRQQFngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMzI4MTcwNTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTU1MTJiNDZkOWRhZmUxODI0YTkyZmI4MmM3MGMxYzNmY2Q4OTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJqRNSlWHlkwAS0ND7m6JFI5thgL
PMgzhqorJpzbDK19Iy0Y77kNqsvliio7OCPca0QBsckFcgXp/wTFGSHfjmX37/d5
8lVYP2rezudHPgF+FQdYIHoSeZNA73EQxMz1mvT2SNrtRkDq1Yp7T7hJwHQ+4wn6
5RhF7osi5ODCwFiDfh+GAZOFcoKk6v4HltzuEOZppNH3J4/S4xCi7g7ywE2o0uNE
easE8xSgLkHrm8YmGcQG6wDh2e3MdrYPoFwhFiLRxx6eAAwefsjTBxW8jCPQJJma
52nsKaOTn+oQvQLO5L3rYvRql+pAdbE7RolY387boGXaJ3fj3iOurD8alwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD5VErRtna/hgkqS+4LHDBw/zYkVMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUGxVU3RHMmRyLUdDU3BMN2dzY01IRF9OaVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpkyAwQA
1YKHMA0GCSqGSIb3DQEBCwUAA4IBAQAeaXQwO7V9lj8nKrf9xvprRgT+A/tPWrmO
gZBacjfYn2rABo0mA5JNRA7xUcZ59UbPoM+iSc7DWllpeWIW2wuQ+nyldFPA9u5I
eM+EnbB+Dn4DUTbxpex4NCBRDC/2NQAHXyMYAxqekZxQzIw/ZIGZ02eWaM72m3Bn
k0Qyv3NDT53adcuzmQ9XMt9OUi8P2s03jsVPoiUpZQWFqWIdPYHzZFg4/L4cgFdK
rkwRIk4OGYYDx01UId1m0A0w5/XTVRUm4G7fz2ZyyiwOKNskAzCWHLdNJhMFgJ5c
irEo6E44dbfzGcP9KwScAxFzQBQ/g9wx5/+EOZx80UGmEhwmBMVz
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:37:01 2025 by rpki-client