Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/PKmiIVXi-5ieWf281G2v09ZDGMA.roa
File: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (raw, json)
Hash identifier: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=
Subject key identifier: 3C:A9:A2:21:55:E2:FB:98:9E:59:FD:BC:D4:6D:AF:D3:D6:43:18:C0
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 019422FB47DB8EF98C878F43E12506D75304
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/PKmiIVXi-5ieWf281G2v09ZDGMA.roa
Signing time: Wed 01 Jan 2025 17:48:00 +0000
ROA not before: Wed 01 Jan 2025 17:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210172
IP address blocks: 185.218.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:47:db:8e:f9:8c:87:8f:43:e1:25:06:d7:53:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Jan 1 17:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ca9a22155e2fb989e59fdbcd46dafd3d64318c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:5f:42:7a:59:96:72:08:ef:d8:ed:3a:47:
e7:a3:20:27:06:37:ba:a0:82:4f:58:95:fd:8f:33:
20:df:44:ac:f7:86:eb:89:89:e4:5b:6a:08:40:fe:
27:16:5c:2f:ef:16:e6:c0:e4:19:b4:03:20:a0:7f:
6e:d4:e0:d3:3b:ec:93:a2:a3:7b:0a:36:1c:2c:b1:
22:a2:f1:41:2e:fe:60:ab:b9:e7:d7:c1:ac:c8:09:
c2:d5:2b:4c:0c:51:a1:d1:5a:f7:d0:f3:24:05:a3:
35:a4:67:0a:0e:51:ad:db:e0:38:20:b7:2d:fd:74:
03:87:84:e0:a0:07:20:34:ac:ae:ec:c0:b3:c1:15:
2c:2a:2c:17:13:2f:b4:9e:37:76:34:d0:d7:1d:44:
42:da:20:00:9f:9f:2b:63:b6:81:0a:2c:07:27:16:
e5:f6:6d:cb:f5:cc:72:fc:9e:4e:6c:8f:9e:f0:f5:
32:62:c0:c0:4b:2b:1a:49:de:2d:13:5b:03:4a:3e:
4f:72:07:b8:88:1d:34:b0:a8:da:96:d2:19:b3:d1:
09:f3:ff:6f:43:1c:f0:45:90:0e:8c:c2:2e:86:2f:
ce:31:9f:50:17:db:b0:92:07:4c:0a:a5:9e:43:16:
f6:c9:c5:a4:47:f1:ca:48:8e:ad:3d:70:a7:a0:c0:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A9:A2:21:55:E2:FB:98:9E:59:FD:BC:D4:6D:AF:D3:D6:43:18:C0
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/PKmiIVXi-5ieWf281G2v09ZDGMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.104.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b4:a6:ac:f7:81:be:58:c6:11:a1:46:cd:ea:a9:03:d2:69:
0d:c5:0b:67:a8:f6:b0:66:2b:e4:d9:b6:5f:b5:80:b8:c9:e9:
1a:79:16:e1:d0:6b:ac:cf:a6:6e:02:3e:8a:b1:d2:85:45:e7:
e3:36:88:f8:67:c7:19:bd:35:14:a1:5b:7e:3f:cf:e8:f5:1b:
2f:bd:bf:38:52:1d:32:48:bd:e4:c2:ee:36:2e:96:c9:36:b7:
04:88:3b:7f:2b:91:7e:7a:e3:f3:11:69:27:72:0c:92:f0:ed:
9e:9c:5b:5f:7b:1d:3e:6a:ff:85:9c:55:26:b2:85:a6:23:0b:
2a:b7:e2:c3:e9:cd:7e:46:7e:70:d8:b5:68:5d:b6:5a:99:b0:
79:73:25:36:2a:a7:38:28:84:7a:50:ac:7a:fd:01:5b:64:4e:
7c:49:9c:77:79:85:28:a1:f4:fd:b7:ab:1c:24:1b:5c:2e:1d:
87:dd:7c:4b:bd:84:15:64:4e:6b:34:d0:f1:33:67:77:bd:6a:
a1:b4:86:8b:e9:3b:70:aa:4a:e3:a6:7a:3b:e5:f4:aa:cd:79:
65:c5:ea:d4:48:42:fe:99:a7:ef:7d:d2:6e:22:fb:32:24:51:
16:74:87:6f:34:7b:37:47:f6:08:14:75:fa:76:48:8b:9f:45:
7a:d1:47:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+0fbjvmMh49D4SUG11MEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2Q5ZjNkYmZjMzY1MzMyZTI4MmJkMTc2YTY4MDc1NDQ2
ZDFkMWIwHhcNMjUwMTAxMTc0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2E5YTIyMTU1ZTJmYjk4OWU1OWZkYmNkNDZkYWZkM2Q2NDMxOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X5fQnpZlnII79jtOkfnoyAnBje6
oIJPWJX9jzMg30Ss94briYnkW2oIQP4nFlwv7xbmwOQZtAMgoH9u1ODTO+yToqN7
CjYcLLEiovFBLv5gq7nn18GsyAnC1StMDFGh0Vr30PMkBaM1pGcKDlGt2+A4ILct
/XQDh4TgoAcgNKyu7MCzwRUsKiwXEy+0njd2NNDXHURC2iAAn58rY7aBCiwHJxbl
9m3L9cxy/J5ObI+e8PUyYsDASysaSd4tE1sDSj5Pcge4iB00sKjaltIZs9EJ8/9v
QxzwRZAOjMIuhi/OMZ9QF9uwkgdMCqWeQxb2ycWkR/HKSI6tPXCnoMCZawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDypoiFV4vuYnln9vNRtr9PWQxjAMB8GA1UdIwQY
MBaAFDl9nz2/w2UzLigr0XamgHVEbR0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMt
ZDg2YWIyZmU3NjQ4LzEvUEttaUlWWGktNWllV2YyODFHMnYwOVpER01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMtZDg2YWIyZmU3NjQ4
LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudpoMA0G
CSqGSIb3DQEBCwUAA4IBAQBztKas94G+WMYRoUbN6qkD0mkNxQtnqPawZivk2bZf
tYC4yekaeRbh0Gusz6ZuAj6KsdKFRefjNoj4Z8cZvTUUoVt+P8/o9Rsvvb84Uh0y
SL3kwu42LpbJNrcEiDt/K5F+euPzEWkncgyS8O2enFtfex0+av+FnFUmsoWmIwsq
t+LD6c1+Rn5w2LVoXbZambB5cyU2Kqc4KIR6UKx6/QFbZE58SZx3eYUoofT9t6sc
JBtcLh2H3XxLvYQVZE5rNNDxM2d3vWqhtIaL6Ttwqkrjpno75fSqzXllxerUSEL+
mafvfdJuIvsyJFEWdIdvNHs3R/YIFHX6dkiLn0V60Ufq
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:40 2025 by rpki-client