Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/2yd3628VmNb462n9Ht_mrHJwpz4.roa
File: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (raw, json)
Hash identifier: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=
Subject key identifier: DB:27:77:EB:6F:15:98:D6:F8:EB:69:FD:1E:DF:E6:AC:72:70:A7:3E
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019423D70814F6841480641ED8E828076AB4
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/2yd3628VmNb462n9Ht_mrHJwpz4.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34224
IP address blocks: 185.68.44.0/22 maxlen: 24
185.161.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:08:14:f6:84:14:80:64:1e:d8:e8:28:07:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db2777eb6f1598d6f8eb69fd1edfe6ac7270a73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:24:54:f0:62:0c:87:d3:d8:49:8e:56:62:
25:c7:59:86:ab:b2:b1:68:7e:af:a0:c4:99:21:59:
49:83:32:d2:90:58:1d:84:8f:dd:e5:d3:33:4a:6a:
17:c8:ee:2c:04:33:7a:5d:f7:e7:9b:9f:2d:4a:aa:
fc:12:53:85:4d:15:ec:4c:23:0c:cf:9e:d8:e0:4b:
ed:da:19:e7:7e:bf:1f:fa:11:13:36:b8:de:54:1c:
97:7f:d5:6a:3a:7b:27:24:d0:64:42:18:38:5f:f8:
59:bd:7f:49:41:5c:a4:46:cb:7f:21:26:a1:1a:b3:
bd:00:2f:93:33:70:90:af:62:90:61:56:e7:33:21:
75:3a:1b:3d:33:23:60:2b:41:41:17:bd:99:fd:91:
c4:60:87:53:7a:cd:e2:96:27:cc:77:94:04:6b:b4:
d7:7c:43:d6:99:31:78:a3:0a:97:56:31:bd:bb:29:
a0:0f:f7:30:0a:f5:29:26:b6:46:c6:12:2e:70:ee:
87:d3:c3:23:4b:ec:f2:40:be:cd:89:59:8a:c3:e1:
ed:62:a4:4b:19:f1:f7:2d:90:ac:90:e8:93:bb:c2:
91:90:42:f5:09:35:f1:01:8e:75:56:3b:d0:d4:49:
39:ec:25:e9:da:dd:7f:71:a2:cc:e2:7c:ec:38:75:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:77:EB:6F:15:98:D6:F8:EB:69:FD:1E:DF:E6:AC:72:70:A7:3E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/2yd3628VmNb462n9Ht_mrHJwpz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.44.0/22
185.161.232.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:66:e1:cc:3e:bb:74:15:36:63:5a:1e:0b:6b:a5:0c:ff:a5:
5f:ff:76:b8:04:e5:08:e9:e0:d1:f7:71:59:65:73:25:16:3b:
5c:1c:98:64:01:ed:7c:ae:2f:30:1d:cd:7e:b9:02:d6:cf:26:
7c:84:a7:fb:02:0f:de:fc:72:98:48:8c:5c:df:44:56:0b:6c:
e6:3a:8b:d6:a5:1d:d5:2a:69:47:03:81:0e:b7:66:80:1e:27:
67:35:29:a3:47:8b:66:4f:ee:c6:14:fb:7a:5d:4b:ce:30:a3:
85:89:22:1b:93:f6:cb:18:19:fa:cd:a2:c8:4a:90:b3:8b:15:
a5:05:ad:97:17:e6:95:03:94:e8:a3:0b:92:38:26:5e:54:f5:
99:ea:13:87:3f:68:50:1e:12:5c:a5:41:ba:d1:79:77:08:9c:
c6:c5:0a:4b:f8:59:e1:61:55:54:44:1b:a9:c6:73:66:06:e7:
6d:b8:0c:b0:ae:c5:50:b1:0b:1f:ed:c3:c8:70:e9:4f:9c:c2:
83:85:8d:26:49:a6:e7:f3:8c:1e:1c:19:07:b1:4c:e2:9b:d2:
3e:71:b1:cd:e3:08:ac:8c:99:3f:86:0f:85:64:95:f1:5d:75:
79:ce:3b:ce:9b:a7:6c:d2:2c:2b:96:34:d9:a3:31:8d:54:09:
af:3f:14:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1wgU9oQUgGQe2OgoB2q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm
NzY0ZmEwHhcNMjUwMTAxMjE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjI3NzdlYjZmMTU5OGQ2ZjhlYjY5ZmQxZWRmZTZhYzcyNzBhNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s0kVPBiDIfT2EmOVmIlx1mGq7Kx
aH6voMSZIVlJgzLSkFgdhI/d5dMzSmoXyO4sBDN6Xffnm58tSqr8ElOFTRXsTCMM
z57Y4Evt2hnnfr8f+hETNrjeVByXf9VqOnsnJNBkQhg4X/hZvX9JQVykRst/ISah
GrO9AC+TM3CQr2KQYVbnMyF1Ohs9MyNgK0FBF72Z/ZHEYIdTes3ilifMd5QEa7TX
fEPWmTF4owqXVjG9uymgD/cwCvUpJrZGxhIucO6H08MjS+zyQL7NiVmKw+HtYqRL
GfH3LZCskOiTu8KRkEL1CTXxAY51VjvQ1Ek57CXp2t1/caLM4nzsOHUOOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNsnd+tvFZjW+Otp/R7f5qxycKc+MB8GA1UdIwQY
MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt
YjBjNzRiNzZlMTgyLzEvMnlkMzYyOFZtTmI0NjJuOUh0X21ySEp3cHo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy
LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUQsAwQC
uaHoMA0GCSqGSIb3DQEBCwUAA4IBAQCqZuHMPrt0FTZjWh4La6UM/6Vf/3a4BOUI
6eDR93FZZXMlFjtcHJhkAe18ri8wHc1+uQLWzyZ8hKf7Ag/e/HKYSIxc30RWC2zm
OovWpR3VKmlHA4EOt2aAHidnNSmjR4tmT+7GFPt6XUvOMKOFiSIbk/bLGBn6zaLI
SpCzixWlBa2XF+aVA5ToowuSOCZeVPWZ6hOHP2hQHhJcpUG60Xl3CJzGxQpL+Fnh
YVVURBupxnNmBudtuAywrsVQsQsf7cPIcOlPnMKDhY0mSabn84weHBkHsUzim9I+
cbHN4wisjJk/hg+FZJXxXXV5zjvOm6ds0iwrljTZozGNVAmvPxTZ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:40 2025 by rpki-client