Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/PRg-_kxTF7oUe8ZrjoQb4boTXFU.roa
File: PRg-_kxTF7oUe8ZrjoQb4boTXFU.roa (raw, json)
Hash identifier: mtjfEwCWruxHD2sIshzbq/wUNj+kKlxXy8W4cUMK5no=
Subject key identifier: 3D:18:3E:FE:4C:53:17:BA:14:7B:C6:6B:8E:84:1B:E1:BA:13:5C:55
Certificate issuer: /CN=123972ae729848b3995cef1a029b1c66da777e5f
Certificate serial: 02D3D9BF
Authority key identifier: 12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/PRg-_kxTF7oUe8ZrjoQb4boTXFU.roa
Signing time: Sat 01 Jan 2022 11:56:47 +0000
ROA not before: Sat 01 Jan 2022 11:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56851
IP address blocks: 176.105.232.0/24 maxlen: 24
185.91.72.0/24 maxlen: 24
185.91.75.0/24 maxlen: 24
185.91.73.0/24 maxlen: 24
185.91.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47438271 (0x2d3d9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123972ae729848b3995cef1a029b1c66da777e5f
Validity
Not Before: Jan 1 11:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d183efe4c5317ba147bc66b8e841be1ba135c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:37:12:18:12:07:47:99:42:b7:6c:57:35:
b5:21:e3:a1:af:b5:8f:91:1c:20:da:b4:ba:aa:d6:
0b:52:5f:f2:5c:91:06:aa:98:c7:5a:d1:d5:27:f2:
45:c0:de:10:df:c1:71:78:d3:34:2f:b1:9c:89:26:
68:53:39:0c:64:ce:94:41:bf:79:55:6e:9e:a6:59:
ab:10:99:99:5c:26:fd:e9:e1:4b:31:1c:66:7b:03:
a8:ab:df:23:f7:f9:28:62:11:9c:e3:b9:07:ab:82:
94:0b:4c:b2:3e:9c:55:02:75:c6:80:2a:9f:e3:c2:
5f:f5:4f:d7:29:c3:78:af:36:2c:00:48:eb:17:8f:
7a:3b:0a:52:c8:91:95:2c:f6:fb:b0:bb:96:b5:c9:
89:98:0e:e9:c7:a0:b7:7a:67:f4:4a:d6:ac:39:4d:
09:f8:85:1b:08:30:59:32:9f:78:a4:7d:f2:a5:df:
d9:42:1e:93:de:f4:be:22:53:76:ed:27:b4:a9:14:
2d:4c:75:f0:49:5c:f6:21:f0:5f:77:4a:f6:0d:f6:
ab:92:f5:7e:31:6a:77:dd:a5:9d:50:32:15:31:3c:
71:f5:3b:3a:a0:78:66:3e:b6:c1:1b:04:42:21:1c:
db:e5:55:9c:0d:4f:aa:d7:96:9c:de:91:a1:eb:b5:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:3E:FE:4C:53:17:BA:14:7B:C6:6B:8E:84:1B:E1:BA:13:5C:55
X509v3 Authority Key Identifier:
keyid:12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/PRg-_kxTF7oUe8ZrjoQb4boTXFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/EjlyrnKYSLOZXO8aApscZtp3fl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.232.0/24
185.91.72.0/22
Signature Algorithm: sha256WithRSAEncryption
09:d7:39:04:fa:91:cb:41:6e:41:60:a2:ce:ea:aa:3c:9f:c3:
d8:6f:0e:69:67:86:37:e2:18:27:61:ab:b9:43:11:5f:cf:e7:
28:75:e7:cb:92:85:54:76:07:65:d4:1a:ec:03:1d:17:1d:24:
9e:85:f6:7f:20:16:09:23:cd:63:52:0d:93:a3:0f:bf:8f:6d:
bf:fa:7e:a8:46:ce:7d:0d:40:dc:31:84:ae:74:7c:12:9d:19:
16:87:66:96:27:02:f7:41:b7:7f:09:c3:7c:50:07:46:78:f5:
f3:6e:84:8f:de:6b:06:78:26:5d:f6:bd:61:46:66:7e:67:79:
8c:9b:4c:b6:a6:76:e4:a2:4a:5b:2f:12:3b:84:66:28:04:0d:
9c:a9:9a:2c:10:11:cb:29:ac:1c:83:7f:84:5d:05:2a:73:66:
c6:15:12:d0:5b:c3:c7:da:81:e5:d5:97:0d:c6:d2:9f:c8:c2:
82:99:bc:b5:dc:c3:8e:12:cf:cb:f7:48:a5:9c:e1:41:34:5f:
0d:73:3e:9d:2c:33:5a:05:6b:3f:cb:ac:be:45:63:37:24:89:
49:09:25:c4:b2:47:fe:9d:4a:57:66:f9:3a:c6:f3:59:46:d3:
c8:47:49:66:0c:08:40:5b:e1:2b:82:ee:6f:62:e8:b1:3a:5f:
6c:74:d9:c3
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAtPZvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjM5NzJhZTcyOTg0OGIzOTk1Y2VmMWEwMjliMWM2NmRhNzc3ZTVmMB4XDTIyMDEw
MTExNTY0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2QxODNlZmU0YzUz
MTdiYTE0N2JjNjZiOGU4NDFiZTFiYTEzNWM1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK10NxIYEgdHmUK3bFc1tSHjoa+1j5EcINq0uqrWC1Jf8lyR
BqqYx1rR1SfyRcDeEN/BcXjTNC+xnIkmaFM5DGTOlEG/eVVunqZZqxCZmVwm/enh
SzEcZnsDqKvfI/f5KGIRnOO5B6uClAtMsj6cVQJ1xoAqn+PCX/VP1ynDeK82LABI
6xePejsKUsiRlSz2+7C7lrXJiZgO6cegt3pn9ErWrDlNCfiFGwgwWTKfeKR98qXf
2UIek970viJTdu0ntKkULUx18Elc9iHwX3dK9g32q5L1fjFqd92lnVAyFTE8cfU7
OqB4Zj62wRsEQiEc2+VVnA1PqteWnN6Roeu19ZsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ9GD7+TFMXuhR7xmuOhBvhuhNcVTAfBgNVHSMEGDAWgBQSOXKucphIs5lc
7xoCmxxm2nd+XzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VqbHlybktZU0xPWlhPOGFBcHNjWnRwM2ZsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvZmJkNzc3LWIxYTItNDg0ZS1iZjIxLTYxNjk3YzM5ZDk3Yi8x
L1BSZy1fa3hURjdvVWU4WnJqb1FiNGJvVFhGVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
ZmJkNzc3LWIxYTItNDg0ZS1iZjIxLTYxNjk3YzM5ZDk3Yi8xL0VqbHlybktZU0xP
WlhPOGFBcHNjWnRwM2ZsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALBp6AMEArlbSDANBgkqhkiG9w0B
AQsFAAOCAQEACdc5BPqRy0FuQWCizuqqPJ/D2G8OaWeGN+IYJ2GruUMRX8/nKHXn
y5KFVHYHZdQa7AMdFx0knoX2fyAWCSPNY1INk6MPv49tv/p+qEbOfQ1A3DGErnR8
Ep0ZFodmlicC90G3fwnDfFAHRnj1826Ej95rBngmXfa9YUZmfmd5jJtMtqZ25KJK
Wy8SO4RmKAQNnKmaLBARyymsHIN/hF0FKnNmxhUS0FvDx9qB5dWXDcbSn8jCgpm8
tdzDjhLPy/dIpZzhQTRfDXM+nSwzWgVrP8usvkVjNySJSQklxLJH/p1KV2b5Osbz
WUbTyEdJZgwIQFvhK4Lub2LosTpfbHTZww==
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:08:34 2025 by rpki-client