Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/PPeyKFftPaiVCXNYTK3ZP37-8BI.roa
File: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (raw, json)
Hash identifier: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=
Subject key identifier: 3C:F7:B2:28:57:ED:3D:A8:95:09:73:58:4C:AD:D9:3F:7E:FE:F0:12
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 019427488067E71301044CCF807610A482A7
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/PPeyKFftPaiVCXNYTK3ZP37-8BI.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34393
IP address blocks: 91.192.56.0/22 maxlen: 22
95.215.20.0/22 maxlen: 22
95.215.24.0/21 maxlen: 21
195.177.64.0/22 maxlen: 22
195.177.84.0/22 maxlen: 22
2001:67c:2f64::/48 maxlen: 48
2a0e:c980::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:80:67:e7:13:01:04:4c:cf:80:76:10:a4:82:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cf7b22857ed3da8950973584cadd93f7efef012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:be:ed:1f:47:4b:f3:71:b5:71:a3:c3:73:
d8:f7:71:21:64:88:5d:e5:e3:b3:2e:fe:d4:c7:cb:
50:a3:6e:22:0c:2b:5d:68:66:56:c5:66:1f:a8:a4:
f9:de:d1:ec:11:96:cf:1e:05:29:30:35:01:fb:ca:
f5:e1:d9:b7:81:fd:5b:4e:e8:f1:30:49:aa:f4:4c:
d1:fc:5c:a6:b3:e6:9d:f7:74:78:db:73:e7:b3:09:
70:d3:52:9e:2b:f0:95:e9:9c:2d:10:2e:a4:e4:47:
b3:4d:9e:fd:eb:3b:81:ae:e8:5f:5c:05:ba:16:ef:
62:ce:38:78:27:1a:9a:bd:96:0e:ac:91:eb:9c:f1:
ee:1c:64:50:2d:e4:e4:66:f6:5e:2d:e6:f2:c3:9a:
c9:9a:64:fe:18:0c:77:0a:8a:ed:18:42:d7:d7:ef:
b9:51:cf:3a:c0:92:f9:e2:10:b7:a5:11:0a:08:48:
d9:fa:51:7b:e0:75:b7:81:08:44:5c:4f:6d:ba:87:
b3:ae:07:85:6b:33:b3:e5:05:83:ba:83:78:f9:03:
a3:2e:d8:18:77:1c:e6:bc:ee:91:9d:3e:ac:93:55:
05:e6:3f:be:df:dc:f0:8e:c4:26:9e:4f:4e:02:6b:
5c:af:6a:e9:ce:fa:2c:cd:b1:c8:5b:5b:01:a9:9a:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:B2:28:57:ED:3D:A8:95:09:73:58:4C:AD:D9:3F:7E:FE:F0:12
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/PPeyKFftPaiVCXNYTK3ZP37-8BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.56.0/22
95.215.20.0-95.215.31.255
195.177.64.0/22
195.177.84.0/22
IPv6:
2001:67c:2f64::/48
2a0e:c980::/29
Signature Algorithm: sha256WithRSAEncryption
69:cd:93:fd:8e:25:1f:45:f3:0d:37:be:0e:16:ae:32:a5:ee:
ad:4e:6b:35:65:58:c9:8f:20:c7:7e:9d:82:89:f3:af:74:6a:
b3:b1:7f:65:21:95:b8:42:0f:ba:f6:21:3b:40:db:d2:31:19:
3b:ca:77:4d:ae:c3:94:23:da:d3:bc:76:d7:0e:4d:b2:8a:7b:
66:67:4c:e0:c4:00:2c:84:94:c0:d3:33:f8:2f:bc:01:7c:80:
20:3a:e0:8a:02:22:00:b5:ef:42:9b:ab:17:fd:fa:fd:e1:a7:
2f:83:f9:25:c2:4c:61:39:0a:40:22:25:e5:f1:78:66:fd:ee:
8f:2a:56:61:79:02:64:b0:35:5a:cf:3f:e0:1f:9c:65:b8:e7:
ab:4f:e1:2d:58:df:ce:1c:a3:62:90:12:de:db:bb:23:d6:12:
ba:9b:74:70:74:d4:a9:a6:8e:1d:f7:20:b2:4a:d3:80:87:71:
ba:28:12:ef:d8:26:e6:e9:55:89:96:4f:af:c2:e1:6d:2f:57:
c8:89:cd:1c:b4:c1:0a:18:a3:ea:59:08:ca:f9:db:f0:28:2c:
a1:0c:df:0f:1f:73:c8:4a:56:63:ca:a3:60:04:0f:8e:83:a9:
7f:2f:0a:d8:9e:f6:7b:52:3c:ef:b7:e6:a9:bd:61:d3:ce:6d:
86:39:91:d1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZQnSIBn5xMBBEzPgHYQpIKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTFhMmM5ZmM4ZGU5Njc5YmIxNTg1ODFiMTBjZWFlZTkx
ZmY3OTEwHhcNMjUwMTAyMTM1MDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2Y3YjIyODU3ZWQzZGE4OTUwOTczNTg0Y2FkZDkzZjdlZmVmMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5S+7R9HS/NxtXGjw3PY93EhZIhd
5eOzLv7Ux8tQo24iDCtdaGZWxWYfqKT53tHsEZbPHgUpMDUB+8r14dm3gf1bTujx
MEmq9EzR/Fyms+ad93R423Pnswlw01KeK/CV6ZwtEC6k5EezTZ796zuBruhfXAW6
Fu9izjh4JxqavZYOrJHrnPHuHGRQLeTkZvZeLebyw5rJmmT+GAx3CortGELX1++5
Uc86wJL54hC3pREKCEjZ+lF74HW3gQhEXE9tuoezrgeFazOz5QWDuoN4+QOjLtgY
dxzmvO6RnT6sk1UF5j++39zwjsQmnk9OAmtcr2rpzvoszbHIW1sBqZpwfQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFDz3sihX7T2olQlzWEyt2T9+/vASMB8GA1UdIwQY
MBaAFKgRosn8jelnm7FYWBsQzq7pH/eRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8xZGVjYjMtMTU5My00NWRiLWFmNTYt
MGNjNGMwMDAwODU4LzEvUFBleUtGZnRQYWlWQ1hOWVRLM1pQMzctOEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8xZGVjYjMtMTU5My00NWRiLWFmNTYtMGNjNGMwMDAwODU4
LzEvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAmBAIAATAgAwQCW8A4MAwD
BAJf1xQDBAVf1wADBALDsUADBALDsVQwFgQCAAIwEAMHACABBnwvZAMFAyoOyYAw
DQYJKoZIhvcNAQELBQADggEBAGnNk/2OJR9F8w03vg4WrjKl7q1OazVlWMmPIMd+
nYKJ8690arOxf2UhlbhCD7r2ITtA29IxGTvKd02uw5Qj2tO8dtcOTbKKe2ZnTODE
ACyElMDTM/gvvAF8gCA64IoCIgC170Kbqxf9+v3hpy+D+SXCTGE5CkAiJeXxeGb9
7o8qVmF5AmSwNVrPP+AfnGW456tP4S1Y384co2KQEt7buyPWErqbdHB01Kmmjh33
ILJK04CHcbooEu/YJubpVYmWT6/C4W0vV8iJzRy0wQoYo+pZCMr52/AoLKEM3w8f
c8hKVmPKo2AED46DqX8vCtie9ntSPO+35qm9YdPObYY5kdE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:05 2025 by rpki-client