Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/PPSkaBuTH6KXavJ_dfK9JbbshDw.roa
File: PPSkaBuTH6KXavJ_dfK9JbbshDw.roa (raw, json)
Hash identifier: 7GhzlmPu7zrFqbSJjRMGqj+urqDwJ9v/Cd/fnXyuqtw=
Subject key identifier: 3C:F4:A4:68:1B:93:1F:A2:97:6A:F2:7F:75:F2:BD:25:B6:EC:84:3C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 099FC921
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/PPSkaBuTH6KXavJ_dfK9JbbshDw.roa
Signing time: Fri 18 Feb 2022 05:45:30 +0000
ROA not before: Fri 18 Feb 2022 05:45:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 84.46.171.0/24 maxlen: 24
89.117.118.0/24 maxlen: 24
89.117.124.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161466657 (0x99fc921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 18 05:45:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cf4a4681b931fa2976af27f75f2bd25b6ec843c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:03:45:d4:d3:c0:34:17:4e:da:90:51:31:
fb:8e:8d:94:15:e9:45:d8:50:ec:3e:52:b8:c9:28:
ef:d5:cf:a1:f6:13:43:17:0b:79:e3:08:a6:19:03:
d9:6b:9e:49:1d:00:ef:b7:23:a8:99:aa:bb:ca:39:
6f:ec:ef:47:43:de:b1:c9:ae:0b:15:dd:32:8d:e0:
68:88:68:bc:6a:3c:5b:a6:2a:7b:6d:bf:49:22:6f:
48:08:c1:cc:2b:45:36:c4:5d:e5:f9:c9:75:9f:ad:
a5:f0:f7:b2:0d:5d:20:5f:84:49:f0:6a:12:10:ac:
3d:01:b6:c2:55:50:1c:ad:f2:4d:44:0b:2a:3d:5b:
f8:4b:9b:7f:57:ae:99:0a:29:ea:ed:f9:ff:ec:0d:
b6:60:3f:d1:e6:cc:92:75:fe:0d:9e:ac:03:ea:5e:
ed:4e:ab:53:dc:4d:a1:5c:8b:00:1a:be:86:af:fd:
6b:88:da:60:40:ff:7e:9f:50:19:f0:c7:6f:80:c4:
90:fa:27:fb:49:59:5f:60:d0:38:49:11:b1:e1:bd:
39:50:25:10:e7:fc:c6:ca:2a:13:92:8d:58:43:da:
df:ca:48:dc:cd:f0:20:d9:6d:a5:9a:18:8b:c3:49:
5c:fa:de:cc:d5:e9:3e:cd:62:f9:0a:c2:d8:61:b1:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F4:A4:68:1B:93:1F:A2:97:6A:F2:7F:75:F2:BD:25:B6:EC:84:3C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/PPSkaBuTH6KXavJ_dfK9JbbshDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
89.116.96.0/24
89.116.168.0/24
89.117.38.0/24
89.117.118.0/24
89.117.124.0/24
89.117.136.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:26:d3:69:a4:58:6b:df:e6:fe:82:71:b7:16:d9:a8:55:ab:
27:31:5f:58:c9:5c:17:6e:40:ab:ed:f2:86:4d:8e:1c:6f:f4:
48:45:72:ca:4c:ba:9f:a6:55:c6:c9:27:ba:c5:0d:ed:fc:e0:
2e:48:25:f2:c9:a1:03:7b:75:ce:bd:c3:f1:fb:62:78:f1:7c:
7f:e1:e9:8f:43:35:0f:ea:c6:70:18:2d:f7:cf:f5:27:3e:ca:
8a:d2:d1:8e:e5:3e:ce:af:d9:6b:7c:71:7a:f2:ce:3b:9f:7e:
4c:05:9c:86:11:df:b1:b2:12:c4:65:10:90:ff:68:f6:fa:ec:
d7:2b:25:24:12:3f:e4:7e:6f:fc:66:e8:ee:3f:c7:82:fc:3a:
74:94:4c:4d:c3:7c:94:30:f9:0c:5f:bd:d7:1c:f9:b6:b4:65:
c7:24:56:0a:41:62:1e:16:9a:3a:22:c9:26:ef:72:4d:cb:bd:
a7:75:a0:bc:db:de:49:6b:fe:e5:be:b1:4b:f9:85:92:fb:7d:
99:4e:78:48:fb:01:d7:ff:a5:f4:e8:2c:2a:a5:78:ef:a0:de:
aa:78:cd:18:d0:2a:09:7f:90:1c:fa:da:44:70:c4:41:a1:3f:
02:23:cd:3a:14:ba:78:f7:82:7a:35:24:dd:f0:fc:9b:65:f8:
fb:0c:f4:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIECZ/JITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIx
ODA1NDUzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2NmNGE0NjgxYjkz
MWZhMjk3NmFmMjdmNzVmMmJkMjViNmVjODQzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIhJA0XU08A0F07akFEx+46NlBXpRdhQ7D5SuMko79XPofYT
QxcLeeMIphkD2WueSR0A77cjqJmqu8o5b+zvR0PescmuCxXdMo3gaIhovGo8W6Yq
e22/SSJvSAjBzCtFNsRd5fnJdZ+tpfD3sg1dIF+ESfBqEhCsPQG2wlVQHK3yTUQL
Kj1b+Eubf1eumQop6u35/+wNtmA/0ebMknX+DZ6sA+pe7U6rU9xNoVyLABq+hq/9
a4jaYED/fp9QGfDHb4DEkPon+0lZX2DQOEkRseG9OVAlEOf8xsoqE5KNWEPa38pI
3M3wINltpZoYi8NJXPrezNXpPs1i+QrC2GGxxpsCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBQ89KRoG5Mfopdq8n918r0ltuyEPDAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1BQU2thQnVUSDZLWGF2Sl9kZks5SmJic2hEdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAFQuqwMEAFYmBwMEAFl0YAMEAFl0
qAMEAFl1JgMEAFl1dgMEAFl1fAMEAFl1iDANBgkqhkiG9w0BAQsFAAOCAQEAxSbT
aaRYa9/m/oJxtxbZqFWrJzFfWMlcF25Aq+3yhk2OHG/0SEVyyky6n6ZVxsknusUN
7fzgLkgl8smhA3t1zr3D8ftiePF8f+Hpj0M1D+rGcBgt98/1Jz7KitLRjuU+zq/Z
a3xxevLOO59+TAWchhHfsbISxGUQkP9o9vrs1yslJBI/5H5v/Gbo7j/Hgvw6dJRM
TcN8lDD5DF+91xz5trRlxyRWCkFiHhaaOiLJJu9yTcu9p3WgvNveSWv+5b6xS/mF
kvt9mU54SPsB1/+l9OgsKqV476DeqnjNGNAqCX+QHPraRHDEQaE/AiPNOhS6ePeC
ejUk3fD8m2X4+wz0Ng==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net