Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/gTevhc6qc4MGdWT2sBbSMEC4YgM.roa
File: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (raw, json)
Hash identifier: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=
Subject key identifier: 81:37:AF:85:CE:AA:73:83:06:75:64:F6:B0:16:D2:30:40:B8:62:03
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 01942444AF8BC6124F7E1936610829F9B23C
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/gTevhc6qc4MGdWT2sBbSMEC4YgM.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16552
IP address blocks: 46.31.232.0/21 maxlen: 24
185.165.52.0/22 maxlen: 24
185.165.52.0/24 maxlen: 28
185.165.54.0/24 maxlen: 28
185.165.55.0/24 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:af:8b:c6:12:4f:7e:19:36:61:08:29:f9:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8137af85ceaa7383067564f6b016d23040b86203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:c1:2f:7a:e7:7b:17:10:00:92:c4:91:68:
e1:c4:48:fc:0a:9d:1e:ac:bc:4b:8b:61:8c:e5:eb:
9d:2e:5d:dd:8a:b2:d0:eb:33:b9:5b:ac:f5:a7:ae:
87:71:72:f8:fa:f3:e9:ef:72:c8:cf:16:fa:35:c6:
ad:47:11:80:04:25:04:fa:38:2a:4c:1a:21:e0:a9:
1a:71:51:a2:b0:f2:bd:83:68:bf:61:f4:64:22:c3:
6b:13:68:73:28:33:07:5b:67:07:25:f6:9f:55:ff:
bd:ee:9d:c7:18:ad:96:14:00:1c:12:22:85:1c:09:
cd:ce:00:1a:88:09:ed:d8:99:ee:6b:2c:71:5a:f8:
bc:83:53:07:30:0d:a4:b7:97:71:a6:04:ff:d2:43:
63:a5:b9:e4:2a:65:01:8a:81:c3:73:52:5a:db:0a:
49:1c:62:65:8e:2a:28:26:c1:49:a0:74:c1:13:b6:
aa:d4:ad:6b:8e:83:9b:18:ca:3b:4c:7b:74:ea:75:
91:a0:de:66:cb:87:f2:f3:d3:1f:1f:03:72:b7:c9:
4e:2d:ef:a7:d9:87:5c:a6:2a:02:0d:8b:e2:14:6a:
28:68:87:e6:e6:6f:6e:44:ca:58:96:4c:99:ca:04:
9d:fa:d1:46:b7:e7:1c:00:b0:44:15:3f:b7:5f:87:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:AF:85:CE:AA:73:83:06:75:64:F6:B0:16:D2:30:40:B8:62:03
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/gTevhc6qc4MGdWT2sBbSMEC4YgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.232.0/21
185.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
75:54:4f:4b:c9:ad:58:9f:b5:b0:23:cf:fa:25:2e:49:2b:92:
94:21:42:b4:18:76:85:4f:59:ff:de:01:27:48:ea:43:48:b4:
df:a9:6a:91:16:88:6f:4c:9e:ab:94:b9:40:aa:0c:1d:8d:29:
dd:47:e2:01:c6:fc:5a:bb:81:d1:8f:9c:40:34:48:b1:ff:76:
52:7b:d8:9f:00:d4:ff:9e:2b:03:eb:f4:fa:c2:12:86:5f:66:
2f:70:fe:dd:22:53:51:c7:49:9f:c4:fa:14:57:22:40:06:c6:
22:6a:8a:0d:2b:d3:e2:64:c1:2d:74:f6:0c:d7:70:43:a4:69:
3e:d1:ab:72:5d:d9:20:b7:e5:90:b7:ae:a8:d8:da:cb:99:f3:
8e:49:ce:0c:5f:72:d9:6b:9f:03:cd:75:42:f9:85:23:86:c1:
a9:21:b9:bb:7b:04:1b:1d:ac:d5:93:65:c9:5b:0e:2f:40:01:
54:c3:23:ca:6c:bb:14:24:0e:4b:f8:17:44:aa:d3:d6:f2:81:
74:89:0c:9b:68:96:64:e2:fb:5d:4b:d6:9b:46:96:e9:77:de:
4c:5b:13:ef:b2:16:1a:ac:b9:72:1e:e5:ef:85:2e:96:f3:3b:
58:a7:51:fc:a0:b9:00:fe:15:c1:5d:98:45:b8:5e:5e:3e:93:
e4:45:76:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRK+LxhJPfhk2YQgp+bI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjUwMTAxMjM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTM3YWY4NWNlYWE3MzgzMDY3NTY0ZjZiMDE2ZDIzMDQwYjg2MjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjTBL3rnexcQAJLEkWjhxEj8Cp0e
rLxLi2GM5eudLl3dirLQ6zO5W6z1p66HcXL4+vPp73LIzxb6NcatRxGABCUE+jgq
TBoh4KkacVGisPK9g2i/YfRkIsNrE2hzKDMHW2cHJfafVf+97p3HGK2WFAAcEiKF
HAnNzgAaiAnt2JnuayxxWvi8g1MHMA2kt5dxpgT/0kNjpbnkKmUBioHDc1Ja2wpJ
HGJljiooJsFJoHTBE7aq1K1rjoObGMo7THt06nWRoN5my4fy89MfHwNyt8lOLe+n
2YdcpioCDYviFGooaIfm5m9uRMpYlkyZygSd+tFGt+ccALBEFT+3X4etBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIE3r4XOqnODBnVk9rAW0jBAuGIDMB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvZ1RldmhjNnFjNE1HZFdUMnNCYlNNRUM0WWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLh/oAwQC
uaU0MA0GCSqGSIb3DQEBCwUAA4IBAQB1VE9Lya1Yn7WwI8/6JS5JK5KUIUK0GHaF
T1n/3gEnSOpDSLTfqWqRFohvTJ6rlLlAqgwdjSndR+IBxvxau4HRj5xANEix/3ZS
e9ifANT/nisD6/T6whKGX2YvcP7dIlNRx0mfxPoUVyJABsYiaooNK9PiZMEtdPYM
13BDpGk+0atyXdkgt+WQt66o2NrLmfOOSc4MX3LZa58DzXVC+YUjhsGpIbm7ewQb
HazVk2XJWw4vQAFUwyPKbLsUJA5L+BdEqtPW8oF0iQybaJZk4vtdS9abRpbpd95M
WxPvshYarLlyHuXvhS6W8ztYp1H8oLkA/hXBXZhFuF5ePpPkRXb6
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:53 2025 by rpki-client