Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/PqtRHHmipo-3AUfoSvY22weoqgE.roa
File: PqtRHHmipo-3AUfoSvY22weoqgE.roa (raw, json)
Hash identifier: xwZMEfBzkjY6khAPov2L6YbUnAjbqo95m1Wmjd1/xyE=
Subject key identifier: 3E:AB:51:1C:79:A2:A6:8F:B7:01:47:E8:4A:F6:36:DB:07:A8:AA:01
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 018F80225B0E9AD3EA63D9C33F1B869F2BC6
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/PqtRHHmipo-3AUfoSvY22weoqgE.roa
Signing time: Thu 16 May 2024 06:41:25 +0000
ROA not before: Thu 16 May 2024 06:41:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 85.198.34.0/24 maxlen: 24
85.198.35.0/24 maxlen: 24
85.198.38.0/24 maxlen: 24
85.198.39.0/24 maxlen: 24
85.198.42.0/24 maxlen: 24
85.198.43.0/24 maxlen: 24
91.123.12.0/24 maxlen: 24
91.123.13.0/24 maxlen: 24
91.123.14.0/24 maxlen: 24
91.123.15.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
206.195.137.0/24 maxlen: 24
206.195.138.0/24 maxlen: 24
206.195.139.0/24 maxlen: 24
206.195.140.0/24 maxlen: 24
206.195.141.0/24 maxlen: 24
206.195.142.0/24 maxlen: 24
206.195.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:22:5b:0e:9a:d3:ea:63:d9:c3:3f:1b:86:9f:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: May 16 06:41:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eab511c79a2a68fb70147e84af636db07a8aa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:bc:7c:d7:ce:fa:d3:00:61:20:06:72:71:
5b:00:6a:57:56:bf:b0:74:81:6f:4c:d4:59:16:10:
24:bb:b7:45:f7:9a:ad:ba:0e:1f:1d:59:c6:d0:7b:
bd:35:47:b6:69:72:e6:e8:c7:a6:dd:9c:84:40:9a:
c5:9d:03:50:d0:c6:8b:39:2d:19:48:87:75:f8:2a:
e9:3f:3d:b9:a8:9f:94:80:26:2a:f5:df:fb:cb:60:
42:70:70:c1:d4:6c:04:2b:5f:ee:37:3e:c9:c3:e9:
44:8f:18:c8:f3:03:c5:d1:0e:18:2e:53:a9:ba:2f:
3f:99:ab:7e:fa:25:1a:a0:1e:64:6d:a7:45:6a:b7:
8d:1d:79:0c:76:78:9f:67:a0:9a:56:78:31:7b:7e:
7e:ec:9a:e0:aa:79:d3:89:c4:73:41:ba:11:91:20:
f3:2c:2f:73:f0:93:4f:4b:ad:42:9d:5b:9c:55:9e:
77:80:d8:4e:83:e4:ff:a7:10:68:71:69:eb:a7:ba:
b6:ba:23:4e:7a:e7:1f:17:46:d1:fd:d5:4e:08:6b:
5a:46:e8:9d:6d:48:b0:33:b1:2c:c2:b6:ec:ce:e4:
82:a5:13:b5:a3:88:9d:2b:86:e0:a9:40:19:05:b4:
bf:2b:3c:2b:b3:01:bf:67:03:84:4b:b3:a8:99:fd:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:51:1C:79:A2:A6:8F:B7:01:47:E8:4A:F6:36:DB:07:A8:AA:01
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/PqtRHHmipo-3AUfoSvY22weoqgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.34.0/23
85.198.38.0/23
85.198.42.0/23
91.123.12.0/22
190.106.177.0-190.106.182.255
190.106.184.0/24
206.195.137.0-206.195.143.255
Signature Algorithm: sha256WithRSAEncryption
39:32:92:bf:96:02:87:45:5b:3a:79:1d:30:11:80:98:b6:5d:
61:68:95:bf:c7:e8:92:b2:a7:07:af:35:3a:2d:eb:c1:17:49:
ae:32:97:09:73:a6:d2:b4:33:52:3e:fe:95:af:9f:4a:4e:9a:
34:fd:8d:be:c2:fc:ce:52:27:d3:b6:7d:f5:a2:f0:1a:6c:05:
3b:43:23:50:c8:12:2e:de:11:66:5c:a5:c5:51:76:5e:ce:48:
43:99:ae:78:15:cc:50:e2:b8:c3:e8:33:d7:f4:f7:3a:86:df:
d4:89:45:cb:2d:f2:4c:68:51:b2:bd:66:bb:db:ee:ba:6e:35:
6d:c3:ec:a5:ad:a1:ed:df:8a:71:ca:db:cd:aa:d6:c8:16:dd:
6c:ac:84:0e:54:6e:5d:22:84:c1:aa:6f:b2:b3:b4:39:95:ee:
7d:f8:dc:f7:b3:6d:90:26:a4:69:d6:fa:8d:02:29:f2:9f:56:
4b:eb:85:0e:1d:e2:33:d0:80:af:2f:02:ce:6d:6f:08:c7:5c:
07:ce:eb:9b:b0:89:ba:b8:02:91:ce:37:e8:95:64:c1:35:af:
26:26:bf:b5:8a:0c:09:77:85:9d:7e:26:03:92:0d:f6:7e:78:
c5:ef:81:61:2c:b2:df:2c:bc:9d:88:ed:f3:69:a1:c5:f5:75:
1f:36:a4:dd
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAY+AIlsOmtPqY9nDPxuGnyvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2M3YTQ0NzQ4MmU1N2IwNjA0YmFiYjgyYTUyNDA5Y2Rl
M2IzNmQwHhcNMjQwNTE2MDY0MTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWFiNTExYzc5YTJhNjhmYjcwMTQ3ZTg0YWY2MzZkYjA3YThhYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JS8fNfO+tMAYSAGcnFbAGpXVr+w
dIFvTNRZFhAku7dF95qtug4fHVnG0Hu9NUe2aXLm6Mem3ZyEQJrFnQNQ0MaLOS0Z
SId1+CrpPz25qJ+UgCYq9d/7y2BCcHDB1GwEK1/uNz7Jw+lEjxjI8wPF0Q4YLlOp
ui8/mat++iUaoB5kbadFareNHXkMdnifZ6CaVngxe35+7JrgqnnTicRzQboRkSDz
LC9z8JNPS61CnVucVZ53gNhOg+T/pxBocWnrp7q2uiNOeucfF0bR/dVOCGtaRuid
bUiwM7EswrbszuSCpRO1o4idK4bgqUAZBbS/KzwrswG/ZwOES7Oomf3xuwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFD6rURx5oqaPtwFH6Er2NtsHqKoBMB8GA1UdIwQY
MBaAFPDMekR0guV7BgS6u4KlJAnN47NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZTU4ZGMtN2M5MC00OWQ3LTg4NTUt
ZmEzMmQyZDUyOTY4LzEvUHF0UkhIbWlwby0zQVVmb1N2WTIyd2VvcWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZTU4ZGMtN2M5MC00OWQ3LTg4NTUtZmEzMmQyZDUyOTY4
LzEvOE14NlJIU0M1WHNHQkxxN2dxVWtDYzNqczIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQBVcYiAwQB
VcYmAwQBVcYqAwQCW3sMMAwDBAC+arEDBAC+arYDBAC+argwDAMEAM7DiQMEBM7D
gDANBgkqhkiG9w0BAQsFAAOCAQEAOTKSv5YCh0VbOnkdMBGAmLZdYWiVv8fokrKn
B681Oi3rwRdJrjKXCXOm0rQzUj7+la+fSk6aNP2NvsL8zlIn07Z99aLwGmwFO0Mj
UMgSLt4RZlylxVF2Xs5IQ5mueBXMUOK4w+gz1/T3Oobf1IlFyy3yTGhRsr1mu9vu
um41bcPspa2h7d+KccrbzarWyBbdbKyEDlRuXSKEwapvsrO0OZXuffjc97NtkCak
adb6jQIp8p9WS+uFDh3iM9CAry8Czm1vCMdcB87rm7CJurgCkc436JVkwTWvJia/
tYoMCXeFnX4mA5IN9n54xe+BYSyy3yy8nYjt82mhxfV1Hzak3Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:10 2025 by rpki-client