Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/00-pDRnkJ28HOY9PiW3UHtRlnaA.roa
File: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (raw, json)
Hash identifier: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=
Subject key identifier: D3:4F:A9:0D:19:E4:27:6F:07:39:8F:4F:89:6D:D4:1E:D4:65:9D:A0
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019427B64240A08D9766DE8D0D69022BA1AB
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/00-pDRnkJ28HOY9PiW3UHtRlnaA.roa
Signing time: Thu 02 Jan 2025 15:50:43 +0000
ROA not before: Thu 02 Jan 2025 15:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200491
IP address blocks: 185.75.151.0/24 maxlen: 24
2a03:4b27:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:42:40:a0:8d:97:66:de:8d:0d:69:02:2b:a1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 2 15:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34fa90d19e4276f07398f4f896dd41ed4659da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:ea:01:1c:15:a9:d5:b0:a9:97:dd:fb:78:
f6:00:f0:bd:2c:92:be:91:62:91:d1:2d:ee:7e:97:
8d:c8:27:aa:58:8a:24:e0:86:34:df:d3:15:65:83:
b8:99:35:bd:61:e2:1d:81:d9:a5:b9:b4:1c:98:d0:
e3:a9:2f:33:7e:72:d3:42:2e:66:5d:3f:79:7e:92:
cb:5d:67:f4:b6:c6:88:58:c5:8c:e7:d9:69:52:97:
67:b6:7a:23:24:6a:69:28:13:a2:24:6e:36:90:bb:
0e:c1:35:5b:ac:8c:97:5a:37:64:9e:6b:86:fd:d1:
db:3e:d3:7a:28:37:0e:ab:eb:3e:c6:81:e3:56:87:
a8:1d:49:7d:1c:12:71:c8:a1:09:77:ae:66:ea:5b:
45:23:0a:72:38:da:fe:e2:31:8a:99:25:af:dc:50:
d9:41:d0:46:6c:d8:60:a4:31:1e:9a:ac:bf:9e:82:
0b:9f:b2:93:0e:6b:ed:8a:35:15:90:01:2f:b8:99:
20:c4:83:46:8a:cc:e3:3b:7f:90:df:b1:c5:ee:03:
f1:e5:67:d5:8b:00:18:0c:d4:20:59:33:86:5f:c4:
03:c9:b2:28:96:2c:8f:6d:11:ea:74:a5:59:38:32:
a2:b1:e6:f1:05:9d:51:9d:07:c8:3d:ec:f4:de:ab:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:A9:0D:19:E4:27:6F:07:39:8F:4F:89:6D:D4:1E:D4:65:9D:A0
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/00-pDRnkJ28HOY9PiW3UHtRlnaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.151.0/24
IPv6:
2a03:4b27:e000::/36
Signature Algorithm: sha256WithRSAEncryption
58:34:b5:7a:83:8f:49:f8:36:c0:81:d1:ee:9f:a7:9b:75:9b:
e9:33:0e:2d:2f:53:0b:b1:62:5b:a7:3d:fd:dc:91:d7:a3:06:
a6:3f:f0:65:a6:28:d6:d2:e0:ea:09:e9:6c:d5:bf:53:01:9a:
11:a5:6b:7f:3f:cc:4a:a6:94:e7:c8:44:b9:1d:76:13:89:06:
ce:33:7f:ab:cf:aa:c8:10:7e:ee:9b:e7:f3:2e:67:30:b1:6b:
c0:14:6b:91:de:15:a2:66:76:4f:c5:a6:17:73:76:b1:52:50:
d8:0b:2d:80:b2:62:eb:21:e9:9f:49:96:de:eb:7b:e4:20:52:
65:44:b1:7c:5a:dd:ac:0a:e0:5c:83:3b:e5:0c:8d:b3:0f:35:
db:69:71:76:ba:bf:6e:e3:2c:0b:63:01:fc:50:8c:42:4e:f6:
d3:ea:fe:e1:fd:bf:36:fc:b0:af:a4:00:2b:40:ba:ac:ed:ce:
fb:92:74:ce:c8:06:24:d8:2d:45:68:65:68:7b:24:b2:14:8c:
2f:23:f1:0c:ef:ba:0a:ae:69:19:cb:c8:f6:aa:8a:70:5b:12:
8a:18:59:1c:ef:28:ea:ef:c8:4f:2b:b0:ee:21:23:bf:e6:df:
7f:6d:3b:91:0a:31:65:7a:71:5d:82:0a:fc:90:5b:f0:4b:a6:
91:ab:3b:2a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQntkJAoI2XZt6NDWkCK6GrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjUwMTAyMTU1MDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzRmYTkwZDE5ZTQyNzZmMDczOThmNGY4OTZkZDQxZWQ0NjU5ZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0/qARwVqdWwqZfd+3j2APC9LJK+
kWKR0S3ufpeNyCeqWIok4IY039MVZYO4mTW9YeIdgdmlubQcmNDjqS8zfnLTQi5m
XT95fpLLXWf0tsaIWMWM59lpUpdntnojJGppKBOiJG42kLsOwTVbrIyXWjdknmuG
/dHbPtN6KDcOq+s+xoHjVoeoHUl9HBJxyKEJd65m6ltFIwpyONr+4jGKmSWv3FDZ
QdBGbNhgpDEemqy/noILn7KTDmvtijUVkAEvuJkgxINGiszjO3+Q37HF7gPx5WfV
iwAYDNQgWTOGX8QDybIoliyPbRHqdKVZODKisebxBZ1RnQfIPez03qu7YQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFNNPqQ0Z5CdvBzmPT4lt1B7UZZ2gMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvMDAtcERSbmtKMjhIT1k5UGlXM1VIdFJsbmFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuUuXMA4E
AgACMAgDBgQqA0sn4DANBgkqhkiG9w0BAQsFAAOCAQEAWDS1eoOPSfg2wIHR7p+n
m3Wb6TMOLS9TC7FiW6c9/dyR16MGpj/wZaYo1tLg6gnpbNW/UwGaEaVrfz/MSqaU
58hEuR12E4kGzjN/q8+qyBB+7pvn8y5nMLFrwBRrkd4VomZ2T8WmF3N2sVJQ2Ast
gLJi6yHpn0mW3ut75CBSZUSxfFrdrArgXIM75QyNsw8122lxdrq/buMsC2MB/FCM
Qk720+r+4f2/Nvywr6QAK0C6rO3O+5J0zsgGJNgtRWhlaHskshSMLyPxDO+6Cq5p
GcvI9qqKcFsSihhZHO8o6u/ITyuw7iEjv+bff207kQoxZXpxXYIK/JBb8Eumkas7
Kg==
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:10 2025 by rpki-client