Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/PCc-26e91FyPgSwMBy1Dz0sf6Ec.roa
File: PCc-26e91FyPgSwMBy1Dz0sf6Ec.roa (raw, json)
Hash identifier: VfC7tT3XZfuJlxYTPicSyyucgtyLlGay2KOYLgXBltk=
Subject key identifier: 3C:27:3E:DB:A7:BD:D4:5C:8F:81:2C:0C:07:2D:43:CF:4B:1F:E8:47
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0190538BE1D6910284A9923622A83A3822F5
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/PCc-26e91FyPgSwMBy1Dz0sf6Ec.roa
Signing time: Wed 26 Jun 2024 07:56:34 +0000
ROA not before: Wed 26 Jun 2024 07:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 80.255.224.0/20 maxlen: 20
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:8b:e1:d6:91:02:84:a9:92:36:22:a8:3a:38:22:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jun 26 07:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c273edba7bdd45c8f812c0c072d43cf4b1fe847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:75:13:82:7d:23:e4:2b:b8:71:03:f0:02:
2b:13:cd:16:b1:b1:46:37:ab:75:f2:47:63:c0:4a:
82:e6:7c:d5:22:d3:87:9c:25:7a:51:d8:0f:3b:34:
0c:c2:de:1c:b4:ad:36:15:e1:98:59:19:48:ce:1f:
51:20:29:e0:eb:f6:c1:44:af:13:c3:fe:30:a7:a8:
0d:3e:b1:a2:33:f3:c5:76:f2:ff:86:2b:46:8e:ee:
fe:1e:f7:f6:4f:ee:ad:df:af:87:16:c3:3a:3b:d4:
8b:86:07:d8:65:04:29:e7:be:ab:23:ce:11:68:5b:
8c:76:3e:12:7f:c6:24:59:15:dd:34:83:e9:0d:da:
c4:f2:1b:9d:3d:7d:44:08:d1:29:f6:86:09:84:dc:
3a:6a:a9:b4:f0:aa:49:63:ae:21:67:a4:45:97:44:
ae:dd:17:33:08:2b:7d:6e:a1:34:c4:08:f1:7d:95:
18:8f:64:e8:69:b4:05:3d:b6:66:ba:50:62:95:9c:
e3:94:a8:f4:5d:46:c6:1b:b7:f6:e3:ec:5a:9e:36:
3d:37:02:30:15:c3:32:37:07:46:6d:a9:ce:47:f2:
32:54:b5:bf:e0:3d:8c:ad:29:f0:44:17:9c:75:7d:
6e:65:98:86:1b:65:37:79:d9:e3:df:b8:f7:34:2b:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:3E:DB:A7:BD:D4:5C:8F:81:2C:0C:07:2D:43:CF:4B:1F:E8:47
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/PCc-26e91FyPgSwMBy1Dz0sf6Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.224.0/20
185.7.237.0-185.7.239.255
Signature Algorithm: sha256WithRSAEncryption
5a:bc:25:58:d4:22:6b:f8:d1:c5:08:f6:2c:a4:ea:39:f3:84:
62:e5:d7:d0:bd:fa:79:ca:ac:0c:ef:8e:cc:58:2d:bb:84:2b:
8e:e6:dd:ba:f2:7c:81:e0:91:28:e0:32:85:5b:8a:7f:34:92:
a9:b8:14:bc:cb:8a:7a:1b:ab:94:be:78:58:2c:4a:9d:83:13:
20:8d:64:d2:ef:00:df:50:d2:ed:82:3e:8d:43:64:df:c4:d7:
7e:8c:22:e7:b4:03:89:8f:61:54:8c:f0:19:9c:b2:ca:96:6b:
40:7a:80:6f:44:21:3d:8c:b3:49:4f:90:40:e9:e6:0d:1b:f0:
ac:66:08:cf:21:6d:bc:90:5e:39:cb:13:d9:34:41:a3:79:67:
9b:c5:f6:82:e4:fa:06:bd:fc:c6:d4:3c:cb:3a:3c:9c:40:26:
02:37:2b:34:19:7b:7a:03:ab:38:e8:31:66:74:2a:8e:71:34:
08:73:58:2e:3f:84:a9:2d:73:1e:7f:16:9d:c8:c8:7d:82:b8:
52:c7:9b:8c:a6:1d:d8:42:90:5f:7c:c4:45:42:f3:2f:2f:95:
9b:89:3e:f0:59:99:c5:db:94:72:38:de:c6:c9:88:5d:48:dd:
97:7d:c1:19:78:ec:01:66:de:9e:85:d9:88:22:77:0c:d2:6b:
ad:b2:af:9b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZBTi+HWkQKEqZI2Iqg6OCL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjQwNjI2MDc1NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzI3M2VkYmE3YmRkNDVjOGY4MTJjMGMwNzJkNDNjZjRiMWZlODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyd1E4J9I+QruHED8AIrE80WsbFG
N6t18kdjwEqC5nzVItOHnCV6UdgPOzQMwt4ctK02FeGYWRlIzh9RICng6/bBRK8T
w/4wp6gNPrGiM/PFdvL/hitGju7+Hvf2T+6t36+HFsM6O9SLhgfYZQQp576rI84R
aFuMdj4Sf8YkWRXdNIPpDdrE8hudPX1ECNEp9oYJhNw6aqm08KpJY64hZ6RFl0Su
3RczCCt9bqE0xAjxfZUYj2ToabQFPbZmulBilZzjlKj0XUbGG7f24+xanjY9NwIw
FcMyNwdGbanOR/IyVLW/4D2MrSnwRBecdX1uZZiGG2U3ednj37j3NCsiEwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDwnPtunvdRcj4EsDActQ89LH+hHMB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvUENjLTI2ZTkxRnlQZ1N3TUJ5MUR6MHNmNkVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEUP/gMAwD
BAC5B+0DBAS5B+AwDQYJKoZIhvcNAQELBQADggEBAFq8JVjUImv40cUI9iyk6jnz
hGLl19C9+nnKrAzvjsxYLbuEK47m3bryfIHgkSjgMoVbin80kqm4FLzLinobq5S+
eFgsSp2DEyCNZNLvAN9Q0u2CPo1DZN/E136MIue0A4mPYVSM8BmcssqWa0B6gG9E
IT2Ms0lPkEDp5g0b8KxmCM8hbbyQXjnLE9k0QaN5Z5vF9oLk+ga9/MbUPMs6PJxA
JgI3KzQZe3oDqzjoMWZ0Ko5xNAhzWC4/hKktcx5/Fp3IyH2CuFLHm4ymHdhCkF98
xEVC8y8vlZuJPvBZmcXblHI43sbJiF1I3Zd9wRl47AFm3p6F2YgidwzSa62yr5s=
-----END CERTIFICATE-----
Generated at Thu May 8 17:35:25 2025 by rpki-client