Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/pgAR_DhucAVso-7iUGVc2v72k-k.roa
File: pgAR_DhucAVso-7iUGVc2v72k-k.roa (raw, json)
Hash identifier: 9hxBN+TWA9N4uVVJ3lzI0bLTHIAllmoH+jSnFMWRgCU=
Subject key identifier: A6:00:11:FC:38:6E:70:05:6C:A3:EE:E2:50:65:5C:DA:FE:F6:93:E9
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D65A59BFB723917C21EEF3BD1B00EC
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/pgAR_DhucAVso-7iUGVc2v72k-k.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201387
IP address blocks: 84.47.146.0/24 maxlen: 24
84.47.166.0/23 maxlen: 24
84.47.167.0/24 maxlen: 24
85.91.124.0/22 maxlen: 23
185.89.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5a:59:bf:b7:23:91:7c:21:ee:f3:bd:1b:00:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a60011fc386e70056ca3eee250655cdafef693e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:b0:c5:65:17:d9:7f:cc:56:27:e9:6c:c1:
fb:50:bb:1c:53:f7:7c:94:42:a2:36:87:51:1c:48:
c3:c9:5c:f0:ec:d1:08:d9:28:f8:80:a0:31:c0:9d:
e9:86:c2:19:55:61:37:5c:0a:55:8a:4b:fb:a4:7e:
9a:22:33:f6:d7:e7:d1:74:b1:f2:07:46:6c:30:27:
b9:51:c1:ac:db:56:5a:25:8c:80:3a:d8:7a:a9:08:
f0:72:49:55:b9:e9:7a:c0:95:b8:b2:8b:bc:12:40:
5f:e4:29:6a:2f:24:8a:26:f8:db:d4:82:6a:f0:a3:
7f:18:26:ea:4c:e3:17:21:b3:3a:4f:bf:c5:59:65:
ea:8f:70:d3:63:ab:d9:a0:76:aa:61:bb:8a:55:e4:
4a:f7:10:7a:08:f7:6c:60:a1:34:9e:15:b2:b3:a6:
47:31:e4:26:34:c6:0e:0a:ec:50:35:01:c8:80:0c:
51:38:7e:45:f6:4f:8a:8e:8c:14:ff:4f:aa:df:2c:
ed:5f:58:fd:14:49:8d:35:72:59:ef:d6:ac:e8:e0:
a6:77:0e:30:b5:91:7a:6a:d6:a4:53:f6:c9:6e:b3:
70:28:74:5b:5f:d3:77:2a:98:00:27:e8:bb:53:93:
a9:e6:1c:58:8b:f5:5f:de:c0:10:8c:e6:41:8c:1d:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:11:FC:38:6E:70:05:6C:A3:EE:E2:50:65:5C:DA:FE:F6:93:E9
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/pgAR_DhucAVso-7iUGVc2v72k-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.146.0/24
84.47.166.0/23
85.91.124.0/22
185.89.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:39:4e:53:61:ef:5e:5d:9e:17:ea:12:33:2f:ed:de:a5:e3:
fb:1d:5a:9a:1f:0d:b8:57:7e:34:7a:07:58:47:36:85:2e:6e:
de:4c:61:50:c7:a8:82:e8:8c:ea:f4:5d:ff:af:20:5b:6f:da:
91:d1:ce:0f:ab:c7:93:ab:55:10:01:49:38:ab:cf:b7:af:3a:
18:22:28:4f:a7:c8:28:dc:f6:ce:34:0d:66:b0:d5:f0:52:6d:
d4:83:96:3b:a6:09:62:c0:4b:a6:3f:78:07:38:34:42:1a:6b:
0a:03:fd:c3:f4:86:67:e3:36:a5:05:66:83:bf:76:18:62:42:
2b:7f:21:c1:a8:a8:a4:8a:62:c0:7c:5b:09:45:32:01:ee:a8:
7e:85:65:d0:74:cd:1c:7c:1c:ff:51:64:a1:2d:6f:22:b6:c0:
bc:11:85:74:94:44:ad:35:8f:c5:f6:72:48:be:9b:27:7c:9a:
ca:f2:45:ef:3f:9c:98:5d:71:3a:60:67:25:35:bd:a9:19:d4:
46:05:52:11:7f:c2:45:0a:be:79:24:04:29:01:72:da:68:83:
ab:db:55:38:86:4d:72:0c:d5:b4:4b:81:e5:d3:93:c5:c0:9a:
e8:8f:c6:f4:05:90:3b:f6:b0:50:0e:09:55:67:e7:f1:eb:2e:
5a:c6:7b:77
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQg1lpZv7cjkXwh7vO9GwDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj
ODI3N2UwHhcNMjUwMTAxMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjAwMTFmYzM4NmU3MDA1NmNhM2VlZTI1MDY1NWNkYWZlZjY5M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVywxWUX2X/MVifpbMH7ULscU/d8
lEKiNodRHEjDyVzw7NEI2Sj4gKAxwJ3phsIZVWE3XApVikv7pH6aIjP21+fRdLHy
B0ZsMCe5UcGs21ZaJYyAOth6qQjwcklVuel6wJW4sou8EkBf5ClqLySKJvjb1IJq
8KN/GCbqTOMXIbM6T7/FWWXqj3DTY6vZoHaqYbuKVeRK9xB6CPdsYKE0nhWys6ZH
MeQmNMYOCuxQNQHIgAxROH5F9k+KjowU/0+q3yztX1j9FEmNNXJZ79as6OCmdw4w
tZF6atakU/bJbrNwKHRbX9N3KpgAJ+i7U5Op5hxYi/Vf3sAQjOZBjB0DbwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKYAEfw4bnAFbKPu4lBlXNr+9pPpMB8GA1UdIwQY
MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt
NDdlMDkzNzk4OWE4LzEvcGdBUl9EaHVjQVZzby03aVVHVmMydjcyay1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4
LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVC+SAwQB
VC+mAwQCVVt8AwQCuVnwMA0GCSqGSIb3DQEBCwUAA4IBAQAqOU5TYe9eXZ4X6hIz
L+3epeP7HVqaHw24V340egdYRzaFLm7eTGFQx6iC6Izq9F3/ryBbb9qR0c4Pq8eT
q1UQAUk4q8+3rzoYIihPp8go3PbONA1msNXwUm3Ug5Y7pgliwEumP3gHODRCGmsK
A/3D9IZn4zalBWaDv3YYYkIrfyHBqKikimLAfFsJRTIB7qh+hWXQdM0cfBz/UWSh
LW8itsC8EYV0lEStNY/F9nJIvpsnfJrK8kXvP5yYXXE6YGclNb2pGdRGBVIRf8JF
Cr55JAQpAXLaaIOr21U4hk1yDNW0S4Hl05PFwJroj8b0BZA79rBQDglVZ+fx6y5a
xnt3
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:27 2025 by rpki-client