Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/3PAdrrsgdnxX9uVqlWfBy48cF8I.roa
File: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (raw, json)
Hash identifier: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=
Subject key identifier: DC:F0:1D:AE:BB:20:76:7C:57:F6:E5:6A:95:67:C1:CB:8F:1C:17:C2
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 019425FD8C732BBD0516487C440E3BCC9C95
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/3PAdrrsgdnxX9uVqlWfBy48cF8I.roa
Signing time: Thu 02 Jan 2025 07:49:20 +0000
ROA not before: Thu 02 Jan 2025 07:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202876
IP address blocks: 185.152.28.0/22 maxlen: 22
2a07:7d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8c:73:2b:bd:05:16:48:7c:44:0e:3b:cc:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcf01daebb20767c57f6e56a9567c1cb8f1c17c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:39:a1:e1:7d:f0:47:b9:2d:b5:d0:67:6c:
09:2c:c8:e4:93:7b:a1:f6:69:3c:e0:23:3f:76:7f:
69:a5:bd:9d:c0:8a:de:c1:d1:3b:4b:15:e3:8c:bd:
30:4b:05:25:02:29:93:c8:bc:cd:55:9b:f1:2f:3b:
b7:79:00:e2:51:45:3c:cd:ca:62:dd:95:66:10:81:
72:0c:f9:e0:96:1a:59:cb:e0:e7:ce:fc:fc:9e:bd:
3b:c0:d0:4e:73:30:43:00:0b:49:9c:38:dc:aa:4b:
09:a7:6a:3b:1f:11:43:da:6e:41:3f:4f:b6:de:35:
67:65:68:fc:13:b5:62:7f:f3:5d:af:15:e7:09:ee:
9d:63:7e:ff:91:23:47:96:71:9f:e5:a9:ae:cc:1e:
b1:73:27:a1:26:2f:19:4c:b9:b4:3d:6b:5b:57:f0:
ec:79:cd:c8:c6:dd:73:b4:7d:b9:4c:36:e9:a9:c2:
aa:44:da:9b:4a:00:de:f8:9e:87:32:44:29:f4:94:
80:37:c1:e7:3c:ad:77:07:f6:33:cb:a5:f3:c9:cb:
bc:96:60:98:6a:2b:59:a0:c8:d2:ec:6f:b8:7d:81:
68:c5:20:b7:cc:ed:33:64:ae:29:4a:cb:78:a2:27:
64:62:3c:c6:e0:39:74:c6:d8:52:e8:3e:93:95:52:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:1D:AE:BB:20:76:7C:57:F6:E5:6A:95:67:C1:CB:8F:1C:17:C2
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/3PAdrrsgdnxX9uVqlWfBy48cF8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.28.0/22
IPv6:
2a07:7d40::/29
Signature Algorithm: sha256WithRSAEncryption
22:0e:6f:68:a7:64:b5:80:29:89:ab:f0:02:b4:4d:bf:a6:d6:
6d:96:e6:43:98:f3:db:10:39:ec:0a:d2:b4:8b:10:42:0b:77:
99:19:a1:b5:4a:f2:13:ce:7f:0d:9d:ed:24:7c:48:df:20:e8:
4c:55:12:76:df:4b:99:02:37:f9:a7:7b:27:fc:69:d4:7c:36:
1c:e1:25:68:25:de:d0:e1:10:b6:49:10:1b:30:0a:e2:99:8f:
de:24:ca:3c:21:2c:06:5f:97:d5:f2:dd:be:48:0f:a8:79:ae:
1b:2b:1e:f8:53:54:ca:89:ee:e7:f3:74:25:e3:ca:fc:36:d0:
d4:d1:de:e4:a5:0e:e4:40:88:7e:09:b7:75:25:2f:ba:15:aa:
fd:bf:7b:83:96:87:65:dc:c2:5b:15:ce:c3:95:5c:12:64:5b:
e3:84:0a:af:2b:ec:2d:8b:6f:1a:a5:9c:5d:7a:e2:7e:2f:0d:
37:68:d3:9c:54:0e:1c:53:9d:85:71:d1:33:e8:1e:e5:b5:54:
d8:28:d6:33:47:5e:7f:80:b5:78:e0:73:86:a0:92:f3:1a:32:
17:57:37:e2:e2:b1:32:5b:ff:46:0c:d3:0b:a6:89:6a:27:ad:
28:60:74:7b:15:38:f3:dd:90:d1:06:6d:b0:bf:81:ca:67:5f:
32:61:ce:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/YxzK70FFkh8RA47zJyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MzBkYTIxNTE4MTg0MTQ1ZjZkNzYyMWI1YTEzYmQ1NDAz
NWFjODMwHhcNMjUwMTAyMDc0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2YwMWRhZWJiMjA3NjdjNTdmNmU1NmE5NTY3YzFjYjhmMWMxN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ05oeF98Ee5LbXQZ2wJLMjkk3uh
9mk84CM/dn9ppb2dwIrewdE7SxXjjL0wSwUlAimTyLzNVZvxLzu3eQDiUUU8zcpi
3ZVmEIFyDPnglhpZy+Dnzvz8nr07wNBOczBDAAtJnDjcqksJp2o7HxFD2m5BP0+2
3jVnZWj8E7Vif/NdrxXnCe6dY37/kSNHlnGf5amuzB6xcyehJi8ZTLm0PWtbV/Ds
ec3Ixt1ztH25TDbpqcKqRNqbSgDe+J6HMkQp9JSAN8HnPK13B/Yzy6Xzycu8lmCY
aitZoMjS7G+4fYFoxSC3zO0zZK4pSst4oidkYjzG4Dl0xthS6D6TlVJUdwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNzwHa67IHZ8V/blapVnwcuPHBfCMB8GA1UdIwQY
MBaAFLkw2iFRgYQUX212IbWhO9VANayDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWIt
OTk0YWY1YzM0NDAyLzEvM1BBZHJyc2dkbnhYOXVWcWxXZkJ5NDhjRjhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWItOTk0YWY1YzM0NDAy
LzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZgcMA0E
AgACMAcDBQMqB31AMA0GCSqGSIb3DQEBCwUAA4IBAQAiDm9op2S1gCmJq/ACtE2/
ptZtluZDmPPbEDnsCtK0ixBCC3eZGaG1SvITzn8Nne0kfEjfIOhMVRJ230uZAjf5
p3sn/GnUfDYc4SVoJd7Q4RC2SRAbMArimY/eJMo8ISwGX5fV8t2+SA+oea4bKx74
U1TKie7n83Ql48r8NtDU0d7kpQ7kQIh+Cbd1JS+6Far9v3uDlodl3MJbFc7DlVwS
ZFvjhAqvK+wti28apZxdeuJ+Lw03aNOcVA4cU52FcdEz6B7ltVTYKNYzR15/gLV4
4HOGoJLzGjIXVzfi4rEyW/9GDNMLpolqJ60oYHR7FTjz3ZDRBm2wv4HKZ18yYc55
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:15 2025 by rpki-client