Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/UqPgNVlhJvyO9YwHmJ3o8vZo8Zc.roa
File: UqPgNVlhJvyO9YwHmJ3o8vZo8Zc.roa (raw, json)
Hash identifier: zTB4lgwr0aBS2r+bZsTdNQHLshLCxgMdfnQqjPhsKYI=
Subject key identifier: 52:A3:E0:35:59:61:26:FC:8E:F5:8C:07:98:9D:E8:F2:F6:68:F1:97
Certificate issuer: /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial: C60911
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/UqPgNVlhJvyO9YwHmJ3o8vZo8Zc.roa
Signing time: Sat 01 Jan 2022 11:04:52 +0000
ROA not before: Sat 01 Jan 2022 11:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207167
IP address blocks: 85.209.28.0/22 maxlen: 22
185.234.132.0/22 maxlen: 22
185.179.33.0/24 maxlen: 24
185.179.32.0/24 maxlen: 24
185.59.144.0/22 maxlen: 22
2a0a:7780::/29 maxlen: 29
2a02:6c20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12978449 (0xc60911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Validity
Not Before: Jan 1 11:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52a3e035596126fc8ef58c07989de8f2f668f197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:e0:ad:f7:9c:9b:1e:8d:41:b1:02:02:22:
53:c5:ac:1d:3b:ec:54:d4:1f:24:04:a5:75:8e:78:
f6:fb:e7:6b:72:f3:16:77:07:ad:ff:bd:11:db:da:
b8:fb:09:ce:7e:33:3e:c0:c5:e1:c6:5a:03:1d:04:
d4:97:b2:8a:ab:fd:bf:88:14:19:d9:66:93:a8:85:
b1:21:54:d6:99:3d:4a:95:22:de:c9:7a:09:f0:f6:
ff:8c:78:d2:4a:e5:3e:ec:11:eb:e0:4c:f9:29:4a:
bb:84:31:af:4b:7f:70:80:c1:4d:bd:ac:10:eb:12:
e2:7c:db:f5:af:52:41:7a:75:0d:f5:79:a4:6d:1f:
5a:79:d6:5e:b1:b1:59:20:32:da:25:84:c1:0e:a3:
4b:ce:77:1b:d4:4f:2c:56:33:9b:69:21:14:e9:27:
fd:f9:d8:cc:27:08:b6:89:fe:84:76:21:bb:81:08:
09:40:d4:90:cf:02:90:45:d9:f6:e2:d0:ed:2f:6f:
56:5a:9c:b1:34:8f:54:dc:73:ec:21:39:0b:3f:56:
bf:8b:8a:d4:fd:9c:11:38:db:af:9a:97:80:fc:19:
ab:3f:9f:e9:bc:19:74:f8:8f:c0:51:3c:10:86:26:
f2:72:95:16:52:0b:45:39:0f:40:86:5e:99:37:be:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A3:E0:35:59:61:26:FC:8E:F5:8C:07:98:9D:E8:F2:F6:68:F1:97
X509v3 Authority Key Identifier:
keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/UqPgNVlhJvyO9YwHmJ3o8vZo8Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.28.0/22
185.59.144.0/22
185.179.32.0/23
185.234.132.0/22
IPv6:
2a02:6c20::/32
2a0a:7780::/29
Signature Algorithm: sha256WithRSAEncryption
21:8e:4a:08:c8:b6:e1:91:e2:e8:2b:82:eb:b2:5c:71:31:b0:
8d:ce:b2:5c:4b:11:6d:cb:bf:ba:1e:99:2c:b7:0a:70:28:94:
9d:d6:8b:d4:1e:b2:ff:51:06:1f:d1:c9:ba:7d:89:a8:26:46:
dc:9a:49:74:ca:da:ce:1d:f8:4e:7c:d4:2d:19:18:e4:22:10:
b7:91:76:38:fc:6a:82:a3:d2:ae:6a:f2:47:32:39:5e:0f:d7:
fe:e2:11:6c:e9:7c:84:b0:51:57:1e:38:2e:c6:d5:da:65:03:
ba:d5:05:e9:ee:95:aa:f9:7a:d6:56:58:65:51:37:9f:f9:09:
72:fc:2e:8d:f2:60:6c:9d:f3:8f:85:dd:c0:67:3c:a4:2c:88:
a5:b7:c7:44:f0:fa:0a:4e:b9:58:4d:54:23:45:b5:f8:20:0f:
dd:a8:46:7f:12:97:40:67:8d:d4:50:8a:fd:0b:92:01:28:39:
0e:d0:82:bf:2d:61:58:87:79:42:ea:18:a8:54:08:6b:d0:83:
43:1c:e9:f0:97:47:4b:04:a5:d7:33:e6:4d:47:d0:97:51:be:
94:2b:f4:81:39:08:0f:2e:50:55:56:e2:92:4a:42:bc:8e:29:
04:50:6b:65:8e:eb:4c:d7:8d:91:75:61:4a:79:38:80:8f:b0:
71:5c:05:59
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIEAMYJETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
M2RhYTU3YTE4NTNkYjNmYjk0M2I5ZmIwYjI4ODE5ZGIzNzBiMjcxMB4XDTIyMDEw
MTExMDQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTJhM2UwMzU1OTYx
MjZmYzhlZjU4YzA3OTg5ZGU4ZjJmNjY4ZjE5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCH4K33nJsejUGxAgIiU8WsHTvsVNQfJASldY549vvna3Lz
FncHrf+9EdvauPsJzn4zPsDF4cZaAx0E1Jeyiqv9v4gUGdlmk6iFsSFU1pk9SpUi
3sl6CfD2/4x40krlPuwR6+BM+SlKu4Qxr0t/cIDBTb2sEOsS4nzb9a9SQXp1DfV5
pG0fWnnWXrGxWSAy2iWEwQ6jS853G9RPLFYzm2khFOkn/fnYzCcIton+hHYhu4EI
CUDUkM8CkEXZ9uLQ7S9vVlqcsTSPVNxz7CE5Cz9Wv4uK1P2cETjbr5qXgPwZqz+f
6bwZdPiPwFE8EIYm8nKVFlILRTkPQIZemTe+2vkCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBRSo+A1WWEm/I71jAeYnejy9mjxlzAfBgNVHSMEGDAWgBTj2qV6GFPbP7lD
ufsLKIGds3CycTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzQ5cWxlaGhUMnotNVE3bjdDeWlCbmJOd3NuRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmMvZDczODQzLTIxZjQtNGQzNi05MTQzLTFmYzczMzdkNDYyZS8x
L1VxUGdOVmxoSnZ5TzlZd0htSjNvOHZabzhaYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMv
ZDczODQzLTIxZjQtNGQzNi05MTQzLTFmYzczMzdkNDYyZS8xLzQ5cWxlaGhUMnot
NVE3bjdDeWlCbmJOd3NuRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwHgQCAAEwGAMEAlXRHAMEArk7kAMEAbmzIAMEArnq
hDAUBAIAAjAOAwUAKgJsIAMFAyoKd4AwDQYJKoZIhvcNAQELBQADggEBACGOSgjI
tuGR4ugrguuyXHExsI3OslxLEW3Lv7oemSy3CnAolJ3Wi9Qesv9RBh/Rybp9iagm
RtyaSXTK2s4d+E581C0ZGOQiELeRdjj8aoKj0q5q8kcyOV4P1/7iEWzpfISwUVce
OC7G1dplA7rVBenular5etZWWGVRN5/5CXL8Lo3yYGyd84+F3cBnPKQsiKW3x0Tw
+gpOuVhNVCNFtfggD92oRn8Sl0BnjdRQiv0LkgEoOQ7Qgr8tYViHeULqGKhUCGvQ
g0Mc6fCXR0sEpdcz5k1H0JdRvpQr9IE5CA8uUFVW4pJKQryOKQRQa2WO60zXjZF1
YUp5OICPsHFcBVk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:36 2025 by rpki-client