Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/PfTK_laJnQS_hWcI1miH8YmD3XU.roa
File: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (raw, json)
Hash identifier: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=
Subject key identifier: 3D:F4:CA:FE:56:89:9D:04:BF:85:67:08:D6:68:87:F1:89:83:DD:75
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 0194214410C9DE40BD71D56B849C9F05E5AF
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/PfTK_laJnQS_hWcI1miH8YmD3XU.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6421
IP address blocks: 193.103.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:10:c9:de:40:bd:71:d5:6b:84:9c:9f:05:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3df4cafe56899d04bf856708d66887f18983dd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:24:47:c2:0e:78:b3:61:45:4b:7b:66:00:
48:22:d6:82:ab:b2:5b:3c:07:81:9c:3f:f1:15:59:
cc:50:d1:85:e5:83:b3:f9:2c:87:ea:91:1b:90:aa:
ba:42:32:a6:02:f2:95:78:8f:d2:3a:20:f2:c4:88:
a7:07:23:d0:18:37:96:03:fa:8d:b1:e3:0a:4c:4b:
50:f7:2a:8a:22:e0:71:4c:7a:80:4e:e6:90:ea:17:
73:31:38:c3:81:00:86:7f:6e:6c:05:cc:fc:42:f2:
21:3d:d2:b5:7b:e5:c1:83:ce:43:5b:72:72:c1:84:
a5:4c:93:5f:d7:cf:ae:ec:1e:6b:a9:c6:b1:f4:ff:
70:42:f9:a6:82:75:07:1c:79:1d:79:fd:a1:2a:47:
03:ff:38:9a:38:04:2f:2b:51:2b:b8:bf:61:c3:98:
ae:f7:44:a1:3e:2a:e6:d3:81:46:4d:69:83:0f:53:
d5:27:3b:6f:66:08:fc:5e:24:81:b5:a7:6e:0a:52:
97:c3:82:16:45:bf:97:54:06:d5:e0:01:cd:cf:21:
be:88:cb:6a:8f:2b:ef:32:fd:89:52:e2:e7:1a:a9:
20:61:c9:8d:f6:da:8b:9f:da:13:94:70:c5:a2:d1:
08:5b:ae:e8:2f:41:c5:2b:73:d0:ca:f4:63:9f:d1:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:CA:FE:56:89:9D:04:BF:85:67:08:D6:68:87:F1:89:83:DD:75
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/PfTK_laJnQS_hWcI1miH8YmD3XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
04:65:85:7d:87:a1:7c:e9:3a:d1:e2:5c:db:08:5c:ee:2d:08:
99:cb:92:a6:09:1b:19:fc:ce:20:cb:08:17:7f:08:76:2a:0d:
25:3d:ca:7d:5c:92:e8:9c:40:f4:56:a4:8a:68:de:a3:c2:01:
59:9e:c3:1e:f5:52:4d:60:b6:da:16:fc:c2:81:41:9f:6e:30:
a4:4b:21:48:6d:e2:cf:22:74:73:d2:57:77:c1:09:4b:63:3d:
7a:f3:47:5c:25:e6:f1:19:83:59:92:63:00:54:5b:87:65:f1:
ea:a5:08:33:4a:59:0b:1f:56:11:7e:31:33:81:68:95:34:64:
02:d6:0f:17:b3:dd:5e:f8:6e:01:14:ec:3d:84:e2:5a:7e:03:
08:be:fd:7c:f6:ba:26:0b:6a:49:c3:8d:15:1d:1b:33:ca:37:
c5:af:db:72:e3:2d:98:df:38:a9:39:86:14:f3:bd:91:07:56:
f2:6b:04:cf:a9:61:33:d7:87:80:4f:e8:bd:53:28:01:a8:01:
a4:72:12:e3:dc:2c:32:f0:0a:9c:e9:e6:bc:ff:3c:b8:c2:0f:
a3:6a:d6:11:a8:4f:5c:d5:55:36:ef:ad:92:b1:1d:2e:8a:3c:
54:b5:24:a4:37:43:31:f1:7f:3d:f1:82:a1:7c:58:0b:8d:8c:
60:0c:52:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRBDJ3kC9cdVrhJyfBeWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk
NTY4ZmEwHhcNMjUwMTAxMDk0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGY0Y2FmZTU2ODk5ZDA0YmY4NTY3MDhkNjY4ODdmMTg5ODNkZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4UkR8IOeLNhRUt7ZgBIItaCq7Jb
PAeBnD/xFVnMUNGF5YOz+SyH6pEbkKq6QjKmAvKVeI/SOiDyxIinByPQGDeWA/qN
seMKTEtQ9yqKIuBxTHqATuaQ6hdzMTjDgQCGf25sBcz8QvIhPdK1e+XBg85DW3Jy
wYSlTJNf18+u7B5rqcax9P9wQvmmgnUHHHkdef2hKkcD/ziaOAQvK1EruL9hw5iu
90ShPirm04FGTWmDD1PVJztvZgj8XiSBtaduClKXw4IWRb+XVAbV4AHNzyG+iMtq
jyvvMv2JUuLnGqkgYcmN9tqLn9oTlHDFotEIW67oL0HFK3PQyvRjn9G6UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD30yv5WiZ0Ev4VnCNZoh/GJg911MB8GA1UdIwQY
MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt
MDRjNTM5N2ZlNWY4LzEvUGZUS19sYUpuUVNfaFdjSTFtaUg4WW1EM1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4
LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWfHMA0G
CSqGSIb3DQEBCwUAA4IBAQAEZYV9h6F86TrR4lzbCFzuLQiZy5KmCRsZ/M4gywgX
fwh2Kg0lPcp9XJLonED0VqSKaN6jwgFZnsMe9VJNYLbaFvzCgUGfbjCkSyFIbeLP
InRz0ld3wQlLYz1680dcJebxGYNZkmMAVFuHZfHqpQgzSlkLH1YRfjEzgWiVNGQC
1g8Xs91e+G4BFOw9hOJafgMIvv189romC2pJw40VHRszyjfFr9ty4y2Y3zipOYYU
872RB1byawTPqWEz14eAT+i9UygBqAGkchLj3Cwy8Aqc6ea8/zy4wg+jatYRqE9c
1VU2762SsR0uijxUtSSkN0Mx8X898YKhfFgLjYxgDFJq
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net