Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/480q7ddShubpKCuWuUQwxv7y8zY.roa
File: 480q7ddShubpKCuWuUQwxv7y8zY.roa (raw, json)
Hash identifier: r1wko2qdJKvw9xOAbFiJ1JS8+FJvufUL0i4dDi7JChs=
Subject key identifier: E3:CD:2A:ED:D7:52:86:E6:E9:28:2B:96:B9:44:30:C6:FE:F2:F3:36
Certificate issuer: /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial: 07229590
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/480q7ddShubpKCuWuUQwxv7y8zY.roa
Signing time: Sat 01 Jan 2022 15:02:17 +0000
ROA not before: Sat 01 Jan 2022 15:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
185.120.36.0/24 maxlen: 24
185.120.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119707024 (0x7229590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Validity
Not Before: Jan 1 15:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3cd2aedd75286e6e9282b96b94430c6fef2f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:be:10:bf:56:a8:a6:c8:a2:dc:c9:9a:85:
e9:da:c4:bf:9f:c8:f5:5b:09:9b:1f:7f:26:ab:20:
7a:69:82:d4:a6:e5:f4:69:ff:4d:a6:ec:ba:28:2b:
6a:48:a2:7e:33:19:90:a0:21:46:5a:bf:ad:61:e7:
06:a9:11:0d:d1:be:f6:4c:62:dd:84:78:45:19:e6:
b1:c0:27:b6:43:3b:be:8e:f9:14:97:76:46:18:53:
8f:78:f3:8a:f8:c6:a6:15:17:16:70:57:00:3b:37:
6c:f5:c6:44:0a:c4:f8:59:93:e6:70:af:fd:d8:20:
f1:17:3e:70:f5:e4:8c:fe:38:cc:a2:9e:ff:57:5f:
60:74:df:0a:58:f2:89:6b:d0:fd:cf:32:04:dc:69:
90:ce:0d:82:74:94:a7:ad:ce:75:4f:06:5d:08:53:
d7:e1:aa:9f:1d:c2:50:9d:75:4e:33:24:f8:6e:24:
bd:4e:15:25:3d:58:3d:34:5b:96:cd:28:a1:bd:80:
ac:26:db:dc:0c:04:ca:72:b8:99:6f:49:70:78:61:
1d:60:45:65:92:db:a8:ce:eb:1f:55:4d:dc:89:77:
6e:e7:2e:6c:6a:e4:4f:35:67:a7:1b:81:e4:e9:d2:
63:23:83:1f:ab:26:13:18:0f:65:71:b2:43:65:6a:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:2A:ED:D7:52:86:E6:E9:28:2B:96:B9:44:30:C6:FE:F2:F3:36
X509v3 Authority Key Identifier:
keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/480q7ddShubpKCuWuUQwxv7y8zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:db:ff:33:92:22:60:1b:3b:b1:ce:89:45:3c:94:fb:1c:1d:
c7:b6:35:b6:69:7b:c5:a4:1c:cd:02:8b:e5:c1:3d:4d:40:72:
ff:11:ce:0d:2f:1c:fd:a1:82:67:5a:7f:51:c0:8a:87:e7:d8:
a4:6b:4c:9e:15:f5:02:c6:63:e5:88:35:ee:50:50:30:c8:7e:
4e:27:d3:c7:95:c1:07:10:e8:7a:27:ab:e2:91:e4:ec:bf:d8:
c5:f3:69:20:df:48:b9:f4:21:26:bf:98:bf:df:ec:a4:a2:4c:
70:78:d5:ce:40:34:64:68:e2:60:66:c2:78:5d:c7:3d:9a:6a:
7a:3a:58:84:68:27:ec:5a:4f:04:7f:5e:bd:69:df:99:a9:8d:
b8:dc:e2:b0:c1:49:de:b8:b6:52:3d:6a:ea:37:7b:e1:cc:4a:
51:53:30:f9:ce:82:0d:6f:dc:7b:a2:68:4a:27:c3:b0:39:50:
39:eb:79:a2:d6:d4:74:4d:3d:99:de:f4:61:df:62:5b:eb:a8:
e6:00:01:97:00:39:8b:e3:ab:cb:2f:7c:bc:05:ce:09:32:d3:
cf:3d:35:6b:35:37:10:2a:b3:02:2d:41:cb:05:45:41:f2:69:
b1:b7:07:0f:b9:66:0f:18:46:c8:40:e5:dc:0c:7e:1c:76:bc:
e0:d5:ff:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEByKVkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MWE1MGRkNzhmMDNjNzExMDRkNWQxYTI2MDU4YTkyMDcyNGU4NTllMB4XDTIyMDEw
MTE1MDIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTNjZDJhZWRkNzUy
ODZlNmU5MjgyYjk2Yjk0NDMwYzZmZWYyZjMzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMSvhC/VqimyKLcyZqF6drEv5/I9VsJmx9/JqsgemmC1Kbl
9Gn/TabsuigrakiifjMZkKAhRlq/rWHnBqkRDdG+9kxi3YR4RRnmscAntkM7vo75
FJd2RhhTj3jzivjGphUXFnBXADs3bPXGRArE+FmT5nCv/dgg8Rc+cPXkjP44zKKe
/1dfYHTfCljyiWvQ/c8yBNxpkM4NgnSUp63OdU8GXQhT1+Gqnx3CUJ11TjMk+G4k
vU4VJT1YPTRbls0oob2ArCbb3AwEynK4mW9JcHhhHWBFZZLbqM7rH1VN3Il3bucu
bGrkTzVnpxuB5OnSYyODH6smExgPZXGyQ2VqYPMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjzSrt11KG5ukoK5a5RDDG/vLzNjAfBgNVHSMEGDAWgBRxpQ3XjwPHEQTV
0aJgWKkgck6FnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NhVU4xNDhEeHhFRTFkR2lZRmlwSUhKT2haNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvZmNlYzVjLTg4ZWYtNGQxMS05NzU0LWZkYmZhNWI2YjM3My8x
LzQ4MHE3ZGRTaHVicEtDdVd1VVF3eHY3eTh6WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
ZmNlYzVjLTg4ZWYtNGQxMS05NzU0LWZkYmZhNWI2YjM3My8xL2NhVU4xNDhEeHhF
RTFkR2lZRmlwSUhKT2haNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl4JDANBgkqhkiG9w0BAQsFAAOC
AQEAtNv/M5IiYBs7sc6JRTyU+xwdx7Y1tml7xaQczQKL5cE9TUBy/xHODS8c/aGC
Z1p/UcCKh+fYpGtMnhX1AsZj5Yg17lBQMMh+TifTx5XBBxDoeier4pHk7L/YxfNp
IN9IufQhJr+Yv9/spKJMcHjVzkA0ZGjiYGbCeF3HPZpqejpYhGgn7FpPBH9evWnf
mamNuNzisMFJ3ri2Uj1q6jd74cxKUVMw+c6CDW/ce6JoSifDsDlQOet5otbUdE09
md70Yd9iW+uo5gABlwA5i+Oryy98vAXOCTLTzz01azU3ECqzAi1BywVFQfJpsbcH
D7lmDxhGyEDl3Ax+HHa84NX/Xw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:26 2025 by rpki-client