Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/pfbg_1WSJe7pLHlnFyRwwTX_irQ.roa
File: pfbg_1WSJe7pLHlnFyRwwTX_irQ.roa (raw, json)
Hash identifier: 28Qbvd5ZhjicqjEpCkTX8CMdJ6fYC5gAXeEBOjyH77A=
Subject key identifier: A5:F6:E0:FF:55:92:25:EE:E9:2C:79:67:17:24:70:C1:35:FF:8A:B4
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 0193B5300261281E60BFA42B68180D56C08D
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/pfbg_1WSJe7pLHlnFyRwwTX_irQ.roa
Signing time: Wed 11 Dec 2024 10:07:22 +0000
ROA not before: Wed 11 Dec 2024 10:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57728
IP address blocks: 81.25.16.0/21 maxlen: 21
81.25.24.0/21 maxlen: 21
109.234.40.0/21 maxlen: 21
185.255.116.0/22 maxlen: 22
2a00:1800::/32 maxlen: 32
2a00:1807::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:30:02:61:28:1e:60:bf:a4:2b:68:18:0d:56:c0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Dec 11 10:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5f6e0ff559225eee92c7967172470c135ff8ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:33:c9:9f:1f:5c:aa:2f:96:cb:50:a1:65:
02:e4:0e:1e:72:35:14:4c:60:f8:46:33:83:05:d1:
17:14:8d:61:c4:7c:64:99:51:09:bd:2d:be:06:05:
4b:af:49:d0:d7:81:5a:c5:43:b8:3f:88:ec:6e:30:
dc:fa:f7:cf:8a:ef:44:dc:ea:f8:cd:d1:5f:af:d8:
44:55:2c:69:74:b5:a6:25:7a:93:88:cc:47:ca:7c:
9b:a2:2b:9a:2e:5d:f0:15:62:2c:c9:8d:52:f1:26:
bd:17:33:d0:12:9d:c9:d5:a7:35:42:38:69:db:0d:
b0:ef:d0:85:78:71:41:b1:bb:98:7e:02:ff:e6:4f:
26:aa:27:9e:6f:9c:21:5d:8c:60:09:ea:b5:72:9d:
1c:22:c0:75:32:52:d4:96:99:61:c6:ce:a8:4e:bc:
1b:ca:55:cf:e8:5f:47:9a:36:6b:b6:de:68:83:ae:
d7:df:4a:84:52:ff:0e:9c:a4:89:31:ee:83:1c:02:
9b:44:7d:38:e3:57:22:80:50:63:3b:79:f2:12:9e:
cf:42:2f:56:cc:9d:3d:51:f1:30:f2:8f:b4:94:7e:
22:38:ad:4e:01:ee:01:fd:cb:54:d7:23:71:f5:01:
91:0a:03:21:d2:15:86:0f:50:ae:04:0d:81:71:43:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:E0:FF:55:92:25:EE:E9:2C:79:67:17:24:70:C1:35:FF:8A:B4
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/pfbg_1WSJe7pLHlnFyRwwTX_irQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.16.0/20
109.234.40.0/21
185.255.116.0/22
IPv6:
2a00:1800::/32
2a00:1807::/32
Signature Algorithm: sha256WithRSAEncryption
59:c1:af:05:7f:b3:fd:81:c9:5c:5c:ce:ab:63:27:a8:be:fd:
b1:af:e4:8d:64:e7:20:5a:84:4c:82:d4:97:7d:73:db:17:c2:
36:84:e6:7f:ac:66:88:e2:bc:87:1c:a5:29:8f:e4:2b:e7:fe:
6d:8b:50:18:99:55:7a:c4:4a:79:cb:3a:32:24:6a:ff:37:40:
ac:3c:46:08:e1:4c:af:1d:7d:0d:61:aa:0f:b8:d8:fb:87:11:
98:d6:31:88:df:ac:d7:b2:70:83:3a:f6:72:4f:5d:59:9e:41:
3e:a8:28:99:46:84:3c:f2:5f:45:cb:aa:79:10:85:92:75:e1:
44:25:ea:c0:6c:98:65:3e:c4:50:10:b9:44:09:c2:1b:96:ca:
cb:c6:2e:53:50:bd:d2:5c:c6:71:d8:64:34:94:3a:4c:34:95:
f9:31:92:ae:76:eb:c0:2e:3c:ae:c9:19:a5:24:fd:45:46:9f:
11:bc:79:74:38:5b:0a:41:12:23:f4:ab:33:ba:3c:c6:69:d2:
8e:0c:63:7c:f0:c2:5b:cd:35:87:05:f8:19:86:73:a5:2a:cb:
ea:28:3a:d6:64:51:c4:85:c5:f3:f4:b4:aa:2a:ec:3f:68:8c:
29:09:20:a6:03:b3:54:a0:37:b5:c6:e4:69:f9:eb:30:d1:cb:
e5:66:49:67
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZO1MAJhKB5gv6QraBgNVsCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj
ZmQwNjIwHhcNMjQxMjExMTAwNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWY2ZTBmZjU1OTIyNWVlZTkyYzc5NjcxNzI0NzBjMTM1ZmY4YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoMzyZ8fXKovlstQoWUC5A4ecjUU
TGD4RjODBdEXFI1hxHxkmVEJvS2+BgVLr0nQ14FaxUO4P4jsbjDc+vfPiu9E3Or4
zdFfr9hEVSxpdLWmJXqTiMxHynyboiuaLl3wFWIsyY1S8Sa9FzPQEp3J1ac1Qjhp
2w2w79CFeHFBsbuYfgL/5k8mqieeb5whXYxgCeq1cp0cIsB1MlLUlplhxs6oTrwb
ylXP6F9HmjZrtt5og67X30qEUv8OnKSJMe6DHAKbRH0441cigFBjO3nyEp7PQi9W
zJ09UfEw8o+0lH4iOK1OAe4B/ctU1yNx9QGRCgMh0hWGD1CuBA2BcUOdqwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFKX24P9VkiXu6Sx5ZxckcME1/4q0MB8GA1UdIwQY
MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt
NjU0ZGQ2NDQyY2U0LzEvcGZiZ18xV1NKZTdwTEhsbkZ5Und3VFhfaXJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0
LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQEURkQAwQD
beooAwQCuf90MBQEAgACMA4DBQAqABgAAwUAKgAYBzANBgkqhkiG9w0BAQsFAAOC
AQEAWcGvBX+z/YHJXFzOq2MnqL79sa/kjWTnIFqETILUl31z2xfCNoTmf6xmiOK8
hxylKY/kK+f+bYtQGJlVesRKecs6MiRq/zdArDxGCOFMrx19DWGqD7jY+4cRmNYx
iN+s17Jwgzr2ck9dWZ5BPqgomUaEPPJfRcuqeRCFknXhRCXqwGyYZT7EUBC5RAnC
G5bKy8YuU1C90lzGcdhkNJQ6TDSV+TGSrnbrwC48rskZpST9RUafEbx5dDhbCkES
I/SrM7o8xmnSjgxjfPDCW801hwX4GYZzpSrL6ig61mRRxIXF8/S0qirsP2iMKQkg
pgOzVKA3tcbkafnrMNHL5WZJZw==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net