Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/gweOnWf8g-RZ4jBjjsoLiosb5ZE.roa
File: gweOnWf8g-RZ4jBjjsoLiosb5ZE.roa (raw, json)
Hash identifier: QAKmg+ixVePrfCBFZtx/ppF7dRwWB1pEE8lyFcx6vDI=
Subject key identifier: 83:07:8E:9D:67:FC:83:E4:59:E2:30:63:8E:CA:0B:8A:8B:1B:E5:91
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0185711E540DFFA0E04E21794D36C72901AB
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/gweOnWf8g-RZ4jBjjsoLiosb5ZE.roa
Signing time: Mon 02 Jan 2023 06:14:51 +0000
ROA not before: Mon 02 Jan 2023 06:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210817
IP address blocks: 37.148.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:54:0d:ff:a0:e0:4e:21:79:4d:36:c7:29:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 2 06:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83078e9d67fc83e459e230638eca0b8a8b1be591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:42:64:80:f1:cc:32:63:e9:97:bc:95:67:
6e:b9:d8:a1:99:c6:d3:cf:98:e7:9b:e0:83:1e:54:
0f:eb:f7:0a:5e:28:18:cc:fa:47:ff:53:87:c5:0d:
39:52:51:8d:ea:d8:d0:81:24:aa:fc:e0:da:9d:3c:
ab:27:72:6a:b8:9e:ea:b5:ce:fb:64:22:bc:dc:d2:
7c:8d:2e:40:cd:c6:1c:40:90:6c:1b:b9:47:62:14:
e8:52:ba:b3:1a:f5:1d:7c:3e:64:06:0d:06:cb:c7:
76:52:28:e5:76:a0:5b:4a:4c:6a:57:3d:8d:13:a8:
10:b4:df:2c:05:63:c2:2e:b6:30:e0:84:78:e3:c7:
6a:ea:d9:8f:81:a4:58:6b:46:85:83:81:10:c9:a5:
48:c3:a9:d0:19:9b:e9:dd:90:4c:48:08:a0:15:0f:
bf:0a:5a:41:43:df:97:b2:26:e2:81:51:02:fe:a4:
a4:3b:dd:be:67:d9:42:60:b6:29:61:42:0c:a7:f0:
a7:e5:5f:00:4e:97:92:3e:55:7c:7b:63:b8:ab:07:
78:4c:58:a6:8e:a2:e2:68:b3:b1:00:8f:e4:7b:90:
f9:7e:97:8f:63:3c:b0:1a:13:f1:6b:7d:de:44:4a:
d2:85:ba:67:b5:fd:16:c1:43:2b:da:6a:54:fe:fa:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:8E:9D:67:FC:83:E4:59:E2:30:63:8E:CA:0B:8A:8B:1B:E5:91
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/gweOnWf8g-RZ4jBjjsoLiosb5ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.172.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3f:aa:fb:74:63:ff:e4:39:54:53:79:35:bf:d2:45:5c:1a:
15:41:36:01:33:f7:62:d4:40:88:a7:6e:17:4a:63:4b:fb:80:
c9:7c:f9:60:a7:b3:38:92:bc:44:3b:9d:16:d2:f1:a7:3e:ca:
e9:cb:04:93:db:1e:59:f2:a9:97:12:de:48:37:01:3f:60:0f:
21:ab:f8:b8:62:b9:da:07:fe:5f:1d:4f:d9:0f:43:3f:af:e2:
d7:94:86:b3:86:46:82:57:25:bd:5a:b3:cc:84:a5:2d:c8:ee:
d1:4f:71:94:01:bc:9e:94:50:80:2f:ad:ba:8f:10:da:0a:29:
fa:cf:d6:50:07:8f:38:6b:fe:4b:31:68:ba:57:27:92:7f:53:
cf:f5:b3:b2:82:06:10:28:44:e6:2b:a9:7a:dc:9d:cd:f9:2f:
89:fa:8e:88:02:18:84:b6:11:45:fc:13:cd:06:ae:1d:35:43:
71:12:b1:a5:be:e3:e3:2d:3d:85:94:98:05:fd:33:9e:81:4f:
66:dc:b2:e9:ed:66:d5:bd:5e:ca:de:0f:42:b2:47:3e:5e:b8:
b1:a0:4c:0d:1b:89:f1:0b:b2:c0:d9:65:0b:e0:0a:c0:bd:b8:
24:8a:da:ad:7c:57:55:59:35:a0:de:60:8e:c3:d3:09:41:ee:
d8:3c:aa:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxHlQN/6DgTiF5TTbHKQGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjMwMTAyMDYxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzA3OGU5ZDY3ZmM4M2U0NTllMjMwNjM4ZWNhMGI4YThiMWJlNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlJCZIDxzDJj6Ze8lWduudihmcbT
z5jnm+CDHlQP6/cKXigYzPpH/1OHxQ05UlGN6tjQgSSq/ODanTyrJ3JquJ7qtc77
ZCK83NJ8jS5AzcYcQJBsG7lHYhToUrqzGvUdfD5kBg0Gy8d2UijldqBbSkxqVz2N
E6gQtN8sBWPCLrYw4IR448dq6tmPgaRYa0aFg4EQyaVIw6nQGZvp3ZBMSAigFQ+/
ClpBQ9+XsibigVEC/qSkO92+Z9lCYLYpYUIMp/Cn5V8ATpeSPlV8e2O4qwd4TFim
jqLiaLOxAI/ke5D5fpePYzywGhPxa33eRErShbpntf0WwUMr2mpU/vqzKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMHjp1n/IPkWeIwY47KC4qLG+WRMB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvZ3dlT25XZjhnLVJaNGpCampzb0xpb3NiNVpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZSsMA0G
CSqGSIb3DQEBCwUAA4IBAQBxP6r7dGP/5DlUU3k1v9JFXBoVQTYBM/di1ECIp24X
SmNL+4DJfPlgp7M4krxEO50W0vGnPsrpywST2x5Z8qmXEt5INwE/YA8hq/i4Yrna
B/5fHU/ZD0M/r+LXlIazhkaCVyW9WrPMhKUtyO7RT3GUAbyelFCAL626jxDaCin6
z9ZQB484a/5LMWi6VyeSf1PP9bOyggYQKETmK6l63J3N+S+J+o6IAhiEthFF/BPN
Bq4dNUNxErGlvuPjLT2FlJgF/TOegU9m3LLp7WbVvV7K3g9Cskc+XrixoEwNG4nx
C7LA2WUL4ArAvbgkitqtfFdVWTWg3mCOw9MJQe7YPKqT
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:46 2025 by rpki-client