Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/DVDgCyT11RBjcjrw0kDtBMfTAlM.roa
File: DVDgCyT11RBjcjrw0kDtBMfTAlM.roa (raw, json)
Hash identifier: yWOEDx6UJOzPF+0vZPjFHugNa5hbtv+TRAPPGkUYeYk=
Subject key identifier: 0D:50:E0:0B:24:F5:D5:10:63:72:3A:F0:D2:40:ED:04:C7:D3:02:53
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 01856E78C8BBAA25E203BAC892FC6724F20D
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/DVDgCyT11RBjcjrw0kDtBMfTAlM.roa
Signing time: Sun 01 Jan 2023 17:54:47 +0000
ROA not before: Sun 01 Jan 2023 17:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 93.185.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:c8:bb:aa:25:e2:03:ba:c8:92:fc:67:24:f2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Jan 1 17:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d50e00b24f5d51063723af0d240ed04c7d30253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:c3:b2:54:6d:6b:a5:15:d3:fa:b8:b7:79:
c4:e5:e5:2a:89:ac:7f:05:77:57:3a:6a:ce:05:4e:
20:55:81:c1:78:c1:73:83:b7:3c:d8:b7:59:d0:fa:
f0:33:a5:8b:e1:3b:1f:12:5b:5b:02:53:c4:c8:39:
e3:c4:57:70:69:0a:57:98:c1:3e:8f:4f:71:67:b7:
9e:2f:f7:40:0f:58:f1:7c:1b:c5:11:6d:c5:b7:98:
f8:fe:83:81:95:6c:27:ac:78:c6:ef:32:1f:46:a4:
0e:78:cd:c7:ef:c7:8f:bc:f7:cb:b3:0e:d0:e6:b2:
e0:88:79:51:15:79:c3:78:f1:91:f8:3b:ed:53:0c:
3a:ff:7f:97:b4:20:d6:5b:9e:19:5f:d4:37:fe:f6:
f9:e6:50:82:0b:a6:c7:da:80:95:fc:da:04:df:38:
df:c6:16:3f:12:36:95:37:62:77:ca:37:03:3f:5b:
a4:08:ee:05:a2:76:9f:58:ce:4a:89:ed:a0:ce:47:
70:86:d6:57:0a:ba:12:b2:b9:54:bb:b5:89:9a:b2:
5a:b8:82:28:36:d2:71:36:f2:cb:10:a8:38:a1:d8:
bf:23:5e:4d:b0:87:e1:1e:c5:06:42:ec:d6:53:99:
51:35:52:79:10:48:68:b2:32:27:e0:b9:39:8f:0f:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:E0:0B:24:F5:D5:10:63:72:3A:F0:D2:40:ED:04:C7:D3:02:53
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/DVDgCyT11RBjcjrw0kDtBMfTAlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.152.0/22
Signature Algorithm: sha256WithRSAEncryption
38:da:4f:bb:58:0f:ab:90:da:67:8a:21:70:c9:23:bb:78:87:
d9:33:83:1a:ea:fa:a1:6f:33:eb:03:2c:12:65:a7:6f:6b:97:
78:a6:64:1b:d1:5f:8a:98:12:77:f9:43:91:5e:a7:b7:ac:4a:
c0:95:ca:0c:98:d3:9b:e5:04:af:0a:23:eb:b2:20:78:ad:44:
53:09:ad:c0:78:d1:4c:33:9c:bc:c2:e4:e3:bc:bd:c8:42:82:
a0:01:22:85:61:38:f0:cc:15:25:b1:4a:ef:0b:a6:c6:37:2c:
da:1c:b2:e1:c6:5c:ca:7c:11:68:62:03:c3:ea:de:c2:03:9e:
6c:37:8f:b8:7f:20:b0:e6:b1:34:20:67:5b:64:ec:c5:7e:15:
ad:70:63:6b:ed:fe:3c:f8:03:4a:5b:6b:5f:4b:b2:e8:ff:19:
8b:68:37:21:36:3a:e2:9b:1d:af:e5:bb:f1:ba:95:ed:e4:6d:
c0:1b:7d:7a:91:b1:a1:22:40:f9:8b:5c:ee:34:ce:14:be:db:
7d:f9:99:6f:04:93:19:b2:df:c3:06:f4:4a:61:6b:78:57:08:
99:b2:3a:25:2b:46:d5:48:46:6d:9f:a8:ca:bc:ab:17:2a:cc:
58:ee:6d:d2:29:62:12:89:bf:8f:e4:cc:4c:53:57:72:38:13:
3c:46:73:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVueMi7qiXiA7rIkvxnJPINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOWQ5NzUxZjM2NzVmNTEzMzI3MzRkYTY4ZWE5NjAyNjAw
NDViMTIwHhcNMjMwMTAxMTc1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDUwZTAwYjI0ZjVkNTEwNjM3MjNhZjBkMjQwZWQwNGM3ZDMwMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTrDslRta6UV0/q4t3nE5eUqiax/
BXdXOmrOBU4gVYHBeMFzg7c82LdZ0PrwM6WL4TsfEltbAlPEyDnjxFdwaQpXmME+
j09xZ7eeL/dAD1jxfBvFEW3Ft5j4/oOBlWwnrHjG7zIfRqQOeM3H78ePvPfLsw7Q
5rLgiHlRFXnDePGR+DvtUww6/3+XtCDWW54ZX9Q3/vb55lCCC6bH2oCV/NoE3zjf
xhY/EjaVN2J3yjcDP1ukCO4FonafWM5Kie2gzkdwhtZXCroSsrlUu7WJmrJauIIo
NtJxNvLLEKg4odi/I15NsIfhHsUGQuzWU5lRNVJ5EEhosjIn4Lk5jw/6VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1Q4Ask9dUQY3I68NJA7QTH0wJTMB8GA1UdIwQY
MBaAFKKdl1HzZ19RMyc02mjqlgJgBFsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMt
MDc5YmEwNTcwZjc1LzEvRFZEZ0N5VDExUkJqY2pydzBrRHRCTWZUQWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMtMDc5YmEwNTcwZjc1
LzEvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXbmYMA0G
CSqGSIb3DQEBCwUAA4IBAQA42k+7WA+rkNpniiFwySO7eIfZM4Ma6vqhbzPrAywS
Zadva5d4pmQb0V+KmBJ3+UORXqe3rErAlcoMmNOb5QSvCiPrsiB4rURTCa3AeNFM
M5y8wuTjvL3IQoKgASKFYTjwzBUlsUrvC6bGNyzaHLLhxlzKfBFoYgPD6t7CA55s
N4+4fyCw5rE0IGdbZOzFfhWtcGNr7f48+ANKW2tfS7Lo/xmLaDchNjrimx2v5bvx
upXt5G3AG316kbGhIkD5i1zuNM4Uvtt9+ZlvBJMZst/DBvRKYWt4VwiZsjolK0bV
SEZtn6jKvKsXKsxY7m3SKWISib+P5MxMU1dyOBM8RnM2
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:28 2025 by rpki-client