Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Dcpzsgjm1nM5gV2AIhaIYVgZ6ug.roa
File: Dcpzsgjm1nM5gV2AIhaIYVgZ6ug.roa (raw, json)
Hash identifier: EIloDnK+7ypz9PHSeSO8jV9YcXkBsX7hhE6eP4B/2FE=
Subject key identifier: 0D:CA:73:B2:08:E6:D6:73:39:81:5D:80:22:16:88:61:58:19:EA:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 284BE36B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Dcpzsgjm1nM5gV2AIhaIYVgZ6ug.roa
Signing time: Sat 01 Jan 2022 16:10:10 +0000
ROA not before: Sat 01 Jan 2022 16:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209229
IP address blocks: 92.253.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676062059 (0x284be36b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dca73b208e6d67339815d80221688615819eae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:64:8c:63:79:79:af:de:7e:8b:38:9b:d0:f9:
ce:84:1c:ca:e5:c7:36:0e:5d:d6:7f:c6:98:a5:65:
6d:e8:78:79:55:69:e9:29:e9:8b:ba:51:3d:c0:9e:
b4:2c:9a:ab:61:5c:e5:00:a6:ea:ae:1d:57:3a:44:
a9:8d:8b:c4:37:49:6f:5c:6d:88:86:3d:d4:a2:87:
41:b4:1e:83:91:fc:d8:ff:f3:de:20:32:12:33:28:
a1:28:34:73:4a:5f:31:54:7a:7b:68:93:03:ca:64:
da:08:d3:cb:97:9c:7f:ca:57:61:54:1e:42:6f:af:
0b:ca:0f:1b:35:c0:48:0d:98:68:96:8d:d4:f7:2a:
f0:8c:e4:1f:c1:83:af:2c:72:c0:90:da:43:39:81:
28:84:cd:41:23:19:41:53:42:61:9e:c9:5d:61:70:
87:8a:ca:55:4d:9e:2e:29:39:31:9d:81:31:50:04:
c3:38:17:4a:54:8d:f7:a0:9d:a9:95:86:32:ef:3f:
c9:79:e3:e0:2c:75:25:6d:05:3e:99:78:a7:1f:c0:
70:5d:44:91:85:b1:d2:88:52:c8:78:79:07:b7:17:
8a:54:a2:2b:d3:2d:0e:b8:48:64:16:08:e1:53:eb:
ba:2c:71:bc:07:ca:cd:ab:a1:51:6c:50:df:56:d0:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:73:B2:08:E6:D6:73:39:81:5D:80:22:16:88:61:58:19:EA:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Dcpzsgjm1nM5gV2AIhaIYVgZ6ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.233.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:49:cc:82:3c:15:cd:09:bc:75:ff:6b:16:43:d0:89:de:99:
24:5f:d8:75:87:56:62:41:99:6a:91:70:f3:eb:d3:f4:1e:3b:
e9:41:50:5e:78:d8:26:b5:f6:3e:0e:7a:3b:ff:4c:bf:40:c5:
c9:69:92:06:e3:b8:2e:c4:de:a6:f5:eb:8b:dd:bf:9e:22:26:
91:37:c2:a9:50:e0:fc:ae:dd:1f:b8:30:db:cf:77:32:eb:ee:
22:47:fb:d4:e6:af:64:2d:e9:e6:9b:8b:93:0a:50:5f:38:30:
e4:4f:92:ae:e2:99:cf:67:09:e1:b0:1c:bb:1f:cb:48:84:4a:
3f:31:f7:dd:c8:ba:f6:09:48:8f:eb:3b:c3:c3:87:e0:d7:46:
92:d0:81:3e:22:c2:e7:84:a8:21:6a:51:cc:a3:67:41:6e:8e:
77:5d:79:06:19:c3:a6:06:6d:14:0b:90:2a:7f:6a:f2:33:35:
e4:86:0c:0c:1a:30:cd:8d:14:57:60:e5:4d:90:dc:11:1b:60:
98:bb:73:2c:e3:bb:73:85:09:1f:f4:dc:c5:91:e2:f5:c2:ca:
5a:32:a4:03:e9:04:60:51:e0:9b:e9:ee:98:28:75:34:f8:9d:
a1:f5:d9:16:f3:95:de:e0:8d:79:4f:02:86:6c:7f:81:c9:95:
44:e5:6e:e2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKEvjazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MTAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGRjYTczYjIwOGU2
ZDY3MzM5ODE1ZDgwMjIxNjg4NjE1ODE5ZWFlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO9kjGN5ea/efos4m9D5zoQcyuXHNg5d1n/GmKVlbeh4eVVp
6Snpi7pRPcCetCyaq2Fc5QCm6q4dVzpEqY2LxDdJb1xtiIY91KKHQbQeg5H82P/z
3iAyEjMooSg0c0pfMVR6e2iTA8pk2gjTy5ecf8pXYVQeQm+vC8oPGzXASA2YaJaN
1Pcq8IzkH8GDryxywJDaQzmBKITNQSMZQVNCYZ7JXWFwh4rKVU2eLik5MZ2BMVAE
wzgXSlSN96CdqZWGMu8/yXnj4Cx1JW0FPpl4px/AcF1EkYWx0ohSyHh5B7cXilSi
K9MtDrhIZBYI4VPruixxvAfKzauhUWxQ31bQVFECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQNynOyCObWczmBXYAiFohhWBnq6DAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0RjcHpzZ2ptMW5NNWdWMkFJaGFJWVZnWjZ1Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFz96TANBgkqhkiG9w0BAQsFAAOC
AQEAnEnMgjwVzQm8df9rFkPQid6ZJF/YdYdWYkGZapFw8+vT9B476UFQXnjYJrX2
Pg56O/9Mv0DFyWmSBuO4LsTepvXri92/niImkTfCqVDg/K7dH7gw2893MuvuIkf7
1OavZC3p5puLkwpQXzgw5E+SruKZz2cJ4bAcux/LSIRKPzH33ci69glIj+s7w8OH
4NdGktCBPiLC54SoIWpRzKNnQW6Od115BhnDpgZtFAuQKn9q8jM15IYMDBowzY0U
V2DlTZDcERtgmLtzLOO7c4UJH/TcxZHi9cLKWjKkA+kEYFHgm+numCh1NPidofXZ
FvOV3uCNeU8Chmx/gcmVROVu4g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:20 2025 by rpki-client