Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/3Zs3JVrAG-LKSx7rEV4JcsYyEJ8.roa
File: 3Zs3JVrAG-LKSx7rEV4JcsYyEJ8.roa (raw, json)
Hash identifier: JbhP1rNH6xV/iF/nwFglJL5BD8aL0BzoDuP3yXvYTxE=
Subject key identifier: DD:9B:37:25:5A:C0:1B:E2:CA:4B:1E:EB:11:5E:09:72:C6:32:10:9F
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 0A187591
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/3Zs3JVrAG-LKSx7rEV4JcsYyEJ8.roa
Signing time: Sat 01 Jan 2022 00:54:05 +0000
ROA not before: Sat 01 Jan 2022 00:54:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 185.126.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169375121 (0xa187591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jan 1 00:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd9b37255ac01be2ca4b1eeb115e0972c632109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:5e:87:c5:0f:c7:e9:59:9f:fb:28:25:31:
69:5a:e3:7a:e9:38:f1:e8:a1:bb:23:c7:2e:ea:57:
1a:27:bc:ca:db:b9:40:46:3b:c6:60:ff:a4:f1:fe:
f6:53:32:96:a5:e0:8a:56:a7:10:dd:60:35:8f:73:
af:ae:91:60:58:3a:91:ed:c4:2e:64:df:7d:71:98:
d6:84:a8:d1:df:b7:b2:ec:72:7d:fa:09:21:31:33:
41:bb:83:56:51:c9:4d:88:22:2c:3b:df:55:d5:85:
c8:e2:c5:dc:7a:c7:34:fe:69:14:6e:95:53:3c:78:
fd:cf:a1:58:fe:1c:43:fd:1e:d9:80:b0:4c:d8:77:
ea:13:c2:31:9e:16:2b:66:f1:9e:96:d5:cc:9f:b0:
7d:b9:1c:d5:6d:08:f6:f5:83:54:88:4a:0c:27:9c:
6b:f2:77:c3:f6:c0:ba:d0:5c:2d:ed:71:9d:d2:07:
2c:a9:13:f5:d0:9e:80:4b:ae:ee:d0:f4:e1:c8:d8:
22:3e:c3:66:34:b2:32:9d:6a:dd:19:1c:d3:f1:16:
7f:b6:5a:cc:3a:2a:e3:f7:27:56:f3:c7:97:e4:f5:
c3:bf:c8:45:84:f7:04:f7:7d:25:62:8b:cf:42:78:
ed:ab:70:c9:07:34:aa:3b:d3:cd:68:21:8f:e5:ec:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9B:37:25:5A:C0:1B:E2:CA:4B:1E:EB:11:5E:09:72:C6:32:10:9F
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/3Zs3JVrAG-LKSx7rEV4JcsYyEJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:98:b3:d6:75:3e:a2:f6:9a:e0:5f:f6:62:3f:4d:47:67:73:
99:5c:af:d5:43:22:f9:fb:1f:c8:6b:3e:5d:b0:d3:5b:f9:b9:
14:95:0d:01:3c:f0:9c:4d:ef:d2:ec:0f:2e:85:db:3f:1b:9f:
27:05:1c:90:22:95:ba:68:a9:52:10:05:8f:c5:8b:d2:dc:a7:
fe:98:03:5f:04:62:2e:d2:44:74:85:d0:9e:94:3b:ef:62:f0:
43:c6:67:4f:8a:6e:9a:4c:4b:0d:da:17:10:d7:6d:bc:ab:59:
79:ec:d5:9a:cc:01:42:be:35:62:99:00:ed:54:6b:af:7d:f6:
29:4c:fc:14:cd:30:34:ea:63:e7:36:2b:a6:0f:57:0b:2f:92:
89:4c:12:f3:02:37:44:7c:c0:16:41:24:53:a3:9f:43:dc:54:
f3:65:4c:c0:46:aa:27:27:48:71:d2:37:49:e5:e9:ac:bb:c8:
28:be:4c:53:91:0b:9b:12:7f:e4:06:82:81:40:74:dc:3b:5f:
8a:76:b5:ba:0e:74:d6:b8:2c:18:f7:e6:d1:82:c2:16:1e:d7:
a2:9f:56:c1:37:db:30:95:e9:a4:fc:58:d2:3d:18:b3:b4:d5:
3e:6c:b8:b8:80:62:d0:9e:d4:46:e9:f3:55:d2:b5:15:77:78:
f9:08:69:0f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEChh1kTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZjIwM2MxNDE5ZWM2YTIxZTY2MTI3MjAzZjUxYzFmYTc0ZGMwNDRmMB4XDTIyMDEw
MTAwNTQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQ5YjM3MjU1YWMw
MWJlMmNhNGIxZWViMTE1ZTA5NzJjNjMyMTA5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgJXofFD8fpWZ/7KCUxaVrjeuk48eihuyPHLupXGie8ytu5
QEY7xmD/pPH+9lMylqXgilanEN1gNY9zr66RYFg6ke3ELmTffXGY1oSo0d+3suxy
ffoJITEzQbuDVlHJTYgiLDvfVdWFyOLF3HrHNP5pFG6VUzx4/c+hWP4cQ/0e2YCw
TNh36hPCMZ4WK2bxnpbVzJ+wfbkc1W0I9vWDVIhKDCeca/J3w/bAutBcLe1xndIH
LKkT9dCegEuu7tD04cjYIj7DZjSyMp1q3Rkc0/EWf7ZazDoq4/cnVvPHl+T1w7/I
RYT3BPd9JWKLz0J47atwyQc0qjvTzWghj+Xse00CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTdmzclWsAb4spLHusRXglyxjIQnzAfBgNVHSMEGDAWgBR/IDwUGexqIeZh
JyA/UcH6dNwETzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Z5QThGQm5zYWlIbVlTY2dQMUhCLW5UY0JFOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvYzkwNDY5LWU2MzgtNGE1Ny05MmNlLTUzNGU3M2NjM2I3Yy8x
LzNaczNKVnJBRy1MS1N4N3JFVjRKY3NZeUVKOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
YzkwNDY5LWU2MzgtNGE1Ny05MmNlLTUzNGU3M2NjM2I3Yy8xL2Z5QThGQm5zYWlI
bVlTY2dQMUhCLW5UY0JFOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl+nDANBgkqhkiG9w0BAQsFAAOC
AQEAm5iz1nU+ovaa4F/2Yj9NR2dzmVyv1UMi+fsfyGs+XbDTW/m5FJUNATzwnE3v
0uwPLoXbPxufJwUckCKVumipUhAFj8WL0tyn/pgDXwRiLtJEdIXQnpQ772LwQ8Zn
T4pumkxLDdoXENdtvKtZeezVmswBQr41YpkA7VRrr332KUz8FM0wNOpj5zYrpg9X
Cy+SiUwS8wI3RHzAFkEkU6OfQ9xU82VMwEaqJydIcdI3SeXprLvIKL5MU5ELmxJ/
5AaCgUB03Dtfina1ug501rgsGPfm0YLCFh7Xop9WwTfbMJXppPxY0j0Ys7TVPmy4
uIBi0J7URunzVdK1FXd4+QhpDw==
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:07:59 2025 by rpki-client