Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/3DopUvv943uYM20t2jTMqDY3ME0.roa
File: 3DopUvv943uYM20t2jTMqDY3ME0.roa (raw, json)
Hash identifier: EEGGDlAEWPPeGhoc9ZhIBcBnL6FhdNTUpknS/427Nro=
Subject key identifier: DC:3A:29:52:FB:FD:E3:7B:98:33:6D:2D:DA:34:CC:A8:36:37:30:4D
Certificate issuer: /CN=d0a14d0b08ad412b00d586dea889ee6dac4f5def
Certificate serial: 018570829DF92662B94AA18A7E22777FF5F4
Authority key identifier: D0:A1:4D:0B:08:AD:41:2B:00:D5:86:DE:A8:89:EE:6D:AC:4F:5D:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFNCwitQSsA1YbeqInubaxPXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/3DopUvv943uYM20t2jTMqDY3ME0.roa
Signing time: Mon 02 Jan 2023 03:24:46 +0000
ROA not before: Mon 02 Jan 2023 03:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.211.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:9d:f9:26:62:b9:4a:a1:8a:7e:22:77:7f:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a14d0b08ad412b00d586dea889ee6dac4f5def
Validity
Not Before: Jan 2 03:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc3a2952fbfde37b98336d2dda34cca83637304d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:34:a6:87:50:39:ae:d1:1e:c2:70:6d:18:
c7:30:c9:fe:c2:81:ed:a6:ab:e7:72:73:91:b2:a1:
3e:e1:4d:54:68:01:a7:e5:20:64:9f:e0:b8:8a:2d:
00:6a:ff:59:e4:fd:f3:f2:9b:cb:40:5f:5f:ca:49:
a1:93:ef:c5:88:ac:83:34:f8:4f:d1:d7:e1:ed:38:
fd:e2:8c:9c:50:85:6f:34:1a:54:d2:1e:a6:5d:bc:
83:66:d1:57:fb:79:6b:6d:aa:70:ca:bc:91:3f:2a:
b6:89:dd:30:4a:e7:fe:89:32:dd:1e:aa:3d:93:07:
61:89:31:02:ee:83:75:01:c7:cc:41:d7:4e:71:c9:
d3:00:64:fb:45:af:a4:a7:22:02:e4:77:16:01:1a:
55:bf:b4:cc:1f:ac:02:d9:ca:23:f2:a5:95:e8:cf:
7f:55:21:0c:e5:f6:f9:c2:ca:6a:fe:f8:ab:39:7f:
2c:b1:28:9a:b6:1c:08:c4:03:c6:12:7c:90:96:07:
84:09:28:77:65:cd:67:3b:46:0c:0a:72:45:bf:8c:
ca:7c:b2:76:8a:93:28:e9:5f:3c:9e:74:ee:e8:9b:
2a:21:1b:a3:19:9e:aa:7a:b3:38:12:c6:df:3b:be:
eb:93:cf:91:83:b1:8d:2e:c5:5c:5c:73:13:e6:0a:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:29:52:FB:FD:E3:7B:98:33:6D:2D:DA:34:CC:A8:36:37:30:4D
X509v3 Authority Key Identifier:
keyid:D0:A1:4D:0B:08:AD:41:2B:00:D5:86:DE:A8:89:EE:6D:AC:4F:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFNCwitQSsA1YbeqInubaxPXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/3DopUvv943uYM20t2jTMqDY3ME0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/0KFNCwitQSsA1YbeqInubaxPXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.170.0/24
Signature Algorithm: sha256WithRSAEncryption
03:36:1e:53:9f:ce:85:ff:b9:94:a9:15:9f:35:59:3c:36:b8:
cd:7f:57:ec:7e:aa:f6:d4:4c:3f:e3:a6:db:cf:5a:ee:67:5e:
3c:11:d8:4c:8d:59:ee:1b:7e:ed:18:d9:bd:40:e2:c2:b0:7f:
2a:5b:84:25:b5:a5:1c:97:80:bb:22:f6:6d:da:d1:25:a2:e0:
6e:d4:6f:05:3b:66:82:cc:cc:dd:a8:19:ec:3e:d7:e3:1d:41:
eb:ea:9c:19:c2:06:b4:fb:f7:3a:3b:89:a4:2f:b8:b2:2d:61:
1b:ce:33:47:5c:4e:64:60:f0:09:ae:ad:81:67:85:0f:43:03:
4a:f4:ca:a3:f0:0f:14:1c:f2:1b:d2:df:fe:09:75:9a:93:0e:
3b:0f:18:e4:e1:6b:47:d4:a9:51:b7:05:fd:ee:e7:c4:b5:ef:
e6:40:f0:e1:09:2b:70:64:5e:d0:ed:8d:71:d1:ba:8f:cf:c6:
af:ff:e0:0e:ed:91:a9:2a:fe:09:92:80:99:38:0e:1e:7b:a5:
f8:ea:e9:a1:7c:49:12:1f:33:e4:e1:b9:dd:82:ed:f3:66:1f:
19:ce:2e:8e:27:da:b5:18:71:27:98:82:c3:4e:7d:28:4c:fd:
1f:bc:0e:60:7b:77:5e:e7:5e:49:83:5c:9c:2f:7c:94:d0:84:
1e:b2:aa:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgp35JmK5SqGKfiJ3f/X0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTE0ZDBiMDhhZDQxMmIwMGQ1ODZkZWE4ODllZTZkYWM0
ZjVkZWYwHhcNMjMwMTAyMDMyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzNhMjk1MmZiZmRlMzdiOTgzMzZkMmRkYTM0Y2NhODM2MzczMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfU0podQOa7RHsJwbRjHMMn+woHt
pqvncnORsqE+4U1UaAGn5SBkn+C4ii0Aav9Z5P3z8pvLQF9fykmhk+/FiKyDNPhP
0dfh7Tj94oycUIVvNBpU0h6mXbyDZtFX+3lrbapwyryRPyq2id0wSuf+iTLdHqo9
kwdhiTEC7oN1AcfMQddOccnTAGT7Ra+kpyIC5HcWARpVv7TMH6wC2coj8qWV6M9/
VSEM5fb5wspq/virOX8ssSiathwIxAPGEnyQlgeECSh3Zc1nO0YMCnJFv4zKfLJ2
ipMo6V88nnTu6JsqIRujGZ6qerM4EsbfO77rk8+Rg7GNLsVcXHMT5gr2VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNw6KVL7/eN7mDNtLdo0zKg2NzBNMB8GA1UdIwQY
MBaAFNChTQsIrUErANWG3qiJ7m2sT13vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtGTkN3aXRRU3NBMVliZXFJbnViYXhQWGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kNjExODMtMmJlYS00ZGQwLWIyYjIt
YzNlN2I2ZTE0ZjU4LzEvM0RvcFV2djk0M3VZTTIwdDJqVE1xRFkzTUUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9kNjExODMtMmJlYS00ZGQwLWIyYjItYzNlN2I2ZTE0ZjU4
LzEvMEtGTkN3aXRRU3NBMVliZXFJbnViYXhQWGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudOqMA0G
CSqGSIb3DQEBCwUAA4IBAQADNh5Tn86F/7mUqRWfNVk8NrjNf1fsfqr21Ew/46bb
z1ruZ148EdhMjVnuG37tGNm9QOLCsH8qW4QltaUcl4C7IvZt2tElouBu1G8FO2aC
zMzdqBnsPtfjHUHr6pwZwga0+/c6O4mkL7iyLWEbzjNHXE5kYPAJrq2BZ4UPQwNK
9Mqj8A8UHPIb0t/+CXWakw47Dxjk4WtH1KlRtwX97ufEte/mQPDhCStwZF7Q7Y1x
0bqPz8av/+AO7ZGpKv4JkoCZOA4ee6X46umhfEkSHzPk4bndgu3zZh8Zzi6OJ9q1
GHEnmILDTn0oTP0fvA5ge3de515Jg1ycL3yU0IQesqoG
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:34 2025 by rpki-client