Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Dmb-MceGBGOjDcTPdpYriSaeRyc.roa
File: Dmb-MceGBGOjDcTPdpYriSaeRyc.roa (raw, json)
Hash identifier: alHyQIqLin/oo0+CtfvR8iMWa/8IPNrek+jYFvppSY0=
Subject key identifier: 0E:66:FE:31:C7:86:04:63:A3:0D:C4:CF:76:96:2B:89:26:9E:47:27
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 353FDA23
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Dmb-MceGBGOjDcTPdpYriSaeRyc.roa
Signing time: Sat 18 Jun 2022 14:10:44 +0000
ROA not before: Sat 18 Jun 2022 14:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.224.0/19 maxlen: 19
91.108.255.0/24 maxlen: 24
91.108.192.0/22 maxlen: 24
91.108.196.0/22 maxlen: 24
91.108.208.0/22 maxlen: 24
91.108.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893377059 (0x353fda23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jun 18 14:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e66fe31c7860463a30dc4cf76962b89269e4727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:38:f0:2e:5d:d6:29:14:0e:2a:1c:c5:c9:
4f:5e:a0:7a:44:bf:e2:11:6b:e7:db:24:fd:11:84:
cd:0b:23:3b:c7:a5:e0:c8:f2:bf:4b:9b:03:de:ce:
1b:f6:77:45:c5:d8:fe:12:3d:3e:08:90:17:c0:46:
3c:6b:4d:4e:d4:de:ed:b9:62:e7:12:54:8c:84:df:
78:c5:68:cc:9e:78:dd:44:76:75:90:85:db:2b:19:
8a:32:e3:3c:73:9c:e1:88:2b:5e:24:ea:11:ae:9b:
04:1e:cd:99:ba:e6:35:67:0f:a5:ca:16:c0:79:13:
90:d4:11:cc:d4:75:64:58:8f:fb:12:66:65:22:35:
2b:a8:09:4c:a8:a9:e2:fe:66:94:c2:58:1f:92:93:
4c:b4:5d:e1:a5:15:57:2a:7d:50:90:01:5e:a4:38:
be:3f:af:bd:8f:ad:c5:19:f9:42:f2:62:91:b9:ad:
ee:b7:8b:f9:a5:f2:f6:25:68:ed:02:b4:67:9f:c3:
a0:51:21:e9:23:91:33:30:ae:7a:cd:18:6e:04:44:
7f:5e:10:46:43:0f:bd:df:d1:bf:ab:f0:77:fd:5a:
e0:f1:12:99:69:56:12:d2:75:ec:b0:ce:83:58:c6:
27:31:8c:52:3a:97:59:10:9c:84:59:20:12:d2:5f:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:66:FE:31:C7:86:04:63:A3:0D:C4:CF:76:96:2B:89:26:9E:47:27
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Dmb-MceGBGOjDcTPdpYriSaeRyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/21
91.108.208.0/21
91.108.224.0/19
Signature Algorithm: sha256WithRSAEncryption
00:a3:eb:5c:61:d7:19:51:0d:8f:10:d1:e7:b4:a0:6c:0e:ee:
e8:c7:59:f3:42:99:b9:eb:ad:6b:9d:b7:02:b0:e2:fa:8a:ab:
1b:ff:da:8f:9c:df:90:65:aa:1e:54:a4:66:dc:dc:e1:99:f1:
26:da:af:65:18:fc:b8:b5:e6:38:6f:73:5e:1b:a3:8b:1b:72:
d8:bc:16:85:4b:ed:d8:aa:f2:c4:ae:d8:0b:ea:3e:57:f1:11:
ac:7e:fc:8a:51:10:4d:9e:68:a0:c7:f4:62:ef:ec:1a:14:d6:
a1:d0:93:5d:c9:60:8f:ff:5e:1e:2f:21:2d:b2:b4:69:80:73:
ce:fe:4a:ca:d8:33:58:60:be:31:3e:5d:59:8a:12:ba:00:e9:
c5:47:50:88:83:c3:b3:1c:67:e5:75:4d:9a:95:f9:1a:df:e6:
1e:da:ba:06:af:36:a1:8d:34:48:88:24:7a:d5:8d:5b:97:c0:
db:4d:8e:bf:31:da:40:7c:7d:f5:7c:68:78:de:ad:b4:3e:c2:
fd:e5:74:d0:3e:f6:9e:40:42:ab:2f:5d:09:ce:c6:d3:a8:59:
22:34:3a:99:8a:48:fc:b5:41:f3:d1:38:9e:1a:96:20:9e:e1:
57:c0:04:02:11:6f:24:73:07:88:d0:5c:87:5c:79:4c:a4:07:
90:1b:cd:34
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIENT/aIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWRlZWEzYjZhYWM0ZDgzNGI0ZmQ3YzJlNWQzYzM5N2Y2MWY0M2Q2MB4XDTIyMDYx
ODE0MTA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGU2NmZlMzFjNzg2
MDQ2M2EzMGRjNGNmNzY5NjJiODkyNjllNDcyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsJOPAuXdYpFA4qHMXJT16gekS/4hFr59sk/RGEzQsjO8el
4Mjyv0ubA97OG/Z3RcXY/hI9PgiQF8BGPGtNTtTe7bli5xJUjITfeMVozJ543UR2
dZCF2ysZijLjPHOc4YgrXiTqEa6bBB7NmbrmNWcPpcoWwHkTkNQRzNR1ZFiP+xJm
ZSI1K6gJTKip4v5mlMJYH5KTTLRd4aUVVyp9UJABXqQ4vj+vvY+txRn5QvJikbmt
7reL+aXy9iVo7QK0Z5/DoFEh6SORMzCues0YbgREf14QRkMPvd/Rv6vwd/1a4PES
mWlWEtJ17LDOg1jGJzGMUjqXWRCchFkgEtJfDSsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQOZv4xx4YEY6MNxM92liuJJp5HJzAfBgNVHSMEGDAWgBQ63uo7aqxNg0tP
18Ll08OX9h9D1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L090N3FPMnFzVFlOTFQ5ZkM1ZFBEbF9ZZlE5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvMDE1ZjQ0LTBmNGMtNDcxNC04NjE1LTIzYjA3MmY1YjE4OC8x
L0RtYi1NY2VHQkdPakRjVFBkcFlyaVNhZVJ5Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
MDE1ZjQ0LTBmNGMtNDcxNC04NjE1LTIzYjA3MmY1YjE4OC8xL090N3FPMnFzVFlO
TFQ5ZkM1ZFBEbF9ZZlE5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA1tswAMEA1ts0AMEBVts4DANBgkq
hkiG9w0BAQsFAAOCAQEAAKPrXGHXGVENjxDR57SgbA7u6MdZ80KZueuta523ArDi
+oqrG//aj5zfkGWqHlSkZtzc4ZnxJtqvZRj8uLXmOG9zXhujixty2LwWhUvt2Kry
xK7YC+o+V/ERrH78ilEQTZ5ooMf0Yu/sGhTWodCTXclgj/9eHi8hLbK0aYBzzv5K
ytgzWGC+MT5dWYoSugDpxUdQiIPDsxxn5XVNmpX5Gt/mHtq6Bq82oY00SIgketWN
W5fA202OvzHaQHx99XxoeN6ttD7C/eV00D72nkBCqy9dCc7G06hZIjQ6mYpI/LVB
89E4nhqWIJ7hV8AEAhFvJHMHiNBch1x5TKQHkBvNNA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:03 2025 by rpki-client