Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/PtdarDr91PAic9ExXEPtp5rDR90.roa
File: PtdarDr91PAic9ExXEPtp5rDR90.roa (raw, json)
Hash identifier: pCWRE4xl0SCTzuH+d2oTniDVCc4UbcqvXbr0am8wd2E=
Subject key identifier: 3E:D7:5A:AC:3A:FD:D4:F0:22:73:D1:31:5C:43:ED:A7:9A:C3:47:DD
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAF1E7F2BF7487BF107E037C47A382
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/PtdarDr91PAic9ExXEPtp5rDR90.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60162
IP address blocks: 213.128.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f1:e7:f2:bf:74:87:bf:10:7e:03:7c:47:a3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed75aac3afdd4f02273d1315c43eda79ac347dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:d9:00:8a:94:31:b3:ab:6a:46:a2:fc:38:
8c:a8:94:ba:47:c7:5a:db:12:b9:77:d5:4c:e7:47:
a3:90:ad:e8:2e:90:d5:3b:89:1a:f5:dd:f7:91:61:
4c:1c:8c:ad:42:f0:69:a6:66:ca:d3:07:b6:b5:af:
ba:2f:9d:92:4b:59:77:ed:9a:75:74:b4:a9:a7:84:
01:64:de:2a:b6:a3:cd:ab:d6:6a:95:ac:a3:8b:36:
a3:1c:7b:35:c9:e2:03:f5:81:6d:38:e4:9b:1f:c0:
0a:ba:79:29:33:b5:80:e4:6b:7e:a2:88:38:14:81:
2e:4c:ba:37:8f:8b:7c:6f:5e:4a:37:78:13:51:2e:
06:55:61:02:f6:61:af:ed:78:99:41:f9:b5:30:13:
61:07:27:1b:23:4a:64:99:e8:6d:f7:c7:1b:1d:0b:
64:60:ce:c1:78:7d:87:55:15:a8:fd:9e:de:7c:94:
2f:d4:99:cd:72:36:11:6c:6f:0c:dc:7b:d6:74:28:
f9:7d:1d:4b:0d:40:c2:78:1d:ed:07:ef:c1:7b:3c:
8e:1b:b8:19:5e:63:81:2f:d0:80:94:a0:ec:95:80:
56:b5:3b:9b:2a:a8:b1:c3:12:73:b9:85:4c:6a:84:
e5:cb:c8:01:56:4a:0e:53:9b:ea:b0:4a:97:20:b1:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:5A:AC:3A:FD:D4:F0:22:73:D1:31:5C:43:ED:A7:9A:C3:47:DD
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/PtdarDr91PAic9ExXEPtp5rDR90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.128.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:15:9c:90:61:30:94:43:2d:2c:9a:46:e5:7e:bf:02:fd:40:
11:31:14:34:c0:b4:9e:8f:d1:78:6c:28:f5:7f:92:a6:ad:97:
8f:43:98:59:96:6f:b1:c9:c2:10:c1:bf:36:42:6e:fd:d3:3d:
75:32:89:06:1a:00:c3:14:23:72:7c:1a:9d:fe:3d:52:fc:1c:
58:35:71:d0:9c:2d:db:f2:70:ed:c6:02:e9:ff:15:17:59:21:
81:40:8b:3a:82:f6:8e:24:cc:4a:35:e8:8e:5d:21:8c:70:e6:
81:14:96:e7:48:7d:f0:51:40:a6:4b:8b:f4:51:3c:bb:ab:c3:
10:af:de:e8:e5:a0:20:69:5e:ec:b4:d2:07:7c:19:15:e9:6d:
ae:8c:cd:ce:c6:3d:96:2c:ef:25:e5:9f:f0:46:a7:58:d9:a2:
73:09:00:51:28:a1:85:84:f5:e1:5a:28:89:0f:ac:df:d4:56:
02:72:92:c6:09:44:6e:2a:8b:91:f7:fe:cb:de:2b:0e:c8:2c:
e6:21:c5:63:2f:56:7b:4f:d4:9e:56:30:c0:37:10:9b:77:ee:
f6:9c:29:88:6f:17:21:64:c6:78:99:29:6e:a7:55:95:eb:c5:
11:7d:a7:4c:c9:91:2b:76:b2:49:0c:14:ef:a8:eb:e7:9a:72:
70:6c:3e:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+vHn8r90h78QfgN8R6OCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4
NzU3NDgwHhcNMjUwMTAxMTc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWQ3NWFhYzNhZmRkNGYwMjI3M2QxMzE1YzQzZWRhNzlhYzM0N2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46jZAIqUMbOrakai/DiMqJS6R8da
2xK5d9VM50ejkK3oLpDVO4ka9d33kWFMHIytQvBppmbK0we2ta+6L52SS1l37Zp1
dLSpp4QBZN4qtqPNq9ZqlayjizajHHs1yeID9YFtOOSbH8AKunkpM7WA5Gt+oog4
FIEuTLo3j4t8b15KN3gTUS4GVWEC9mGv7XiZQfm1MBNhBycbI0pkmeht98cbHQtk
YM7BeH2HVRWo/Z7efJQv1JnNcjYRbG8M3HvWdCj5fR1LDUDCeB3tB+/BezyOG7gZ
XmOBL9CAlKDslYBWtTubKqixwxJzuYVMaoTly8gBVkoOU5vqsEqXILGmhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7XWqw6/dTwInPRMVxD7aeaw0fdMB8GA1UdIwQY
MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt
N2YyMzMzNjA0OTk3LzEvUHRkYXJEcjkxUEFpYzlFeFhFUHRwNXJEUjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3
LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YDQMA0G
CSqGSIb3DQEBCwUAA4IBAQAcFZyQYTCUQy0smkblfr8C/UARMRQ0wLSej9F4bCj1
f5KmrZePQ5hZlm+xycIQwb82Qm790z11MokGGgDDFCNyfBqd/j1S/BxYNXHQnC3b
8nDtxgLp/xUXWSGBQIs6gvaOJMxKNeiOXSGMcOaBFJbnSH3wUUCmS4v0UTy7q8MQ
r97o5aAgaV7stNIHfBkV6W2ujM3Oxj2WLO8l5Z/wRqdY2aJzCQBRKKGFhPXhWiiJ
D6zf1FYCcpLGCURuKouR9/7L3isOyCzmIcVjL1Z7T9SeVjDANxCbd+72nCmIbxch
ZMZ4mSlup1WV68URfadMyZErdrJJDBTvqOvnmnJwbD4r
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net