Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/GWXGLTy5YBqJuahnknw3pp_7_88.roa
File: GWXGLTy5YBqJuahnknw3pp_7_88.roa (raw, json)
Hash identifier: F9P5UhhuBJy3Os/bi3ejcVABdoW7VW6K8c4LIwZlIMw=
Subject key identifier: 19:65:C6:2D:3C:B9:60:1A:89:B9:A8:67:92:7C:37:A6:9F:FB:FF:CF
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01942823288855183B0FF8E13DF96E6CED4B
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/GWXGLTy5YBqJuahnknw3pp_7_88.roa
Signing time: Thu 02 Jan 2025 17:49:40 +0000
ROA not before: Thu 02 Jan 2025 17:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:28:88:55:18:3b:0f:f8:e1:3d:f9:6e:6c:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 2 17:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1965c62d3cb9601a89b9a867927c37a69ffbffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:b9:46:01:48:ca:f9:d3:07:d9:e3:9b:ca:
f9:aa:3b:f7:b8:30:58:b7:ab:d4:b2:94:1f:ba:98:
a6:1b:86:4c:99:13:25:f8:e4:b0:4b:8b:70:4f:46:
7a:d4:e0:1d:c8:a4:80:a5:e1:37:c2:d2:2e:18:01:
ea:25:7e:d8:40:3c:82:f4:ea:9d:70:c3:f7:0f:a3:
c4:b4:0f:21:c0:bb:64:40:15:0d:bd:43:72:55:74:
90:85:29:24:72:09:33:84:80:ec:3b:20:c0:64:4c:
c3:d7:31:61:c3:b7:44:13:8d:0b:6a:fe:10:1a:97:
c0:ec:02:e7:6e:fd:db:77:53:b9:f1:36:19:6b:e5:
6b:a9:b5:38:16:91:00:e0:87:fd:c8:c1:f6:01:fb:
bf:c0:52:76:02:d0:3e:51:1c:e6:f7:aa:0f:52:ac:
b4:52:2f:c9:b2:e0:38:d8:f7:00:51:28:f9:a3:77:
81:a9:e9:aa:f7:cb:0e:55:10:45:19:09:7a:6e:a7:
6b:a2:7b:e2:a4:31:c8:df:31:51:d0:0b:c5:ca:a0:
ab:db:dd:db:3c:8c:10:ce:c0:d6:4f:96:fe:e7:86:
f8:83:53:e4:f6:e1:24:36:b6:00:2d:36:fe:9f:2f:
0b:41:33:6e:69:3a:a5:02:3f:6e:44:e4:e6:ef:e9:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:C6:2D:3C:B9:60:1A:89:B9:A8:67:92:7C:37:A6:9F:FB:FF:CF
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/GWXGLTy5YBqJuahnknw3pp_7_88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e3:f3:dd:3a:b0:c2:c6:6e:25:5a:41:62:5d:c1:74:78:39:
4d:9c:04:02:b4:dd:58:dc:78:74:b1:d3:6b:6d:2c:f1:4a:04:
6a:57:04:7c:0d:90:8a:aa:8d:25:f2:e8:48:56:80:0d:3b:d7:
eb:d1:36:ab:47:35:a5:63:30:e0:93:9a:f4:11:c3:45:b0:44:
fc:66:1b:29:44:de:c2:3a:73:e4:3f:7a:38:54:32:94:7f:bb:
f9:8e:af:82:4e:52:3a:9b:ea:af:00:bc:f5:03:ea:0e:bb:82:
ec:17:17:ee:04:d8:13:39:84:e8:99:cb:0d:f6:87:1b:91:e8:
fe:bd:f4:8e:9d:3e:93:d3:59:88:07:95:e2:57:37:03:e4:33:
01:46:33:10:f5:d9:67:b5:31:61:b2:3a:c3:fb:f9:56:20:ee:
5b:9e:7d:8b:bb:46:a0:64:b2:2f:55:7c:c5:66:ba:d6:a8:b3:
f4:73:8b:a0:07:ff:df:af:75:ee:aa:5e:b1:31:e3:4f:84:c3:
07:1f:30:da:8d:79:a3:24:ec:a5:78:3c:41:bf:1c:b8:cc:34:
35:e5:01:2f:11:05:9b:7a:bf:de:ad:63:56:50:82:e1:ac:19:
c3:7a:76:70:17:a0:e7:71:9e:6e:14:10:8c:9c:71:25:67:4b:
d9:91:0a:22
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQoIyiIVRg7D/jhPflubO1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjUwMTAyMTc0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTY1YzYyZDNjYjk2MDFhODliOWE4Njc5MjdjMzdhNjlmZmJmZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pG5RgFIyvnTB9njm8r5qjv3uDBY
t6vUspQfupimG4ZMmRMl+OSwS4twT0Z61OAdyKSApeE3wtIuGAHqJX7YQDyC9Oqd
cMP3D6PEtA8hwLtkQBUNvUNyVXSQhSkkcgkzhIDsOyDAZEzD1zFhw7dEE40Lav4Q
GpfA7ALnbv3bd1O58TYZa+VrqbU4FpEA4If9yMH2Afu/wFJ2AtA+URzm96oPUqy0
Ui/JsuA42PcAUSj5o3eBqemq98sOVRBFGQl6bqdronvipDHI3zFR0AvFyqCr293b
PIwQzsDWT5b+54b4g1Pk9uEkNrYALTb+ny8LQTNuaTqlAj9uROTm7+mpQwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBllxi08uWAaibmoZ5J8N6af+//PMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL0dXWEdMVHk1WUJxSnVhaG5rbnczcHBfN184OC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTiNUw
DQYJKoZIhvcNAQELBQADggEBAE3j8906sMLGbiVaQWJdwXR4OU2cBAK03VjceHSx
02ttLPFKBGpXBHwNkIqqjSXy6EhWgA071+vRNqtHNaVjMOCTmvQRw0WwRPxmGylE
3sI6c+Q/ejhUMpR/u/mOr4JOUjqb6q8AvPUD6g67guwXF+4E2BM5hOiZyw32hxuR
6P699I6dPpPTWYgHleJXNwPkMwFGMxD12We1MWGyOsP7+VYg7luefYu7RqBksi9V
fMVmutaos/Rzi6AH/9+vde6qXrEx40+EwwcfMNqNeaMk7KV4PEG/HLjMNDXlAS8R
BZt6v96tY1ZQguGsGcN6dnAXoOdxnm4UEIyccSVnS9mRCiI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:00:01 2025 by rpki-client