Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/PQysa0gStaLJL9Thu5PyuDIF7kE.roa
File: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (raw, json)
Hash identifier: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=
Subject key identifier: 3D:0C:AC:6B:48:12:B5:A2:C9:2F:D4:E1:BB:93:F2:B8:32:05:EE:41
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E644372FCFE0C3050993E48A4B0E
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/PQysa0gStaLJL9Thu5PyuDIF7kE.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204619
IP address blocks: 185.143.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e6:44:37:2f:cf:e0:c3:05:09:93:e4:8a:4b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0cac6b4812b5a2c92fd4e1bb93f2b83205ee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:19:7e:5a:3b:a1:c9:55:4b:05:9d:1b:b7:
e6:87:af:23:b3:f7:59:ef:34:da:e4:78:d3:27:29:
1e:f4:91:62:6c:2b:40:d7:97:1b:3b:52:1a:d4:a4:
f1:35:33:0d:c1:ae:8a:4e:c9:86:6f:75:c1:77:be:
1d:d6:d6:90:89:e9:80:2e:02:54:e3:13:77:31:df:
78:07:a5:ea:44:89:0e:b9:e5:7a:f3:67:49:d6:8d:
ba:b4:83:1d:bf:12:03:92:66:a2:0b:dc:3a:8b:c9:
8f:d9:c1:8a:b2:c4:3a:df:3a:46:cb:1a:f4:df:27:
41:7e:af:28:19:15:79:8d:03:2d:25:f0:82:01:3b:
81:63:34:90:3f:82:4b:77:be:89:09:fe:13:19:67:
50:34:61:67:3f:c0:d2:3c:50:fe:0a:1d:d9:ed:6d:
68:b9:f9:9e:19:43:92:2a:40:06:00:8d:c6:ff:0a:
72:08:b5:94:c6:b9:d9:e9:31:29:fd:65:92:b5:19:
0c:d5:ba:6e:19:43:1f:33:fc:b9:40:93:42:3f:3a:
d9:cf:cc:6c:6e:e9:40:14:1d:4b:8a:3a:82:79:2f:
cc:3b:60:e4:9d:02:4a:3a:05:dd:b8:62:fc:2e:3b:
17:c4:de:27:a5:44:bc:87:1c:3b:a5:1c:2e:2f:d1:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:AC:6B:48:12:B5:A2:C9:2F:D4:E1:BB:93:F2:B8:32:05:EE:41
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/PQysa0gStaLJL9Thu5PyuDIF7kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.144.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5c:a4:9e:52:8f:01:56:06:15:bf:68:29:5c:d2:c5:b1:28:
11:09:35:5f:ec:24:a8:af:04:74:6b:fb:ea:30:06:fa:1a:8b:
37:f8:0f:25:87:55:73:e4:c9:9a:fe:f6:86:18:2a:48:fb:60:
2e:f1:e0:48:91:97:51:23:07:64:33:cd:84:15:8e:ac:ab:65:
97:bc:f6:83:dd:c3:a0:9e:a6:83:ac:d8:ec:e7:87:43:e4:22:
bd:a1:a8:64:d6:22:d7:86:96:b6:35:2d:53:47:cc:dc:ff:4e:
1d:ef:d2:7f:f6:99:7e:71:65:76:c5:45:e7:ab:ec:81:db:de:
cc:97:60:d2:f3:01:cf:b5:b1:ac:15:e9:1b:93:84:5d:51:46:
48:43:00:c0:a2:81:87:86:1a:f0:e3:e5:36:26:25:d7:f4:8a:
be:ca:ea:38:2d:95:80:34:23:ac:c6:a4:96:20:f1:b0:34:e3:
0a:0b:ba:43:3b:71:f5:bb:17:4e:4f:47:fa:fa:3f:54:6c:00:
e7:d0:bb:f6:7b:32:18:99:ff:31:75:25:77:45:a1:33:32:94:
2e:06:77:e4:13:5b:45:93:3c:aa:6f:70:73:10:ae:29:d6:07:
65:88:10:b3:c5:f3:4a:5c:d1:eb:15:eb:c5:24:e3:fe:c3:65:
d1:89:0d:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks+ZENy/P4MMFCZPkiksOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwMTAyMDE0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDBjYWM2YjQ4MTJiNWEyYzkyZmQ0ZTFiYjkzZjJiODMyMDVlZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCkZflo7oclVSwWdG7fmh68js/dZ
7zTa5HjTJyke9JFibCtA15cbO1Ia1KTxNTMNwa6KTsmGb3XBd74d1taQiemALgJU
4xN3Md94B6XqRIkOueV682dJ1o26tIMdvxIDkmaiC9w6i8mP2cGKssQ63zpGyxr0
3ydBfq8oGRV5jQMtJfCCATuBYzSQP4JLd76JCf4TGWdQNGFnP8DSPFD+Ch3Z7W1o
ufmeGUOSKkAGAI3G/wpyCLWUxrnZ6TEp/WWStRkM1bpuGUMfM/y5QJNCPzrZz8xs
bulAFB1LijqCeS/MO2DknQJKOgXduGL8LjsXxN4npUS8hxw7pRwuL9EttQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0MrGtIErWiyS/U4buT8rgyBe5BMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvUFF5c2EwZ1N0YUxKTDlUaHU1UHl1RElGN2tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY+QMA0G
CSqGSIb3DQEBCwUAA4IBAQCCXKSeUo8BVgYVv2gpXNLFsSgRCTVf7CSorwR0a/vq
MAb6Gos3+A8lh1Vz5Mma/vaGGCpI+2Au8eBIkZdRIwdkM82EFY6sq2WXvPaD3cOg
nqaDrNjs54dD5CK9oahk1iLXhpa2NS1TR8zc/04d79J/9pl+cWV2xUXnq+yB297M
l2DS8wHPtbGsFekbk4RdUUZIQwDAooGHhhrw4+U2JiXX9Iq+yuo4LZWANCOsxqSW
IPGwNOMKC7pDO3H1uxdOT0f6+j9UbADn0Lv2ezIYmf8xdSV3RaEzMpQuBnfkE1tF
kzyqb3BzEK4p1gdliBCzxfNKXNHrFevFJOP+w2XRiQ0O
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:34 2025 by rpki-client