Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Dq22M3JoAamiC0t12wrgVLGoAjU.roa
File: Dq22M3JoAamiC0t12wrgVLGoAjU.roa (raw, json)
Hash identifier: XdD/vJQXgoBr06GCeA1kcUbntNDbz6y6R8gY8ERlQPA=
Subject key identifier: 0E:AD:B6:33:72:68:01:A9:A2:0B:4B:75:DB:0A:E0:54:B1:A8:02:35
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 0E0B820A
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Dq22M3JoAamiC0t12wrgVLGoAjU.roa
Signing time: Sat 01 Jan 2022 15:57:54 +0000
ROA not before: Sat 01 Jan 2022 15:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 185.112.245.0/24 maxlen: 24
185.112.244.0/24 maxlen: 24
185.112.246.0/24 maxlen: 24
185.112.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235635210 (0xe0b820a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jan 1 15:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eadb633726801a9a20b4b75db0ae054b1a80235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:ff:29:a4:50:e8:40:84:43:34:7e:ca:99:
05:00:e3:bb:95:69:34:1f:b8:4f:bb:46:05:bf:56:
d5:49:a6:81:82:3c:6a:58:47:d1:11:9e:73:d3:7d:
e2:cc:4d:1f:6f:f4:d8:87:c5:84:31:b3:c9:03:48:
f4:1c:03:ca:c9:6c:83:74:c6:db:87:27:a1:ed:5c:
67:f4:09:92:61:d1:7a:3c:af:63:f8:fb:4b:ee:bb:
5c:82:a7:93:b5:0f:ab:c6:74:d0:61:65:26:6f:71:
04:77:53:5f:32:0f:c2:8d:57:ce:f3:27:c2:6a:f8:
09:bb:c4:ca:4d:0a:b5:60:5d:86:16:12:dc:45:c4:
a3:89:9a:a8:c8:ed:c1:6a:4b:29:28:b6:52:36:25:
82:af:33:61:5b:6d:4f:20:2f:8d:55:15:81:42:f0:
3a:a5:1e:ee:ac:2b:12:82:ba:08:57:3b:0a:48:b6:
77:05:3f:cc:e3:1d:bf:47:52:92:38:f3:41:01:6b:
13:43:65:30:6c:8b:9a:49:32:0e:bf:7f:2b:af:b0:
55:5d:01:78:12:c4:d1:31:37:02:a2:ba:cc:7d:b3:
cb:e6:a6:fd:ef:b9:98:7b:d5:ea:58:4d:63:32:44:
0b:ee:14:2d:a2:3d:5c:59:01:13:b8:63:b3:f9:b7:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:B6:33:72:68:01:A9:A2:0B:4B:75:DB:0A:E0:54:B1:A8:02:35
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Dq22M3JoAamiC0t12wrgVLGoAjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:0d:8f:11:67:0c:cc:eb:61:e6:0a:62:df:f7:25:0a:53:c1:
e0:2c:14:c3:5f:dc:e2:60:3c:d4:23:df:f0:3d:55:52:e7:f8:
84:5f:3f:90:8d:df:f2:fb:66:db:b6:cb:4b:f7:65:7c:37:2a:
38:f1:bf:f6:5d:d9:57:f2:82:47:fa:a2:80:12:59:b7:83:0e:
19:7b:2a:76:bf:94:23:84:9f:89:3c:e8:5b:9c:45:72:6c:21:
60:bd:92:bc:48:4f:ac:6c:ec:5d:79:ef:3c:28:32:10:df:d3:
7d:13:2a:41:e3:4b:96:d7:e1:50:ac:bb:d3:b9:31:71:8d:4e:
91:d1:26:1d:a6:43:52:4a:ad:66:77:b7:c5:fc:60:0f:ea:7d:
04:6e:c9:e0:66:dc:2d:d6:77:4e:10:4a:ff:7e:b5:2b:2f:d5:
59:6f:fa:4a:8f:e8:59:3c:b6:a3:6c:bd:38:f4:ac:5a:ac:19:
74:62:7a:74:64:dc:b2:04:4b:a4:b2:14:d3:8d:bd:2b:7e:03:
07:f4:1b:c5:21:e3:08:bc:9c:ec:21:f4:8b:fc:f9:a3:89:c8:
d1:80:0d:2f:6a:c3:ed:72:f8:be:87:5d:a9:43:cf:45:11:81:
4e:17:90:ed:c6:67:02:26:23:0f:15:50:3e:68:e1:c3:10:3a:
06:14:c7:91
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDguCCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NWRhNzU3MWM1ZWIxM2IxYWU0ZjQ0MTdjZWZlYzJiZDc3OTAyZTJkMB4XDTIyMDEw
MTE1NTc1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGVhZGI2MzM3MjY4
MDFhOWEyMGI0Yjc1ZGIwYWUwNTRiMWE4MDIzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN7W/ymkUOhAhEM0fsqZBQDju5VpNB+4T7tGBb9W1UmmgYI8
alhH0RGec9N94sxNH2/02IfFhDGzyQNI9BwDyslsg3TG24cnoe1cZ/QJkmHRejyv
Y/j7S+67XIKnk7UPq8Z00GFlJm9xBHdTXzIPwo1XzvMnwmr4CbvEyk0KtWBdhhYS
3EXEo4maqMjtwWpLKSi2UjYlgq8zYVttTyAvjVUVgULwOqUe7qwrEoK6CFc7Cki2
dwU/zOMdv0dSkjjzQQFrE0NlMGyLmkkyDr9/K6+wVV0BeBLE0TE3AqK6zH2zy+am
/e+5mHvV6lhNYzJEC+4ULaI9XFkBE7hjs/m3gUkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQOrbYzcmgBqaILS3XbCuBUsagCNTAfBgNVHSMEGDAWgBQF2nVxxesTsa5P
RBfO/sK9d5AuLTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JkcDFjY1hyRTdHdVQwUVh6djdDdlhlUUxpMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvZjY0ZjgzLTM3MGEtNDkwMS04YmZhLTM2NTUzMDJiZjAwNS8x
L0RxMjJNM0pvQWFtaUMwdDEyd3JnVkxHb0FqVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQv
ZjY0ZjgzLTM3MGEtNDkwMS04YmZhLTM2NTUzMDJiZjAwNS8xL0JkcDFjY1hyRTdH
dVQwUVh6djdDdlhlUUxpMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlw9DANBgkqhkiG9w0BAQsFAAOC
AQEAjw2PEWcMzOth5gpi3/clClPB4CwUw1/c4mA81CPf8D1VUuf4hF8/kI3f8vtm
27bLS/dlfDcqOPG/9l3ZV/KCR/qigBJZt4MOGXsqdr+UI4SfiTzoW5xFcmwhYL2S
vEhPrGzsXXnvPCgyEN/TfRMqQeNLltfhUKy707kxcY1OkdEmHaZDUkqtZne3xfxg
D+p9BG7J4GbcLdZ3ThBK/361Ky/VWW/6So/oWTy2o2y9OPSsWqwZdGJ6dGTcsgRL
pLIU0429K34DB/QbxSHjCLyc7CH0i/z5o4nI0YANL2rD7XL4voddqUPPRRGBTheQ
7cZnAiYjDxVQPmjhwxA6BhTHkQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:19:43 2025 by rpki-client