Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GzCf6eer-0KJGSOeGO_GMefOjZo.roa
File: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (raw, json)
Hash identifier: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=
Subject key identifier: 1B:30:9F:E9:E7:AB:FB:42:89:19:23:9E:18:EF:C6:31:E7:CE:8D:9A
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195B51E80AC492B3B0581F81E23B5F77289
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GzCf6eer-0KJGSOeGO_GMefOjZo.roa
Signing time: Thu 20 Mar 2025 19:53:49 +0000
ROA not before: Thu 20 Mar 2025 19:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 5.56.27.0/24 maxlen: 24
31.42.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b5:1e:80:ac:49:2b:3b:05:81:f8:1e:23:b5:f7:72:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 20 19:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b309fe9e7abfb428919239e18efc631e7ce8d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:35:5b:ee:c9:13:27:ce:00:5c:87:ef:bc:
41:a7:9a:26:a6:c8:15:e8:80:7a:5d:fe:dc:5c:bc:
88:7d:c4:52:fd:54:53:68:9f:de:34:b1:3f:42:54:
56:e3:11:8f:bd:76:ca:63:7d:66:c3:80:79:a9:5a:
8a:ea:d3:f4:2d:d3:ab:7c:62:ad:0a:e1:36:36:ee:
c1:fb:4e:99:77:a7:f7:2c:5c:70:b1:86:a7:45:f3:
65:ff:e8:a5:a5:b6:1d:77:f8:d9:39:84:77:60:03:
b8:06:c4:92:b6:6b:44:fd:1d:b4:68:3d:41:81:f6:
97:67:2e:51:bc:51:b6:4d:39:6b:13:ca:68:da:23:
3f:71:9d:9b:44:82:37:6b:e3:39:01:c4:d6:e1:66:
55:c7:ac:c3:db:ee:a5:8c:66:5f:b4:68:66:85:61:
d6:6c:cd:69:9a:67:29:6e:11:9b:85:b7:da:27:81:
a8:fb:6c:9a:89:bb:3c:7d:e8:33:60:90:75:6e:9b:
c7:93:53:37:76:12:c0:ae:c0:e4:4d:a5:44:37:15:
9a:4c:13:68:fd:cb:a2:c5:f0:7a:cf:7e:87:33:76:
d8:9b:5b:1a:ff:5d:ca:49:c0:75:9e:44:7b:ea:1b:
c4:86:ee:72:04:51:90:84:a8:8e:21:64:db:3f:5a:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:9F:E9:E7:AB:FB:42:89:19:23:9E:18:EF:C6:31:E7:CE:8D:9A
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GzCf6eer-0KJGSOeGO_GMefOjZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.27.0/24
31.42.123.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:31:d4:e0:c8:33:88:22:cc:ba:67:9b:d6:66:3f:8e:a1:fd:
a6:d2:9e:92:b5:12:a2:00:4a:67:0c:54:53:72:ed:9e:2e:9a:
2f:91:7b:56:20:1a:90:cc:8c:a7:2b:03:d6:63:e6:84:01:b4:
c1:17:49:dd:00:b9:2d:df:76:c3:9c:a0:40:b0:e6:8a:30:81:
27:0a:54:ea:eb:4a:ff:92:87:ae:78:5c:db:63:13:12:9e:3c:
85:e5:40:65:b6:fa:44:15:26:d5:3b:3a:8c:e0:de:76:17:55:
c3:81:aa:bd:21:8f:04:19:bc:31:64:fe:04:62:ad:2c:d6:d3:
88:5f:e4:4d:b6:7b:a0:64:c3:4d:17:96:68:f6:01:85:53:94:
d1:a2:5a:7d:cb:e3:f7:45:70:cb:e4:34:c2:15:3d:6c:c5:0b:
1c:f7:43:72:16:cf:d5:d2:15:f1:e2:a9:41:75:31:4e:2d:47:
6f:63:b3:34:e1:cd:d2:78:3a:25:46:bf:cc:c0:5b:65:af:93:
e3:be:e6:39:7a:77:b5:6e:f6:c3:ad:31:3a:d5:ff:17:4c:30:
51:7e:03:85:ac:3c:d2:a0:c6:18:a9:f2:76:16:00:e4:5c:b4:
e7:3d:7a:fe:89:35:41:c9:88:f1:c5:56:bb:96:53:3c:04:9f:
31:1d:c1:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZW1HoCsSSs7BYH4HiO193KJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwMzIwMTk1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjMwOWZlOWU3YWJmYjQyODkxOTIzOWUxOGVmYzYzMWU3Y2U4ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqg1W+7JEyfOAFyH77xBp5ompsgV
6IB6Xf7cXLyIfcRS/VRTaJ/eNLE/QlRW4xGPvXbKY31mw4B5qVqK6tP0LdOrfGKt
CuE2Nu7B+06Zd6f3LFxwsYanRfNl/+ilpbYdd/jZOYR3YAO4BsSStmtE/R20aD1B
gfaXZy5RvFG2TTlrE8po2iM/cZ2bRII3a+M5AcTW4WZVx6zD2+6ljGZftGhmhWHW
bM1pmmcpbhGbhbfaJ4Go+2yaibs8fegzYJB1bpvHk1M3dhLArsDkTaVENxWaTBNo
/cuixfB6z36HM3bYm1sa/13KScB1nkR76hvEhu5yBFGQhKiOIWTbP1ql/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBswn+nnq/tCiRkjnhjvxjHnzo2aMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvR3pDZjZlZXItMEtKR1NPZUdPX0dNZWZPalpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABTgbAwQA
Hyp7MA0GCSqGSIb3DQEBCwUAA4IBAQDQMdTgyDOIIsy6Z5vWZj+Oof2m0p6StRKi
AEpnDFRTcu2eLpovkXtWIBqQzIynKwPWY+aEAbTBF0ndALkt33bDnKBAsOaKMIEn
ClTq60r/koeueFzbYxMSnjyF5UBltvpEFSbVOzqM4N52F1XDgaq9IY8EGbwxZP4E
Yq0s1tOIX+RNtnugZMNNF5Zo9gGFU5TRolp9y+P3RXDL5DTCFT1sxQsc90NyFs/V
0hXx4qlBdTFOLUdvY7M04c3SeDolRr/MwFtlr5PjvuY5ene1bvbDrTE61f8XTDBR
fgOFrDzSoMYYqfJ2FgDkXLTnPXr+iTVByYjxxVa7llM8BJ8xHcGk
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:38:23 2025 by rpki-client