Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/M21MDqZhLpMUHwm9053y5X5hUu4.roa
File: M21MDqZhLpMUHwm9053y5X5hUu4.roa (raw, json)
Hash identifier: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=
Subject key identifier: 33:6D:4C:0E:A6:61:2E:93:14:1F:09:BD:D3:9D:F2:E5:7E:61:52:EE
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019421440FC005C986C2EF423B5385B894B6
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/M21MDqZhLpMUHwm9053y5X5hUu4.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34447
IP address blocks: 185.82.34.0/24 maxlen: 24
185.82.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0f:c0:05:c9:86:c2:ef:42:3b:53:85:b8:94:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336d4c0ea6612e93141f09bdd39df2e57e6152ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:58:c2:a6:58:d3:ad:a0:fc:f2:c0:1d:36:
8c:65:cd:5f:fc:15:50:df:9c:2e:54:f0:16:ae:d2:
64:35:5d:bf:7c:ac:04:05:8c:42:37:f7:23:53:bd:
69:d9:52:b4:30:23:e7:4e:36:54:97:f1:f6:6c:fd:
cf:05:94:59:3e:e7:8b:86:28:32:c9:4a:ef:3c:69:
f3:fc:5f:25:23:79:b1:f0:f8:2c:cd:6a:d5:0b:e1:
2a:52:fa:de:ef:11:de:c7:17:75:11:a8:0a:60:df:
98:a6:c4:84:e7:96:13:7c:49:d7:fc:83:52:d2:b5:
4d:73:07:5e:57:c4:54:b9:df:05:71:0b:1a:23:0a:
56:6a:d1:1f:02:85:85:91:99:62:91:76:b7:d6:7a:
d2:5e:74:89:2e:1e:4d:3c:2d:80:60:e1:14:c7:b5:
17:02:95:33:f2:0c:aa:30:0b:14:a4:23:82:e3:75:
65:c5:1a:13:08:00:99:39:8d:6b:3a:9d:90:39:30:
71:aa:ec:0e:24:8f:0d:67:f1:7a:c0:c9:2c:50:4a:
32:8f:e3:6a:4e:2d:90:a3:76:73:4c:8d:62:42:7f:
db:18:82:cd:0a:7f:55:eb:67:78:6e:96:a5:61:16:
70:ad:4f:fd:85:fa:46:5c:be:be:b3:df:3b:d9:84:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:4C:0E:A6:61:2E:93:14:1F:09:BD:D3:9D:F2:E5:7E:61:52:EE
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/M21MDqZhLpMUHwm9053y5X5hUu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.34.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:c6:d4:07:0b:b8:fc:8d:28:f7:5a:0b:15:68:2f:6a:a8:74:
d0:28:7b:a8:f0:ef:eb:44:70:44:dd:4a:9d:f4:f1:df:c2:0e:
99:b9:dc:f4:dd:ec:af:1a:65:e6:bf:ec:37:ca:73:77:88:62:
25:82:2e:8a:e3:ef:60:1a:76:39:dc:f1:28:95:08:b7:0c:7e:
06:48:67:10:2d:2f:c3:30:a9:22:b1:69:3c:c0:a2:5a:db:f3:
3f:39:eb:f0:48:c1:2b:20:de:ac:6f:de:a8:cc:3f:ba:e1:86:
93:34:81:ce:cc:4e:4f:84:d4:8d:f9:31:b1:1c:a4:e8:0d:81:
31:fe:0e:42:79:d1:e4:f7:9f:5a:f7:09:cc:3d:0b:61:2e:1d:
7a:eb:09:61:8c:47:d6:37:60:5a:c1:1c:71:b1:05:86:ca:e9:
a7:5c:29:d6:4e:73:12:22:7a:5d:05:a4:4a:3e:3c:02:97:a2:
56:39:70:3f:0f:c0:3f:3e:f4:3b:f5:4e:70:3a:64:b5:58:92:
08:5c:85:d2:2a:d9:ee:78:dc:97:d3:fe:32:4f:83:ac:b5:8a:
33:91:e3:f5:c2:1c:64:b0:b1:db:08:4b:00:5b:8b:57:4a:1a:
04:39:28:f5:87:5e:8a:60:ff:b1:7a:9a:19:6e:5a:8e:2e:76:
fa:f8:fe:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRA/ABcmGwu9CO1OFuJS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjUwMTAxMDk0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzZkNGMwZWE2NjEyZTkzMTQxZjA5YmRkMzlkZjJlNTdlNjE1MmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ9YwqZY062g/PLAHTaMZc1f/BVQ
35wuVPAWrtJkNV2/fKwEBYxCN/cjU71p2VK0MCPnTjZUl/H2bP3PBZRZPueLhigy
yUrvPGnz/F8lI3mx8PgszWrVC+EqUvre7xHexxd1EagKYN+YpsSE55YTfEnX/INS
0rVNcwdeV8RUud8FcQsaIwpWatEfAoWFkZlikXa31nrSXnSJLh5NPC2AYOEUx7UX
ApUz8gyqMAsUpCOC43VlxRoTCACZOY1rOp2QOTBxquwOJI8NZ/F6wMksUEoyj+Nq
Ti2Qo3ZzTI1iQn/bGILNCn9V62d4bpalYRZwrU/9hfpGXL6+s9872YRaEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNtTA6mYS6TFB8JvdOd8uV+YVLuMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTTIxTURxWmhMcE1VSHdtOTA1M3k1WDVoVXU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVIiMA0G
CSqGSIb3DQEBCwUAA4IBAQBfxtQHC7j8jSj3WgsVaC9qqHTQKHuo8O/rRHBE3Uqd
9PHfwg6Zudz03eyvGmXmv+w3ynN3iGIlgi6K4+9gGnY53PEolQi3DH4GSGcQLS/D
MKkisWk8wKJa2/M/OevwSMErIN6sb96ozD+64YaTNIHOzE5PhNSN+TGxHKToDYEx
/g5CedHk959a9wnMPQthLh166wlhjEfWN2BawRxxsQWGyumnXCnWTnMSInpdBaRK
PjwCl6JWOXA/D8A/PvQ79U5wOmS1WJIIXIXSKtnueNyX0/4yT4OstYozkeP1whxk
sLHbCEsAW4tXShoEOSj1h16KYP+xepoZblqOLnb6+P76
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:37:44 2025 by rpki-client