Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3EYASuSwpyyE32dYKMf0HIAenLQ.roa
File: 3EYASuSwpyyE32dYKMf0HIAenLQ.roa (raw, json)
Hash identifier: LipXeoph+AOxcbi9fpQgTRkSEDUPek0iO1PsCnXsKk8=
Subject key identifier: DC:46:00:4A:E4:B0:A7:2C:84:DF:67:58:28:C7:F4:1C:80:1E:9C:B4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28574E26
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3EYASuSwpyyE32dYKMf0HIAenLQ.roa
Signing time: Sat 01 Jan 2022 16:10:16 +0000
ROA not before: Sat 01 Jan 2022 16:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210845
IP address blocks: 93.171.175.0/24 maxlen: 24
2a02:128:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676810278 (0x28574e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc46004ae4b0a72c84df675828c7f41c801e9cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:26:33:e7:a1:d5:5a:42:c4:2d:a4:94:06:
1c:41:1f:44:38:88:b5:b8:82:50:80:e5:2f:51:6b:
8d:0e:b6:6f:a4:25:81:80:26:7e:11:08:7f:7d:b6:
00:45:34:89:93:fb:4c:f2:a3:53:07:5d:77:63:05:
c0:50:d2:eb:93:aa:5d:b3:01:7a:db:ad:96:5c:83:
7d:d0:ed:74:30:c4:fd:6d:35:99:fe:a8:c9:9e:37:
2d:3b:a5:c1:c0:c5:91:e9:36:22:37:1e:88:73:cb:
c3:8a:7e:a3:c6:b7:4c:3d:53:af:9e:db:ab:64:48:
6e:68:eb:45:d5:23:49:63:11:c2:44:25:50:49:44:
42:4f:78:1b:f5:c9:ef:51:3d:5c:d1:b6:03:a0:e8:
ad:82:59:5d:81:11:ae:72:f1:cd:5b:46:a6:db:94:
b4:af:b8:a2:46:d1:d8:64:4b:8a:87:c5:b8:51:38:
3b:10:78:9e:8a:46:ed:87:db:df:5e:c4:7d:de:fe:
1c:57:32:f1:1f:bf:d9:7a:c1:9d:12:06:cc:2c:4b:
3f:c0:28:26:4a:90:f0:4c:11:56:7d:7a:da:39:37:
2e:89:37:4d:5e:a8:6b:50:3b:ea:75:4c:a2:7d:b6:
d1:92:2d:d8:6c:aa:6b:37:61:d0:a5:b0:a1:ac:59:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:00:4A:E4:B0:A7:2C:84:DF:67:58:28:C7:F4:1C:80:1E:9C:B4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3EYASuSwpyyE32dYKMf0HIAenLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.175.0/24
IPv6:
2a02:128:18::/48
Signature Algorithm: sha256WithRSAEncryption
0d:40:e6:05:19:b8:4e:80:b8:f9:be:e1:2a:47:de:c9:59:9c:
b7:30:19:49:95:e2:1f:9b:18:f6:3d:22:bd:d0:33:0b:3e:82:
fb:09:4d:9b:0c:87:c3:21:c8:91:ba:25:6d:bf:5f:e3:6f:3a:
65:11:75:df:73:ad:a0:91:c5:00:9a:84:fd:09:29:69:69:9e:
c4:32:74:a0:4c:ba:49:a1:92:50:86:bc:92:f6:ad:fe:90:17:
02:36:9b:9c:c9:bb:93:93:3c:32:30:2d:31:6e:e9:46:8b:7d:
33:06:b5:b2:7f:20:fd:bf:e1:a2:5d:d8:38:5d:01:c8:e3:b5:
c5:ad:31:99:72:50:d3:7a:64:a8:18:58:9f:f5:70:69:8e:da:
c7:7b:22:b1:38:10:5c:46:67:35:e6:b7:2b:fc:00:12:f3:43:
12:1b:d2:ca:74:e5:d9:39:27:ab:71:15:92:45:8b:a7:41:da:
81:27:a7:31:a2:2f:20:07:f6:11:28:d4:2b:b2:38:94:c5:b5:
6b:0f:66:24:fa:20:90:77:e2:1a:ad:a3:80:70:32:3d:43:36:
b2:11:00:c6:fc:35:62:b2:29:6f:6e:08:9a:b8:0a:61:34:dd:
b4:3d:39:e8:df:c1:0b:b9:88:64:18:7f:15:29:df:00:ac:e1:
54:c1:36:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEKFdOJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MTAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGM0NjAwNGFlNGIw
YTcyYzg0ZGY2NzU4MjhjN2Y0MWM4MDFlOWNiNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbgJjPnodVaQsQtpJQGHEEfRDiItbiCUIDlL1FrjQ62b6Ql
gYAmfhEIf322AEU0iZP7TPKjUwddd2MFwFDS65OqXbMBetutllyDfdDtdDDE/W01
mf6oyZ43LTulwcDFkek2IjceiHPLw4p+o8a3TD1Tr57bq2RIbmjrRdUjSWMRwkQl
UElEQk94G/XJ71E9XNG2A6DorYJZXYERrnLxzVtGptuUtK+4okbR2GRLiofFuFE4
OxB4nopG7Yfb317Efd7+HFcy8R+/2XrBnRIGzCxLP8AoJkqQ8EwRVn162jk3Lok3
TV6oa1A76nVMon220ZIt2Gyqazdh0KWwoaxZVTECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTcRgBK5LCnLITfZ1gox/QcgB6ctDAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzNFWUFTdVN3cHl5RTMyZFlLTWYwSElBZW5MUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAF2rrzAPBAIAAjAJAwcAKgIBKAAY
MA0GCSqGSIb3DQEBCwUAA4IBAQANQOYFGbhOgLj5vuEqR97JWZy3MBlJleIfmxj2
PSK90DMLPoL7CU2bDIfDIciRuiVtv1/jbzplEXXfc62gkcUAmoT9CSlpaZ7EMnSg
TLpJoZJQhryS9q3+kBcCNpucybuTkzwyMC0xbulGi30zBrWyfyD9v+GiXdg4XQHI
47XFrTGZclDTemSoGFif9XBpjtrHeyKxOBBcRmc15rcr/AAS80MSG9LKdOXZOSer
cRWSRYunQdqBJ6cxoi8gB/YRKNQrsjiUxbVrD2Yk+iCQd+IaraOAcDI9QzayEQDG
/DVisilvbgiauAphNN20PTno38ELuYhkGH8VKd8ArOFUwTaF
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:44 2025 by rpki-client