Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/e-DmHY9G14wNwBS8XSogQHSB0PA.roa
File: e-DmHY9G14wNwBS8XSogQHSB0PA.roa (raw, json)
Hash identifier: kTy1abU9e+j6QruSdR6jVXXbwTL9Lj7KG25TThjqupI=
Subject key identifier: 7B:E0:E6:1D:8F:46:D7:8C:0D:C0:14:BC:5D:2A:20:40:74:81:D0:F0
Certificate issuer: /CN=dca6c3d3f85d83f6db741bb2f44f114e2260aea1
Certificate serial: 025DDDF8
Authority key identifier: DC:A6:C3:D3:F8:5D:83:F6:DB:74:1B:B2:F4:4F:11:4E:22:60:AE:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbD0_hdg_bbdBuy9E8RTiJgrqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/e-DmHY9G14wNwBS8XSogQHSB0PA.roa
Signing time: Sat 01 Jan 2022 11:53:44 +0000
ROA not before: Sat 01 Jan 2022 11:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211627
IP address blocks: 185.252.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39706104 (0x25dddf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6c3d3f85d83f6db741bb2f44f114e2260aea1
Validity
Not Before: Jan 1 11:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7be0e61d8f46d78c0dc014bc5d2a20407481d0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:e9:24:77:96:de:b9:b8:74:61:93:df:61:
f4:d1:54:98:58:c8:93:1f:2e:88:f5:cf:04:83:f8:
a9:87:0e:30:7b:5e:79:7f:82:db:49:5a:d4:dd:fd:
1f:b9:c6:e9:e9:2e:89:ba:5a:b7:8a:e6:59:e2:7d:
01:9a:ac:1c:aa:b0:72:05:b9:c8:83:23:47:76:1a:
0a:f4:0b:25:b2:69:c6:80:f7:ee:dd:5e:5d:fe:8e:
6d:88:04:e6:ff:cf:19:91:19:55:07:46:05:5e:ab:
de:c8:14:f4:b9:d4:4a:6c:1e:18:79:11:34:54:00:
d2:9c:77:1e:b7:1a:8a:a6:8e:d9:16:cb:d1:dd:01:
53:cd:1b:e7:de:bd:83:c1:c9:30:8b:39:21:26:ed:
73:ca:4d:59:21:dd:31:40:66:c8:d2:6b:66:8b:6b:
94:41:32:fa:1d:ad:63:4d:80:f6:c7:87:32:25:d9:
24:ee:ce:9f:c9:6b:7b:24:f1:84:e3:96:ed:3b:3b:
de:7b:f2:a4:4b:df:6c:50:ce:02:b0:ad:3e:f3:0b:
31:fa:0e:96:d2:37:ab:1e:cb:ea:92:b4:4a:ac:8b:
b2:47:9e:30:71:5b:11:2d:2f:e8:ac:97:31:c1:2c:
5a:c2:46:b3:38:58:fd:88:5f:2c:86:19:f0:e2:67:
c2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E0:E6:1D:8F:46:D7:8C:0D:C0:14:BC:5D:2A:20:40:74:81:D0:F0
X509v3 Authority Key Identifier:
keyid:DC:A6:C3:D3:F8:5D:83:F6:DB:74:1B:B2:F4:4F:11:4E:22:60:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbD0_hdg_bbdBuy9E8RTiJgrqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/e-DmHY9G14wNwBS8XSogQHSB0PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/3KbD0_hdg_bbdBuy9E8RTiJgrqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.200.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cd:2b:7b:7b:4a:b1:4b:59:3c:ac:d4:73:9d:7e:bc:99:27:
28:f6:2a:ae:4a:01:77:af:36:a7:a2:6d:2f:b8:88:61:3f:94:
3c:b3:4b:9a:97:84:1c:23:26:7e:fb:ff:e8:7d:29:e9:19:36:
bf:18:f7:7c:77:d2:5f:08:7e:13:0b:71:fc:59:ff:94:54:9f:
88:7c:d7:5b:a1:9e:13:fb:6e:a5:97:6a:9a:09:61:64:fe:4e:
69:2a:14:68:f8:d8:b2:a7:24:b0:76:a4:ff:85:1c:8d:77:b9:
6c:7b:f9:ac:9f:11:77:d0:51:50:d3:56:de:46:7f:a1:8e:5e:
3f:a8:94:89:42:09:61:a6:0f:0c:c6:bb:c8:90:0e:a7:d0:16:
d4:96:a0:ea:7f:4b:db:f3:c1:a5:9b:fe:b9:cb:d4:df:45:f9:
5b:77:cd:bb:5d:30:23:8a:27:b5:89:7a:3a:28:06:42:6e:4f:
6b:62:e8:91:76:d6:94:7c:82:1b:d9:d4:29:4b:0e:b3:e3:ff:
7f:08:5f:c3:d4:77:c7:a1:87:78:27:76:06:6c:98:67:e6:12:
74:32:79:04:f8:b6:68:b2:1a:25:0d:88:57:78:f9:c5:37:eb:
79:e4:a4:28:4a:36:02:e4:17:fd:35:db:56:43:31:7a:ac:00:
02:ce:31:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAl3d+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2E2YzNkM2Y4NWQ4M2Y2ZGI3NDFiYjJmNDRmMTE0ZTIyNjBhZWExMB4XDTIyMDEw
MTExNTM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JlMGU2MWQ4ZjQ2
ZDc4YzBkYzAxNGJjNWQyYTIwNDA3NDgxZDBmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKp66SR3lt65uHRhk99h9NFUmFjIkx8uiPXPBIP4qYcOMHte
eX+C20la1N39H7nG6ekuibpat4rmWeJ9AZqsHKqwcgW5yIMjR3YaCvQLJbJpxoD3
7t1eXf6ObYgE5v/PGZEZVQdGBV6r3sgU9LnUSmweGHkRNFQA0px3HrcaiqaO2RbL
0d0BU80b5969g8HJMIs5ISbtc8pNWSHdMUBmyNJrZotrlEEy+h2tY02A9seHMiXZ
JO7On8lreyTxhOOW7Ts73nvypEvfbFDOArCtPvMLMfoOltI3qx7L6pK0SqyLskee
MHFbES0v6KyXMcEsWsJGszhY/YhfLIYZ8OJnwvECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR74OYdj0bXjA3AFLxdKiBAdIHQ8DAfBgNVHSMEGDAWgBTcpsPT+F2D9tt0
G7L0TxFOImCuoTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNLYkQwX2hkZ19iYmRCdXk5RThSVGlKZ3JxRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvY2NkYmUwLTE3YzktNDFjZC04ZTk3LTQyYmJmYTk5MWEzNS8x
L2UtRG1IWTlHMTR3TndCUzhYU29nUUhTQjBQQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
Y2NkYmUwLTE3YzktNDFjZC04ZTk3LTQyYmJmYTk5MWEzNS8xLzNLYkQwX2hkZ19i
YmRCdXk5RThSVGlKZ3JxRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn8yDANBgkqhkiG9w0BAQsFAAOC
AQEAJM0re3tKsUtZPKzUc51+vJknKPYqrkoBd682p6JtL7iIYT+UPLNLmpeEHCMm
fvv/6H0p6Rk2vxj3fHfSXwh+Ewtx/Fn/lFSfiHzXW6GeE/tupZdqmglhZP5OaSoU
aPjYsqcksHak/4UcjXe5bHv5rJ8Rd9BRUNNW3kZ/oY5eP6iUiUIJYaYPDMa7yJAO
p9AW1Jag6n9L2/PBpZv+ucvU30X5W3fNu10wI4ontYl6OigGQm5Pa2LokXbWlHyC
G9nUKUsOs+P/fwhfw9R3x6GHeCd2BmyYZ+YSdDJ5BPi2aLIaJQ2IV3j5xTfreeSk
KEo2AuQX/TXbVkMxeqwAAs4xaA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:14 2023 by rpki-client on console-ams.rpki-client.org