Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/DlArPbn8GTmJj2D62Ij1Dw0UFGE.roa
File: DlArPbn8GTmJj2D62Ij1Dw0UFGE.roa (raw, json)
Hash identifier: iU0PEM7B2H00PnRoZgjmbalgFm6thEBq80LM9wffk9s=
Subject key identifier: 0E:50:2B:3D:B9:FC:19:39:89:8F:60:FA:D8:88:F5:0F:0D:14:14:61
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 01938DAB3D3CCE11B2E1C7E1EC14F9EB6258
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/DlArPbn8GTmJj2D62Ij1Dw0UFGE.roa
Signing time: Tue 03 Dec 2024 17:57:10 +0000
ROA not before: Tue 03 Dec 2024 17:57:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50998
IP address blocks: 178.248.160.0/21 maxlen: 24
185.175.180.0/22 maxlen: 24
2a03:2200:2000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:ab:3d:3c:ce:11:b2:e1:c7:e1:ec:14:f9:eb:62:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Dec 3 17:57:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e502b3db9fc1939898f60fad888f50f0d141461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:5c:c3:20:15:1b:c8:1c:68:2e:98:46:fb:
69:a1:7a:4e:f5:21:e3:31:b7:f7:1a:30:ad:e9:b2:
c8:1c:38:11:26:c3:9b:03:5a:19:b9:56:13:e2:2a:
59:2b:c8:9c:61:97:89:a5:f4:cc:65:43:ce:0a:6b:
6b:20:24:22:2e:7c:a5:61:36:74:19:2b:a0:02:10:
fc:33:ad:a2:5f:c6:cd:91:1a:67:6a:56:82:4f:97:
b3:48:9e:9f:63:00:38:aa:1d:17:fd:71:0a:ba:a4:
d9:ce:4c:d6:68:80:98:85:74:3c:3f:b3:a0:8a:d3:
c6:46:4a:82:7d:b9:39:3e:25:c5:59:8c:c1:46:36:
10:7e:7d:db:4f:2e:cf:e0:e5:25:84:2d:5a:53:63:
94:4a:07:ba:23:1b:8e:39:7f:bb:91:13:21:b8:3b:
fa:66:54:da:d4:9f:51:6a:88:82:01:d5:df:27:28:
fa:58:4f:ee:3d:65:99:09:c7:66:03:8c:18:53:f8:
df:21:b8:4e:ef:dc:a1:11:56:39:a7:6a:4f:f4:55:
32:27:52:df:e7:c1:55:f6:d7:80:f3:07:32:7a:92:
84:5a:31:28:01:b3:5a:22:18:eb:b4:7b:bf:70:53:
4f:5b:57:fb:9d:17:44:3f:d1:d4:18:20:c8:b1:c9:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:50:2B:3D:B9:FC:19:39:89:8F:60:FA:D8:88:F5:0F:0D:14:14:61
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/DlArPbn8GTmJj2D62Ij1Dw0UFGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.160.0/21
185.175.180.0/22
IPv6:
2a03:2200:2000::/39
Signature Algorithm: sha256WithRSAEncryption
61:2b:dc:99:ac:6b:0f:7f:29:90:d8:ea:55:d1:b5:5c:21:69:
32:4b:bc:c1:61:c9:64:ee:fe:ae:5c:b7:e4:68:6f:31:99:dc:
35:e8:df:92:43:8f:df:71:f9:db:ff:cd:68:dc:cd:20:77:47:
ef:2a:5a:1c:45:d8:72:97:ef:ab:a4:45:12:0d:55:f4:73:16:
4d:3e:42:6b:1e:e0:a9:ad:05:60:6e:27:8a:82:ed:42:1d:c5:
51:d9:65:ba:60:7c:5a:74:ec:d4:62:55:16:8c:35:46:53:ec:
ef:de:17:d9:5b:49:92:b3:bd:13:50:df:49:07:74:d2:52:55:
9c:07:42:67:04:94:2f:ad:54:ef:00:be:93:b2:eb:cd:b9:a3:
c3:c9:b6:ca:b1:11:f2:23:b4:a4:cb:b4:66:5d:a8:75:b7:04:
87:74:45:37:4b:3a:fd:2e:64:63:c8:ac:18:39:d2:1d:85:86:
b6:b3:88:a2:28:c7:20:95:77:f6:d5:58:10:c6:95:b5:02:e8:
ef:49:9a:11:8a:05:2b:a7:0a:88:47:cf:98:b2:a5:1c:33:81:
dc:ba:5a:eb:c5:dd:b0:62:18:a9:85:0f:40:8e:1b:a2:d0:1a:
e6:f2:bf:f3:7e:47:02:3a:21:f6:ae:74:e2:51:29:62:d4:65:
49:2e:c3:ac
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZONqz08zhGy4cfh7BT562JYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz
MDQ2NTQwHhcNMjQxMjAzMTc1NzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTUwMmIzZGI5ZmMxOTM5ODk4ZjYwZmFkODg4ZjUwZjBkMTQxNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw05cwyAVG8gcaC6YRvtpoXpO9SHj
Mbf3GjCt6bLIHDgRJsObA1oZuVYT4ipZK8icYZeJpfTMZUPOCmtrICQiLnylYTZ0
GSugAhD8M62iX8bNkRpnalaCT5ezSJ6fYwA4qh0X/XEKuqTZzkzWaICYhXQ8P7Og
itPGRkqCfbk5PiXFWYzBRjYQfn3bTy7P4OUlhC1aU2OUSge6IxuOOX+7kRMhuDv6
ZlTa1J9RaoiCAdXfJyj6WE/uPWWZCcdmA4wYU/jfIbhO79yhEVY5p2pP9FUyJ1Lf
58FV9teA8wcyepKEWjEoAbNaIhjrtHu/cFNPW1f7nRdEP9HUGCDIscnddwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFA5QKz25/Bk5iY9g+tiI9Q8NFBRhMB8GA1UdIwQY
MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct
MGZiNDgyM2Y1Yjg3LzEvRGxBclBibjhHVG1KajJENjJJajFEdzBVRkdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3
LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDsvigAwQC
ua+0MA4EAgACMAgDBgEqAyIAIDANBgkqhkiG9w0BAQsFAAOCAQEAYSvcmaxrD38p
kNjqVdG1XCFpMku8wWHJZO7+rly35GhvMZncNejfkkOP33H52//NaNzNIHdH7ypa
HEXYcpfvq6RFEg1V9HMWTT5Cax7gqa0FYG4nioLtQh3FUdllumB8WnTs1GJVFow1
RlPs794X2VtJkrO9E1DfSQd00lJVnAdCZwSUL61U7wC+k7Lrzbmjw8m2yrER8iO0
pMu0Zl2odbcEh3RFN0s6/S5kY8isGDnSHYWGtrOIoijHIJV39tVYEMaVtQLo70ma
EYoFK6cKiEfPmLKlHDOB3Lpa68XdsGIYqYUPQI4botAa5vK/835HAjoh9q504lEp
YtRlSS7DrA==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net