Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/3UYD5JtQWQr7Wr9N05T2PtPaoWM.roa
File: 3UYD5JtQWQr7Wr9N05T2PtPaoWM.roa (raw, json)
Hash identifier: 3fklKBi02IlTwv3H7ht62n0QmlD4t95Oka4XIgtlArs=
Subject key identifier: DD:46:03:E4:9B:50:59:0A:FB:5A:BF:4D:D3:94:F6:3E:D3:DA:A1:63
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018A11F68AE3FFEA4376A5371ED11D52ED75
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/3UYD5JtQWQr7Wr9N05T2PtPaoWM.roa
Signing time: Sun 20 Aug 2023 08:01:24 +0000
ROA not before: Sun 20 Aug 2023 08:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 37.1.228.0/24 maxlen: 24
37.1.231.0/24 maxlen: 24
37.1.230.0/24 maxlen: 24
77.75.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:f6:8a:e3:ff:ea:43:76:a5:37:1e:d1:1d:52:ed:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Aug 20 08:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd4603e49b50590afb5abf4dd394f63ed3daa163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:a4:eb:99:bb:d8:41:0a:5c:aa:7c:22:32:
74:b3:1f:18:10:84:b8:86:cd:c6:6d:b7:d4:e6:77:
d5:c9:8c:b5:f7:95:14:fe:6f:bb:0e:b3:61:0b:7a:
bb:ae:bf:d9:3b:9f:2b:68:a6:ca:4c:76:ce:e3:d3:
83:05:26:d3:e2:f7:af:21:38:8c:3b:0e:48:3c:ba:
4d:1d:15:f6:b9:cf:0d:9e:cf:ba:a8:3f:ad:c9:60:
fc:6e:0b:f3:f9:98:ca:f8:95:1a:b8:a9:33:34:c2:
6f:cf:cb:a8:54:38:fe:26:a4:49:55:7a:02:48:cb:
17:10:af:69:c0:0b:ad:1e:d7:dc:bb:d3:7a:4b:b0:
92:76:11:5b:f6:3f:e6:81:74:7d:6a:05:aa:81:75:
3a:73:4d:96:8e:02:5b:25:5b:5c:31:1c:f6:d6:a5:
bc:db:d0:19:de:37:c8:08:1d:ba:5d:ab:87:3d:d5:
a0:20:66:7b:e2:0b:fd:70:59:0c:10:2d:a2:dc:32:
a8:56:d6:2b:20:db:45:d4:96:7f:49:71:a2:f6:09:
8a:26:ec:fa:f4:f0:50:b0:35:7c:f6:bf:aa:e9:40:
4d:fc:7f:6f:65:60:62:5c:73:ce:ee:d1:49:97:0d:
c6:cf:52:8a:6e:3f:89:f1:79:2d:9f:8f:17:a7:4b:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:46:03:E4:9B:50:59:0A:FB:5A:BF:4D:D3:94:F6:3E:D3:DA:A1:63
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/3UYD5JtQWQr7Wr9N05T2PtPaoWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.228.0/24
37.1.230.0/23
77.75.198.0/24
Signature Algorithm: sha256WithRSAEncryption
69:89:24:fc:34:ac:ca:b5:f9:53:01:70:c2:85:e6:27:c2:a7:
e4:9a:57:1b:0d:a3:ec:7c:e5:16:52:c8:4b:6f:5e:41:75:6a:
e6:6f:56:12:04:37:cb:e0:f9:f4:ac:c6:d2:54:23:25:d5:55:
6b:86:83:db:d8:9d:09:71:fa:40:31:bc:d9:1b:f7:7a:23:6c:
7e:86:c4:a6:23:23:8c:7e:6e:df:9d:ae:84:14:c1:13:f5:97:
23:67:52:72:96:f5:aa:2a:c3:c4:86:b9:53:62:30:36:cd:59:
45:7c:9e:60:03:2c:72:10:da:84:ce:b7:4e:59:b4:87:2a:b0:
e1:8b:e6:50:93:2c:53:62:54:e1:9d:c8:36:17:0c:59:fb:5e:
6e:f8:8c:7c:90:2e:ac:d2:cf:82:24:4b:14:1d:e2:09:c3:99:
67:0c:3b:25:ba:37:c5:06:1f:21:23:50:63:45:3e:02:49:47:
18:dc:84:97:ba:3a:09:e1:80:19:a8:3a:7c:fc:2a:4e:dd:28:
8d:e3:a0:e2:f0:1e:b8:75:b8:c8:c4:75:ab:d2:94:60:64:bf:
78:8a:d9:c4:19:6c:66:43:81:19:b7:25:24:7a:ab:ec:71:61:
e9:0c:30:a7:50:07:e2:f1:fb:06:a9:a6:d0:8b:15:ee:75:b2:
c7:40:28:8d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYoR9orj/+pDdqU3HtEdUu11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NGUzZTFiZWNmMzBiNDRhNDY5ODE1ZmQwZjhjMDY5YzU2
MmY5OTYwHhcNMjMwODIwMDgwMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDQ2MDNlNDliNTA1OTBhZmI1YWJmNGRkMzk0ZjYzZWQzZGFhMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMqk65m72EEKXKp8IjJ0sx8YEIS4
hs3GbbfU5nfVyYy195UU/m+7DrNhC3q7rr/ZO58raKbKTHbO49ODBSbT4vevITiM
Ow5IPLpNHRX2uc8Nns+6qD+tyWD8bgvz+ZjK+JUauKkzNMJvz8uoVDj+JqRJVXoC
SMsXEK9pwAutHtfcu9N6S7CSdhFb9j/mgXR9agWqgXU6c02WjgJbJVtcMRz21qW8
29AZ3jfICB26XauHPdWgIGZ74gv9cFkMEC2i3DKoVtYrINtF1JZ/SXGi9gmKJuz6
9PBQsDV89r+q6UBN/H9vZWBiXHPO7tFJlw3Gz1KKbj+J8Xktn48Xp0t+2wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN1GA+SbUFkK+1q/TdOU9j7T2qFjMB8GA1UdIwQY
MBaAFKhOPhvs8wtEpGmBX9D4wGnFYvmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUU0LUctenpDMFNrYVlGZjBQakFhY1ZpLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZGRlYmUtMzcyZi00MjU4LWJhMGYt
Y2M0ZmU2MzIzZmVjLzEvM1VZRDVKdFFXUXI3V3I5TjA1VDJQdFBhb1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85ZGRlYmUtMzcyZi00MjU4LWJhMGYtY2M0ZmU2MzIzZmVj
LzEvcUU0LUctenpDMFNrYVlGZjBQakFhY1ZpLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJQHkAwQB
JQHmAwQATUvGMA0GCSqGSIb3DQEBCwUAA4IBAQBpiST8NKzKtflTAXDCheYnwqfk
mlcbDaPsfOUWUshLb15BdWrmb1YSBDfL4Pn0rMbSVCMl1VVrhoPb2J0JcfpAMbzZ
G/d6I2x+hsSmIyOMfm7fna6EFMET9ZcjZ1JylvWqKsPEhrlTYjA2zVlFfJ5gAyxy
ENqEzrdOWbSHKrDhi+ZQkyxTYlThncg2FwxZ+15u+Ix8kC6s0s+CJEsUHeIJw5ln
DDslujfFBh8hI1BjRT4CSUcY3ISXujoJ4YAZqDp8/CpO3SiN46Di8B64dbjIxHWr
0pRgZL94itnEGWxmQ4EZtyUkeqvscWHpDDCnUAfi8fsGqabQixXudbLHQCiN
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:42 2025 by rpki-client