Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa
File: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (raw, json)
Hash identifier: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=
Subject key identifier: A5:C2:71:C6:AA:72:85:91:7A:24:BE:06:E1:52:BB:1C:14:B8:C9:80
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 019425220F43C1D4284E7C3D87A399FCE838
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204100
IP address blocks: 185.114.112.0/22 maxlen: 22
185.114.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0f:43:c1:d4:28:4e:7c:3d:87:a3:99:fc:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5c271c6aa7285917a24be06e152bb1c14b8c980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:06:b6:5f:04:4a:c1:47:00:ee:84:fb:1b:
3c:0f:b7:cb:ec:90:2e:c6:ba:78:30:93:ec:fa:cc:
c7:6c:8a:f0:fa:cc:eb:bb:d4:f4:34:d4:07:ab:1b:
8f:b3:55:54:48:a8:4f:16:23:b5:b5:52:a0:e1:b3:
ba:9a:48:6f:b9:03:d5:26:44:ca:fe:53:1f:8f:2b:
43:e4:9a:d8:bd:4a:84:25:44:98:cc:93:83:1e:01:
43:b6:2e:36:0c:60:ff:04:5a:e5:a3:20:79:00:7f:
52:fc:6c:cd:47:58:51:bf:c0:f1:20:15:ae:4e:0a:
c8:79:ec:0d:f8:69:b0:5c:aa:44:e8:ca:0f:5e:df:
7c:71:f4:4e:ac:62:dd:fc:4d:ad:88:db:84:7a:e1:
2c:d2:59:58:70:50:34:d3:66:be:71:8d:68:41:6c:
24:e1:3a:c5:d3:ef:bb:be:96:99:f8:3c:da:86:e3:
1c:df:9a:d1:90:1b:e7:c9:40:8a:97:10:11:f3:50:
1b:1a:2a:6d:c5:08:4e:42:9b:c1:8f:cb:72:fe:c6:
6a:23:46:72:f7:34:8a:f4:65:ee:a0:0f:33:5d:6f:
09:54:6e:fe:d8:63:81:0b:d1:78:03:9c:2b:07:c9:
38:b5:43:ee:4e:8b:5f:f3:54:ff:b2:44:68:2b:fa:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:71:C6:AA:72:85:91:7A:24:BE:06:E1:52:BB:1C:14:B8:C9:80
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.112.0/22
Signature Algorithm: sha256WithRSAEncryption
97:87:be:fd:fb:91:fa:70:6a:c4:be:c4:c4:b0:b2:90:6e:bc:
e6:ef:e5:29:28:dc:56:93:2c:c9:ed:f2:4e:20:a7:1f:bc:2b:
11:ca:4e:73:88:c4:52:97:55:6e:41:af:b2:f6:14:31:43:db:
d5:b5:e1:6e:65:76:d1:b1:50:92:5f:3b:9f:2d:9c:28:9c:24:
c7:56:dc:a2:79:c5:21:ca:0d:2b:a7:4c:39:4b:c6:af:e5:c7:
55:7e:25:80:86:f8:1f:04:21:46:84:30:cb:61:d5:96:48:71:
c9:d2:18:21:e8:15:c5:30:b7:c0:4f:4d:0a:67:ff:d8:08:50:
9f:07:a1:f0:08:19:26:f4:96:47:1c:3c:19:22:b7:09:c8:98:
9d:f2:f7:35:13:f4:2e:6e:21:d2:db:f6:93:ea:18:5c:78:10:
53:29:20:7e:56:d3:12:db:8b:66:32:90:e6:73:39:f1:5a:5d:
d3:0b:7e:42:6e:45:b5:65:81:56:3a:dc:b1:d6:e9:ed:89:7d:
aa:1d:d9:4c:24:e1:0a:04:27:a5:30:09:36:25:d5:02:a7:52:
5c:ea:5a:4c:90:ad:4d:fc:a0:8c:9e:f3:e9:d8:43:bf:ac:63:
55:c6:6f:3f:e8:f3:30:40:4a:b7:27:8b:aa:29:91:98:af:10:
2d:c4:85:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIg9DwdQoTnw9h6OZ/Og4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGZmOGIxYmQwNzI0YmExMzBmODZiODQ4ZTMzY2FlYThl
OWYxMWQwHhcNMjUwMTAyMDM0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWMyNzFjNmFhNzI4NTkxN2EyNGJlMDZlMTUyYmIxYzE0YjhjOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpgGtl8ESsFHAO6E+xs8D7fL7JAu
xrp4MJPs+szHbIrw+szru9T0NNQHqxuPs1VUSKhPFiO1tVKg4bO6mkhvuQPVJkTK
/lMfjytD5JrYvUqEJUSYzJODHgFDti42DGD/BFrloyB5AH9S/GzNR1hRv8DxIBWu
TgrIeewN+GmwXKpE6MoPXt98cfROrGLd/E2tiNuEeuEs0llYcFA002a+cY1oQWwk
4TrF0++7vpaZ+DzahuMc35rRkBvnyUCKlxAR81AbGiptxQhOQpvBj8ty/sZqI0Zy
9zSK9GXuoA8zXW8JVG7+2GOBC9F4A5wrB8k4tUPuTotf81T/skRoK/rFzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXCccaqcoWReiS+BuFSuxwUuMmAMB8GA1UdIwQY
MBaAFPTf+LG9ByS6Ew+GuEjjPK6o6fEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWIt
NzRmNmEyZWFlMTc1LzEvcGNKeHhxcHloWkY2Skw0RzRWSzdIQlM0eVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWItNzRmNmEyZWFlMTc1
LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXJwMA0G
CSqGSIb3DQEBCwUAA4IBAQCXh779+5H6cGrEvsTEsLKQbrzm7+UpKNxWkyzJ7fJO
IKcfvCsRyk5ziMRSl1VuQa+y9hQxQ9vVteFuZXbRsVCSXzufLZwonCTHVtyiecUh
yg0rp0w5S8av5cdVfiWAhvgfBCFGhDDLYdWWSHHJ0hgh6BXFMLfAT00KZ//YCFCf
B6HwCBkm9JZHHDwZIrcJyJid8vc1E/QubiHS2/aT6hhceBBTKSB+VtMS24tmMpDm
cznxWl3TC35CbkW1ZYFWOtyx1untiX2qHdlMJOEKBCelMAk2JdUCp1Jc6lpMkK1N
/KCMnvPp2EO/rGNVxm8/6PMwQEq3J4uqKZGYrxAtxIXw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net