Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/Pn0wDf0R7ggyXj77nUxucu0roBQ.roa
File: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (raw, json)
Hash identifier: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=
Subject key identifier: 3E:7D:30:0D:FD:11:EE:08:32:5E:3E:FB:9D:4C:6E:72:ED:2B:A0:14
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 01942444B307E4C2D34AE65B24AAE29AE726
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/Pn0wDf0R7ggyXj77nUxucu0roBQ.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.195.228.0/24 maxlen: 24
185.195.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b3:07:e4:c2:d3:4a:e6:5b:24:aa:e2:9a:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e7d300dfd11ee08325e3efb9d4c6e72ed2ba014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:a5:b6:db:9e:cb:da:07:fb:4e:01:cf:06:
a5:c4:5b:5a:e9:7b:16:5e:6b:6d:ea:9e:d9:72:22:
da:f6:6f:ec:8e:a7:ff:42:4e:6a:6e:45:1b:7f:15:
65:8b:f5:84:97:26:f7:92:bc:03:25:ce:29:0a:ad:
ed:9c:4d:4b:af:a0:4f:52:42:5d:b5:51:3c:5a:31:
b5:53:d5:83:33:46:5d:71:82:84:e3:f6:5b:28:7c:
95:31:a0:21:74:aa:e7:82:eb:a1:35:54:11:03:d3:
40:1e:ed:59:e5:ef:f6:98:06:99:b0:46:c4:10:6e:
aa:8b:e6:d1:26:2f:cc:96:21:d9:39:a4:03:cc:ee:
cb:d8:8f:2e:d3:fe:fc:a4:d4:a4:19:4d:bc:52:fb:
cd:87:34:88:9f:4b:cc:43:6e:9c:3a:3f:dc:29:01:
a3:97:a2:c4:c6:98:3d:3d:e2:a2:78:08:37:0a:05:
22:62:d7:67:7b:47:b8:88:1d:92:c1:3f:90:3f:7b:
51:1c:ef:18:02:61:93:e4:a0:b4:bf:6b:88:2a:e0:
e9:40:19:b8:2b:6a:3d:bd:0b:b2:fb:f1:f9:24:b7:
3c:be:a2:cc:91:cc:66:a1:c0:50:28:ca:d1:fb:ac:
7b:a7:93:4b:72:c3:cb:87:f4:33:05:e2:e7:19:00:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:30:0D:FD:11:EE:08:32:5E:3E:FB:9D:4C:6E:72:ED:2B:A0:14
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/Pn0wDf0R7ggyXj77nUxucu0roBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.228.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:d1:f8:a4:46:8d:15:bf:b5:84:49:bb:23:91:0c:70:b4:b4:
aa:48:e8:40:95:71:e7:90:3b:f6:0f:92:a2:7f:10:69:d7:81:
4b:d0:00:3e:9a:dd:9e:36:1f:95:e8:69:a8:0d:e9:d4:78:fc:
80:7a:15:8c:d3:fd:87:1b:ad:40:2b:93:92:10:34:80:c2:10:
d0:84:f8:ec:e7:9f:08:19:76:9a:15:7a:27:78:77:30:23:f0:
42:2f:c6:32:71:bd:12:af:d7:91:2e:a6:40:cb:b4:8d:ca:2f:
fb:ac:97:cf:f1:76:8a:dc:18:d2:4d:69:8e:44:b5:03:a4:71:
b7:a1:17:69:9b:0e:26:0c:23:cf:ba:52:2d:eb:a1:dd:35:34:
07:f4:56:c3:9b:9a:42:9f:95:c0:d6:7c:55:32:df:3c:6a:7e:
b6:58:32:ac:84:19:dd:dc:79:71:4a:f6:07:9b:00:3a:e1:6f:
d6:fe:f0:da:fe:e6:c3:51:95:0e:dc:01:8c:b8:0a:7f:8c:57:
7d:d4:ac:4f:eb:fe:31:4c:e8:23:35:1b:29:9f:4d:54:9f:e2:
71:8d:d9:a2:c0:b5:f8:c8:57:55:d4:78:fa:c2:1d:48:5c:85:
70:a1:ee:20:71:6b:b5:9a:96:37:1d:8a:90:7d:f2:58:29:55:
27:68:1e:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRLMH5MLTSuZbJKrimucmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjUwMTAxMjM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTdkMzAwZGZkMTFlZTA4MzI1ZTNlZmI5ZDRjNmU3MmVkMmJhMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ylttuey9oH+04BzwalxFta6XsW
Xmtt6p7ZciLa9m/sjqf/Qk5qbkUbfxVli/WElyb3krwDJc4pCq3tnE1Lr6BPUkJd
tVE8WjG1U9WDM0ZdcYKE4/ZbKHyVMaAhdKrnguuhNVQRA9NAHu1Z5e/2mAaZsEbE
EG6qi+bRJi/MliHZOaQDzO7L2I8u0/78pNSkGU28UvvNhzSIn0vMQ26cOj/cKQGj
l6LExpg9PeKieAg3CgUiYtdne0e4iB2SwT+QP3tRHO8YAmGT5KC0v2uIKuDpQBm4
K2o9vQuy+/H5JLc8vqLMkcxmocBQKMrR+6x7p5NLcsPLh/QzBeLnGQCSrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD59MA39Ee4IMl4++51MbnLtK6AUMB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvUG4wd0RmMFI3Z2d5WGo3N25VeHVjdTByb0JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucPkMA0G
CSqGSIb3DQEBCwUAA4IBAQA/0fikRo0Vv7WESbsjkQxwtLSqSOhAlXHnkDv2D5Ki
fxBp14FL0AA+mt2eNh+V6GmoDenUePyAehWM0/2HG61AK5OSEDSAwhDQhPjs558I
GXaaFXoneHcwI/BCL8Yycb0Sr9eRLqZAy7SNyi/7rJfP8XaK3BjSTWmORLUDpHG3
oRdpmw4mDCPPulIt66HdNTQH9FbDm5pCn5XA1nxVMt88an62WDKshBnd3HlxSvYH
mwA64W/W/vDa/ubDUZUO3AGMuAp/jFd91KxP6/4xTOgjNRspn01Un+JxjdmiwLX4
yFdV1Hj6wh1IXIVwoe4gcWu1mpY3HYqQffJYKVUnaB73
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:31:49 2025 by rpki-client