Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/PzCzJjGgoPXtrlh76B1G7PxDa5w.roa
File: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (raw, json)
Hash identifier: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=
Subject key identifier: 3F:30:B3:26:31:A0:A0:F5:ED:AE:58:7B:E8:1D:46:EC:FC:43:6B:9C
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019427B5CD88273E8EA3F405E433E63AA2BD
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/PzCzJjGgoPXtrlh76B1G7PxDa5w.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205900
IP address blocks: 185.154.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cd:88:27:3e:8e:a3:f4:05:e4:33:e6:3a:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f30b32631a0a0f5edae587be81d46ecfc436b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:3e:b2:b6:ec:da:bb:77:1f:22:9b:32:58:
1b:13:98:58:c6:8c:d8:ff:ad:8e:5c:d6:3d:68:aa:
d4:98:e2:a3:a1:5e:ee:fb:12:47:b0:6b:b6:57:61:
bc:ac:8a:e7:d6:70:a6:ea:c4:c7:1c:ff:b8:32:33:
1e:e4:ba:55:02:24:63:6b:0a:a6:14:82:6a:56:8f:
eb:f8:c3:14:cd:93:eb:80:df:17:19:e5:7a:da:ea:
9a:d2:83:25:90:6d:9a:61:6c:5f:21:cb:d5:8a:6c:
34:6a:58:34:2e:bf:b8:81:9c:cd:3f:fe:d6:64:a1:
37:0a:8c:25:bd:59:eb:15:50:18:2d:74:64:87:9a:
6b:72:59:fa:15:fb:e0:bb:e5:f1:6e:9e:4f:02:9d:
b6:9a:76:db:de:63:e2:09:fb:26:53:7d:e3:ca:c5:
44:04:87:95:3d:fa:ba:9f:30:81:88:48:15:79:ac:
dc:16:05:e7:3a:a5:8e:51:d9:a9:4e:c7:e5:27:f0:
76:20:76:89:2d:81:c1:a9:ac:09:d2:2c:a6:9b:91:
28:0c:11:4f:d8:7d:97:a6:cb:45:81:42:b1:7e:30:
c0:68:d6:22:ee:6c:5d:37:c0:68:a1:9f:f6:02:d6:
b7:ec:8a:99:ff:81:be:90:15:1f:08:27:b3:c7:fa:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:B3:26:31:A0:A0:F5:ED:AE:58:7B:E8:1D:46:EC:FC:43:6B:9C
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/PzCzJjGgoPXtrlh76B1G7PxDa5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.48.0/24
Signature Algorithm: sha256WithRSAEncryption
33:11:b9:fe:9e:18:ea:25:ce:f2:3c:82:cb:85:4c:5c:08:bf:
c1:c1:0d:03:73:f2:47:9a:8e:b9:02:fa:c8:dd:ba:0f:79:2e:
77:fa:56:4f:51:c0:d7:47:c9:c8:07:a3:7f:8b:b6:af:cd:61:
0e:67:63:bd:7d:8a:83:04:71:fa:9f:88:1e:89:f8:18:8f:10:
9c:60:c0:17:78:c0:3e:f1:c1:c4:85:7b:42:2e:ef:72:e4:48:
ba:b4:58:0b:99:5b:98:44:a0:c4:ab:a0:6d:e9:38:f6:30:e1:
38:53:1f:01:a5:0f:07:6c:e7:28:47:d7:e3:77:19:1d:99:da:
20:90:ea:f1:b9:42:34:0e:13:27:66:e8:37:0c:77:34:57:0e:
ac:18:de:0b:7e:3c:5c:5b:55:39:dc:02:c0:55:df:b6:1d:ad:
12:17:c5:69:b3:f6:c9:80:c0:ce:c7:44:f8:2f:ad:22:0f:55:
5f:9e:cb:d3:21:1f:9c:6f:6b:e6:c0:fb:52:78:f1:39:74:72:
ad:f1:e7:a6:8b:1f:19:68:1b:f3:73:f2:a3:00:12:94:4a:2f:
3c:de:e1:50:cc:09:79:63:52:be:a0:58:6c:99:2c:3a:96:02:
ad:7d:82:36:09:31:f9:df:7c:56:ff:52:c5:45:80:cd:9c:ca:
6f:81:4a:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntc2IJz6Oo/QF5DPmOqK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDRkYWY4NThiN2IwMGI1MWNiYjk0YWZiMjhmMDNlYTIx
ZTQxMWQwHhcNMjUwMTAyMTU1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjMwYjMyNjMxYTBhMGY1ZWRhZTU4N2JlODFkNDZlY2ZjNDM2YjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisg+srbs2rt3HyKbMlgbE5hYxozY
/62OXNY9aKrUmOKjoV7u+xJHsGu2V2G8rIrn1nCm6sTHHP+4MjMe5LpVAiRjawqm
FIJqVo/r+MMUzZPrgN8XGeV62uqa0oMlkG2aYWxfIcvVimw0alg0Lr+4gZzNP/7W
ZKE3CowlvVnrFVAYLXRkh5prcln6Ffvgu+Xxbp5PAp22mnbb3mPiCfsmU33jysVE
BIeVPfq6nzCBiEgVeazcFgXnOqWOUdmpTsflJ/B2IHaJLYHBqawJ0iymm5EoDBFP
2H2XpstFgUKxfjDAaNYi7mxdN8BooZ/2Ata37IqZ/4G+kBUfCCezx/pEiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8wsyYxoKD17a5Ye+gdRuz8Q2ucMB8GA1UdIwQY
MBaAFGkE2vhYt7ALUcu5Svso8D6iHkEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQt
OGFkMWQwZjgwMjE3LzEvUHpDekpqR2dvUFh0cmxoNzZCMUc3UHhEYTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQtOGFkMWQwZjgwMjE3
LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZowMA0G
CSqGSIb3DQEBCwUAA4IBAQAzEbn+nhjqJc7yPILLhUxcCL/BwQ0Dc/JHmo65AvrI
3boPeS53+lZPUcDXR8nIB6N/i7avzWEOZ2O9fYqDBHH6n4geifgYjxCcYMAXeMA+
8cHEhXtCLu9y5Ei6tFgLmVuYRKDEq6Bt6Tj2MOE4Ux8BpQ8HbOcoR9fjdxkdmdog
kOrxuUI0DhMnZug3DHc0Vw6sGN4LfjxcW1U53ALAVd+2Ha0SF8Vps/bJgMDOx0T4
L60iD1VfnsvTIR+cb2vmwPtSePE5dHKt8eemix8ZaBvzc/KjABKUSi883uFQzAl5
Y1K+oFhsmSw6lgKtfYI2CTH533xW/1LFRYDNnMpvgUrA
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:25 2025 by rpki-client