Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/NqP3R5-4a7F6KiecpE5KDdZHR6w.roa
File: NqP3R5-4a7F6KiecpE5KDdZHR6w.roa (raw, json)
Hash identifier: daqs5Eci4XC0y2jkzH375i1pEApXgI3CgZumzW8SruY=
Subject key identifier: 36:A3:F7:47:9F:B8:6B:B1:7A:2A:27:9C:A4:4E:4A:0D:D6:47:47:AC
Certificate issuer: /CN=db2e07a840625c4c020630c7f015321c4928fc71
Certificate serial: 01A5C7A7
Authority key identifier: DB:2E:07:A8:40:62:5C:4C:02:06:30:C7:F0:15:32:1C:49:28:FC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y4HqEBiXEwCBjDH8BUyHEko_HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/NqP3R5-4a7F6KiecpE5KDdZHR6w.roa
Signing time: Sat 01 Jan 2022 08:56:05 +0000
ROA not before: Sat 01 Jan 2022 08:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205741
IP address blocks: 185.207.209.0/24 maxlen: 24
185.207.211.0/24 maxlen: 24
185.207.208.0/24 maxlen: 24
185.207.210.0/24 maxlen: 24
2a0b:2c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27641767 (0x1a5c7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2e07a840625c4c020630c7f015321c4928fc71
Validity
Not Before: Jan 1 08:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36a3f7479fb86bb17a2a279ca44e4a0dd64747ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:94:3f:b3:05:1f:8e:9d:8c:1c:ff:6a:b2:
80:c0:b8:5c:ac:36:2a:fb:44:c3:e6:3b:aa:f0:c5:
49:1c:b1:86:18:f8:e4:af:bf:b7:d9:0b:28:e8:b6:
aa:6e:d6:40:c4:f5:12:23:5d:a5:03:38:0a:4f:1f:
50:b8:5f:79:8c:1d:57:29:ae:1b:71:78:cd:a9:6d:
32:a7:f4:39:75:99:3c:0d:74:2b:5e:23:7a:e9:d7:
07:e0:e3:3e:18:e5:40:56:72:bd:57:4a:b0:3d:82:
a7:7a:33:f1:4d:21:7f:52:e9:fb:dd:6b:e8:9b:c3:
b6:df:10:10:3c:9d:79:e6:c7:10:1d:fa:0a:5e:75:
48:49:59:28:a8:d0:51:f4:f5:38:8e:88:46:3f:d1:
aa:6e:6e:92:1b:04:ba:82:af:56:81:c9:b2:e4:f5:
e2:99:bc:e5:24:41:7b:32:01:ce:90:a2:ae:17:e1:
55:ea:49:29:c5:82:fb:e6:12:44:7c:41:3c:71:e1:
15:dd:38:b8:e9:4e:d4:1d:af:a6:5d:fe:a3:2e:26:
f4:a8:cd:ec:82:c2:69:39:9f:2a:26:6b:69:30:c5:
59:7f:21:db:c8:e0:1d:77:36:9f:e4:58:50:b9:72:
5f:7a:c8:f0:c3:a2:18:af:49:36:51:98:a9:e4:fb:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:F7:47:9F:B8:6B:B1:7A:2A:27:9C:A4:4E:4A:0D:D6:47:47:AC
X509v3 Authority Key Identifier:
keyid:DB:2E:07:A8:40:62:5C:4C:02:06:30:C7:F0:15:32:1C:49:28:FC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y4HqEBiXEwCBjDH8BUyHEko_HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/NqP3R5-4a7F6KiecpE5KDdZHR6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/2y4HqEBiXEwCBjDH8BUyHEko_HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.208.0/22
IPv6:
2a0b:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
00:08:ed:52:d4:22:9c:56:5c:d6:f7:20:6e:c8:ba:9e:fb:1f:
34:3b:d7:3f:07:0a:7a:cf:1f:dc:4c:f8:1b:ed:f0:fc:05:a9:
d3:f4:63:75:79:47:8e:e1:8f:37:43:7f:bd:26:f9:d9:ff:30:
bb:eb:35:1e:19:65:4e:37:76:b4:3f:5a:67:f9:5d:5f:71:6d:
9e:bf:35:0e:45:db:14:eb:8b:c0:1b:b3:a6:68:c4:27:cc:9c:
d5:f4:da:e2:ae:17:ba:e2:40:03:22:7c:31:51:df:ad:96:4b:
40:55:c9:be:40:f6:b5:02:a0:b8:41:32:f8:d5:6f:5b:cb:d3:
20:78:a6:ff:af:d0:ba:d5:6a:0f:bd:e4:d4:df:5f:f8:6b:6e:
d5:a2:43:1b:ec:d5:1d:77:66:29:45:bf:da:99:5d:06:89:f8:
f5:8e:9d:d0:1e:c2:2f:92:06:9f:1e:0c:cc:3e:92:dd:46:77:
ff:ba:4d:9d:43:9c:c6:b9:49:74:a5:83:e3:e4:18:6d:53:cf:
b8:79:b0:06:ec:f9:b0:0e:36:99:24:46:81:56:d0:e0:55:0b:
45:f8:cd:34:5e:fc:d4:d7:fe:6e:3d:1b:a1:4f:22:6e:29:c5:
c0:bc:2f:d4:3c:c2:f6:88:b9:51:22:47:90:1c:8e:89:f1:56:
d9:ed:84:fb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAaXHpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YjJlMDdhODQwNjI1YzRjMDIwNjMwYzdmMDE1MzIxYzQ5MjhmYzcxMB4XDTIyMDEw
MTA4NTYwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzZhM2Y3NDc5ZmI4
NmJiMTdhMmEyNzljYTQ0ZTRhMGRkNjQ3NDdhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ5alD+zBR+OnYwc/2qygMC4XKw2KvtEw+Y7qvDFSRyxhhj4
5K+/t9kLKOi2qm7WQMT1EiNdpQM4Ck8fULhfeYwdVymuG3F4zaltMqf0OXWZPA10
K14jeunXB+DjPhjlQFZyvVdKsD2Cp3oz8U0hf1Lp+91r6JvDtt8QEDydeebHEB36
Cl51SElZKKjQUfT1OI6IRj/Rqm5ukhsEuoKvVoHJsuT14pm85SRBezIBzpCirhfh
VepJKcWC++YSRHxBPHHhFd04uOlO1B2vpl3+oy4m9KjN7ILCaTmfKiZraTDFWX8h
28jgHXc2n+RYULlyX3rI8MOiGK9JNlGYqeT7FKECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQ2o/dHn7hrsXoqJ5ykTkoN1kdHrDAfBgNVHSMEGDAWgBTbLgeoQGJcTAIG
MMfwFTIcSSj8cTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJ5NEhxRUJpWEV3Q0JqREg4QlV5SEVrb19IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDYvNjVjY2Q3LTEwYjgtNGFmMS04OWEwLWEyODk1N2YwMjA2Yy8x
L05xUDNSNS00YTdGNktpZWNwRTVLRGRaSFI2dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYv
NjVjY2Q3LTEwYjgtNGFmMS04OWEwLWEyODk1N2YwMjA2Yy8xLzJ5NEhxRUJpWEV3
Q0JqREg4QlV5SEVrb19IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnP0DANBAIAAjAHAwUDKgssQDAN
BgkqhkiG9w0BAQsFAAOCAQEAAAjtUtQinFZc1vcgbsi6nvsfNDvXPwcKes8f3Ez4
G+3w/AWp0/RjdXlHjuGPN0N/vSb52f8wu+s1HhllTjd2tD9aZ/ldX3Ftnr81DkXb
FOuLwBuzpmjEJ8yc1fTa4q4XuuJAAyJ8MVHfrZZLQFXJvkD2tQKguEEy+NVvW8vT
IHim/6/QutVqD73k1N9f+Gtu1aJDG+zVHXdmKUW/2pldBon49Y6d0B7CL5IGnx4M
zD6S3UZ3/7pNnUOcxrlJdKWD4+QYbVPPuHmwBuz5sA42mSRGgVbQ4FULRfjNNF78
1Nf+bj0boU8ibinFwLwv1DzC9oi5USJHkByOifFW2e2E+w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:22:59 2025 by rpki-client