Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/_Ymjnq1ti-HpO40O_tsQDoKGEEc.roa
File: _Ymjnq1ti-HpO40O_tsQDoKGEEc.roa (raw, json)
Hash identifier: 2Fxd0uW+AOYU4Tdk7pMDziGOW53CNhxx7HamJG8xoDQ=
Subject key identifier: FD:89:A3:9E:AD:6D:8B:E1:E9:3B:8D:0E:FE:DB:10:0E:82:86:10:47
Certificate issuer: /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial: 01857315C4E9D03E0D0AAE94267DBB4326C6
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/_Ymjnq1ti-HpO40O_tsQDoKGEEc.roa
Signing time: Mon 02 Jan 2023 15:24:44 +0000
ROA not before: Mon 02 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208143
IP address blocks: 185.179.34.0/24 maxlen: 24
2a02:6c20:5::/48 maxlen: 48
2a02:6c20:810::/48 maxlen: 48
2a02:6c20:828::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c4:e9:d0:3e:0d:0a:ae:94:26:7d:bb:43:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Validity
Not Before: Jan 2 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd89a39ead6d8be1e93b8d0efedb100e82861047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:e9:4c:fe:3a:f0:60:2b:9d:ad:8f:5f:0e:
72:5b:98:b0:82:3b:63:f6:58:00:9d:60:20:f9:49:
fe:8d:ac:50:7b:ca:3c:ee:82:a9:56:1f:2f:97:76:
0b:3f:ed:49:30:29:5e:82:1e:0a:e2:3b:c6:2a:05:
05:2d:35:c7:fb:78:cd:76:a5:09:86:cd:d0:da:66:
d7:33:09:0e:f3:e9:22:82:c0:fa:04:4e:46:06:2f:
76:70:6d:e2:0f:14:e5:7b:e4:98:a0:28:d3:c9:82:
7c:3e:1f:d9:fe:5d:64:38:2e:7b:ea:79:06:b6:04:
65:e0:5f:dc:93:2f:b7:23:46:51:95:67:99:fe:1a:
63:35:ee:e4:7f:08:e0:71:47:8f:3e:af:64:4a:9d:
2b:cd:cc:28:3e:56:dd:54:7c:af:f2:ae:9b:42:5a:
ca:54:fc:e6:b7:67:ec:cb:6c:d6:4e:29:a6:4d:f4:
3c:bc:f2:cd:c7:1f:b3:08:6a:d1:cd:0e:6f:73:11:
7a:e0:0f:93:2e:7c:3f:31:38:6c:33:32:5e:6a:d8:
e2:1a:94:02:b3:ef:f9:67:29:50:b0:e6:d0:8c:3f:
5f:e9:10:80:b5:64:27:6c:4d:bc:80:d9:24:3d:3a:
cb:50:1a:c9:db:3e:8a:71:5b:3f:f5:46:ce:ce:4e:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:A3:9E:AD:6D:8B:E1:E9:3B:8D:0E:FE:DB:10:0E:82:86:10:47
X509v3 Authority Key Identifier:
keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/_Ymjnq1ti-HpO40O_tsQDoKGEEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.34.0/24
IPv6:
2a02:6c20:5::/48
2a02:6c20:810::/48
2a02:6c20:828::/48
Signature Algorithm: sha256WithRSAEncryption
23:e2:39:50:94:21:ab:8e:ad:f3:bc:59:2a:97:1d:11:e2:9b:
b3:52:d9:3b:30:72:c9:7e:bc:73:7d:8b:9d:41:30:59:11:3b:
76:ab:0a:86:5d:14:ae:6e:01:49:65:8a:e4:21:1d:48:23:46:
72:7d:d3:77:a4:4c:be:ec:ab:ba:d0:3b:ae:ff:d2:3d:62:5f:
94:d4:89:cc:d8:25:74:f3:64:eb:1e:c3:b2:ed:3d:a6:12:39:
32:65:5f:58:06:5c:cd:c5:b9:19:43:54:3b:cf:cf:1c:eb:ec:
ec:40:16:33:86:d4:0f:bd:7d:12:19:b3:51:e2:e7:d3:17:05:
12:91:05:c5:b2:c2:bb:38:c3:ae:c9:83:7c:06:ca:9f:c3:db:
c3:d8:3f:1e:f1:d2:aa:e7:9a:bf:bc:6a:87:08:8a:64:d3:14:
06:0d:a5:f2:b2:7b:38:2c:62:c4:2f:fa:32:c6:c4:5c:1c:e2:
4b:55:18:18:76:61:44:9d:0d:b2:a6:fc:b7:d0:a2:2a:bf:57:
aa:b1:88:f2:55:90:c0:b4:b8:59:7b:07:8a:23:1e:84:c0:89:
a6:ae:e5:02:a3:71:ca:46:b1:d0:ac:49:54:27:98:99:f0:fe:
3a:22:79:95:c5:e3:50:88:71:7e:6f:4c:81:ab:f6:9e:bf:77:
69:1f:06:ff
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVzFcTp0D4NCq6UJn27QybGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGFhNTdhMTg1M2RiM2ZiOTQzYjlmYjBiMjg4MTlkYjM3
MGIyNzEwHhcNMjMwMTAyMTUyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDg5YTM5ZWFkNmQ4YmUxZTkzYjhkMGVmZWRiMTAwZTgyODYxMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr3pTP468GArna2PXw5yW5iwgjtj
9lgAnWAg+Un+jaxQe8o87oKpVh8vl3YLP+1JMClegh4K4jvGKgUFLTXH+3jNdqUJ
hs3Q2mbXMwkO8+kigsD6BE5GBi92cG3iDxTle+SYoCjTyYJ8Ph/Z/l1kOC576nkG
tgRl4F/cky+3I0ZRlWeZ/hpjNe7kfwjgcUePPq9kSp0rzcwoPlbdVHyv8q6bQlrK
VPzmt2fsy2zWTimmTfQ8vPLNxx+zCGrRzQ5vcxF64A+TLnw/MThsMzJeatjiGpQC
s+/5ZylQsObQjD9f6RCAtWQnbE28gNkkPTrLUBrJ2z6KcVs/9UbOzk4XyQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFP2Jo56tbYvh6TuNDv7bEA6ChhBHMB8GA1UdIwQY
MBaAFOPapXoYU9s/uUO5+wsogZ2zcLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlxbGVoaFQyei01UTduN0N5aUJuYk53c25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNzM4NDMtMjFmNC00ZDM2LTkxNDMt
MWZjNzMzN2Q0NjJlLzEvX1ltam5xMXRpLUhwTzQwT190c1FEb0tHRUVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNzM4NDMtMjFmNC00ZDM2LTkxNDMtMWZjNzMzN2Q0NjJl
LzEvNDlxbGVoaFQyei01UTduN0N5aUJuYk53c25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAubMiMCEE
AgACMBsDBwAqAmwgAAUDBwAqAmwgCBADBwAqAmwgCCgwDQYJKoZIhvcNAQELBQAD
ggEBACPiOVCUIauOrfO8WSqXHRHim7NS2Tswcsl+vHN9i51BMFkRO3arCoZdFK5u
AUlliuQhHUgjRnJ903ekTL7sq7rQO67/0j1iX5TUiczYJXTzZOsew7LtPaYSOTJl
X1gGXM3FuRlDVDvPzxzr7OxAFjOG1A+9fRIZs1Hi59MXBRKRBcWywrs4w67Jg3wG
yp/D28PYPx7x0qrnmr+8aocIimTTFAYNpfKyezgsYsQv+jLGxFwc4ktVGBh2YUSd
DbKm/LfQoiq/V6qxiPJVkMC0uFl7B4ojHoTAiaau5QKjccpGsdCsSVQnmJnw/joi
eZXF41CIcX5vTIGr9p6/d2kfBv8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:27 2025 by rpki-client