Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/sRw3GfPEB9fYWnZybyjkDvjtXCU.roa
File: sRw3GfPEB9fYWnZybyjkDvjtXCU.roa (raw, json)
Hash identifier: mUgbQE7ahLV2+afrIpknWU5PV999MNw7grqEyicJtIo=
Subject key identifier: B1:1C:37:19:F3:C4:07:D7:D8:5A:76:72:6F:28:E4:0E:F8:ED:5C:25
Certificate issuer: /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial: D394
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/sRw3GfPEB9fYWnZybyjkDvjtXCU.roa
Signing time: Tue 25 Jan 2022 18:23:01 +0000
ROA not before: Tue 25 Jan 2022 18:23:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.122.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54164 (0xd394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Validity
Not Before: Jan 25 18:23:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b11c3719f3c407d7d85a76726f28e40ef8ed5c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:49:e3:6d:28:fc:f4:58:1f:36:53:1b:22:
49:43:19:d3:76:d1:fb:9f:8f:c6:6e:6a:74:18:d2:
6c:ad:78:62:1b:bc:e0:e3:c7:98:02:74:9d:dd:d4:
0c:f9:95:ea:a2:87:ff:35:cd:87:20:27:4f:dc:98:
b2:57:ab:96:4b:d1:fd:3e:01:d8:30:bf:86:2e:13:
ce:df:14:f9:f1:47:1f:06:f3:e5:2c:83:ea:ef:d7:
b1:12:6f:39:23:48:9d:c1:dc:65:d7:bb:4b:3a:d5:
5c:61:83:41:27:3d:69:38:9e:52:2e:84:75:bd:51:
f6:99:86:9a:11:ae:47:a2:2b:41:e4:cd:4b:d1:ff:
72:e6:23:7c:1b:ae:c4:41:0b:22:3b:78:a9:f2:ca:
f1:ab:7f:c1:fd:a1:74:80:d6:03:54:89:20:be:78:
7b:2b:84:65:d8:ba:3b:c3:da:3c:75:34:76:b4:e6:
bf:2a:f9:31:e4:57:f7:8f:32:5c:32:ef:85:5e:86:
99:59:2d:18:9f:27:8e:ef:05:3f:82:73:7b:eb:84:
f3:14:4c:0c:5c:11:51:91:57:fb:d0:6f:3a:2c:0b:
13:79:88:35:9d:96:cb:e0:8d:44:6a:ee:d2:3e:2f:
1a:70:72:a2:f0:67:b2:18:d9:26:f8:3c:3c:dd:31:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:37:19:F3:C4:07:D7:D8:5A:76:72:6F:28:E4:0E:F8:ED:5C:25
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/sRw3GfPEB9fYWnZybyjkDvjtXCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
22:37:b3:f4:b1:e9:e5:24:a1:c8:f8:d6:6c:d6:c4:f1:42:65:
23:7b:ac:56:84:e2:7f:69:cd:11:6c:87:c7:90:dc:05:9c:56:
9c:82:9c:53:5a:fd:da:f0:14:13:b6:8f:75:a0:06:49:56:94:
21:54:72:ab:c8:a7:d9:93:d6:c5:44:66:56:ea:c5:13:f3:e3:
92:83:20:db:91:56:e8:2c:d5:77:07:20:05:92:9c:e4:69:47:
67:90:cc:61:43:ef:94:bb:89:ea:d6:d4:e8:90:36:5c:ab:27:
c7:90:59:f6:48:7e:ee:d8:fe:a4:5b:46:00:13:f3:2e:b0:22:
b5:c0:73:e3:b4:5c:3b:85:aa:a7:8a:32:8e:c0:5e:81:44:fd:
2a:2f:b6:ec:d2:4a:3e:ee:16:09:30:aa:6f:c4:5d:d6:af:cb:
25:e7:4e:4e:b0:27:83:ed:24:2b:df:23:a4:2d:37:bc:e1:90:
60:53:e4:7f:b3:97:a5:38:eb:dc:a4:11:e7:dc:95:7b:ff:55:
42:a8:e9:79:bb:9b:1c:5c:e0:39:59:2f:be:76:2f:be:ca:93:
8a:2f:df:25:bc:c0:58:d7:d6:a1:38:28:37:c5:44:38:21:ee:
4a:7f:85:3c:ad:2d:3f:9c:06:52:e5:27:97:24:2a:54:d1:f1:
14:a1:fa:05
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDANOUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRi
ZTBjYWU2ZGMzYzkxOGM3ZWE4Y2QyNzhmNDk3Zjg1NGRjYTNkYzgwHhcNMjIwMTI1
MTgyMzAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiMTFjMzcxOWYzYzQw
N2Q3ZDg1YTc2NzI2ZjI4ZTQwZWY4ZWQ1YzI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5GtJ420o/PRYHzZTGyJJQxnTdtH7n4/Gbmp0GNJsrXhiG7zg
48eYAnSd3dQM+ZXqoof/Nc2HICdP3JiyV6uWS9H9PgHYML+GLhPO3xT58UcfBvPl
LIPq79exEm85I0idwdxl17tLOtVcYYNBJz1pOJ5SLoR1vVH2mYaaEa5HoitB5M1L
0f9y5iN8G67EQQsiO3ip8srxq3/B/aF0gNYDVIkgvnh7K4Rl2Lo7w9o8dTR2tOa/
Kvkx5Ff3jzJcMu+FXoaZWS0YnyeO7wU/gnN764TzFEwMXBFRkVf70G86LAsTeYg1
nZbL4I1Eau7SPi8acHKi8GeyGNkm+Dw83TGbmwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLEcNxnzxAfX2Fp2cm8o5A747VwlMB8GA1UdIwQYMBaAFNvgyubcPJGMfqjN
J49Jf4VNyj3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Mi1ESzV0dzhrWXgtcU0wbmowbF9oVTNLUGNnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85NC9hMDVkOTEtZTE0Zi00YmRmLThmOTktMjg0OWViNzMzNGI2LzEv
c1J3M0dmUEVCOWZZV25aeWJ5amtEdmp0WENVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9h
MDVkOTEtZTE0Zi00YmRmLThmOTktMjg0OWViNzMzNGI2LzEvMi1ESzV0dzhrWXgt
cU0wbmowbF9oVTNLUGNnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXrOMA0GCSqGSIb3DQEBCwUAA4IB
AQAiN7P0senlJKHI+NZs1sTxQmUje6xWhOJ/ac0RbIfHkNwFnFacgpxTWv3a8BQT
to91oAZJVpQhVHKryKfZk9bFRGZW6sUT8+OSgyDbkVboLNV3ByAFkpzkaUdnkMxh
Q++Uu4nq1tTokDZcqyfHkFn2SH7u2P6kW0YAE/MusCK1wHPjtFw7haqnijKOwF6B
RP0qL7bs0ko+7hYJMKpvxF3Wr8sl505OsCeD7SQr3yOkLTe84ZBgU+R/s5elOOvc
pBHn3JV7/1VCqOl5u5scXOA5WS++di++ypOKL98lvMBY19ahOCg3xUQ4Ie5Kf4U8
rS0/nAZS5SeXJCpU0fEUofoF
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:43 2025 by rpki-client