Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GK3iFDmDpBa9nAAmnOJBglcqt-c.roa
File: GK3iFDmDpBa9nAAmnOJBglcqt-c.roa (raw, json)
Hash identifier: 99K4yWfxBVM3IL9c8qBoYScmOU+EeV2+GPaPVi0G8m0=
Subject key identifier: 18:AD:E2:14:39:83:A4:16:BD:9C:00:26:9C:E2:41:82:57:2A:B7:E7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194EE3F1CCA7418BCEAFFA99E750886B83B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GK3iFDmDpBa9nAAmnOJBglcqt-c.roa
Signing time: Mon 10 Feb 2025 05:05:01 +0000
ROA not before: Mon 10 Feb 2025 05:05:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 5.83.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:3f:1c:ca:74:18:bc:ea:ff:a9:9e:75:08:86:b8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 10 05:05:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18ade2143983a416bd9c00269ce24182572ab7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:fb:75:23:2b:0c:bc:df:7e:e6:9b:f5:71:
47:9e:75:8c:9e:11:05:fa:a9:fd:48:94:6e:9a:0c:
29:cb:3d:07:47:55:08:d1:af:43:8d:1a:c3:61:d0:
1c:d3:43:4c:f3:dc:5a:58:90:b0:43:3a:af:d1:2e:
a3:ed:c0:4e:2b:f0:7c:fc:7c:ea:d8:3d:8b:22:27:
e8:9c:7b:e8:05:bf:86:68:2f:fa:46:b3:af:27:a5:
dc:8c:66:53:58:96:cc:3f:54:20:39:9b:dd:3d:d8:
0b:43:6a:b5:b2:fa:43:af:0a:c3:93:46:42:2d:eb:
dd:97:a2:65:ba:78:d9:14:53:4e:9c:60:4e:a0:a9:
1a:25:78:e3:8b:be:47:3a:29:89:0e:0c:ec:1e:19:
78:bc:51:d6:aa:73:6d:d8:af:e5:02:59:ac:f0:b8:
b6:7b:ba:78:ca:80:72:da:3f:ca:a9:f1:d4:c4:cf:
6e:98:e0:b7:4c:72:6b:c9:63:10:f3:f5:a5:06:af:
b3:04:77:3e:80:2b:35:ad:3e:45:04:89:2f:34:d2:
ff:3b:44:84:89:21:8f:c9:88:25:44:e7:9a:79:a3:
c5:94:c4:17:be:a2:2d:f4:f7:ef:b0:e1:7b:b7:8a:
ef:c1:1f:ba:e8:2b:cb:72:aa:54:bb:37:cb:50:e3:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:E2:14:39:83:A4:16:BD:9C:00:26:9C:E2:41:82:57:2A:B7:E7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GK3iFDmDpBa9nAAmnOJBglcqt-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:55:f5:c5:d8:52:2c:d3:28:89:6d:7d:40:e6:9e:e7:12:fb:
cd:6b:df:da:cb:ea:4b:b1:93:b6:c9:18:c3:78:d9:df:da:e0:
05:63:10:c8:7d:16:1b:26:55:2f:ad:ab:00:99:56:ab:5d:16:
a5:20:20:86:8b:af:1e:33:d8:c7:f5:30:88:03:fa:90:00:0b:
4a:45:b3:77:ba:ef:c9:b4:17:4e:d1:57:d4:d1:7f:39:fb:c0:
52:bb:e0:20:9e:2f:02:c2:f8:e5:d0:7b:bc:95:b4:fe:50:63:
bd:d0:6f:75:2a:d2:77:67:66:3d:93:6b:a4:9a:29:fe:6f:ee:
19:be:89:96:c9:4b:77:6b:57:cd:fa:73:e0:64:0b:e2:54:2a:
ac:27:c0:c7:58:3b:d9:af:44:aa:96:33:ae:29:35:ab:92:4f:
7e:72:d7:76:6e:14:73:db:0e:ff:8f:04:7e:dd:3d:18:05:1c:
85:da:d9:7c:ca:c0:5b:bf:6f:b6:3b:04:c1:62:7a:c6:e3:19:
c6:e0:2c:04:08:8a:3c:4b:a0:65:5e:f6:7b:32:03:cd:c5:61:
8a:2b:0b:b6:be:2a:83:76:8e:be:a9:21:18:ba:18:6e:4b:ab:
6b:88:4a:fc:b9:11:4c:3b:b3:41:e7:29:9f:79:1e:34:4d:05:
d7:51:9c:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTuPxzKdBi86v+pnnUIhrg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjEwMDUwNTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGFkZTIxNDM5ODNhNDE2YmQ5YzAwMjY5Y2UyNDE4MjU3MmFiN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicX7dSMrDLzffuab9XFHnnWMnhEF
+qn9SJRumgwpyz0HR1UI0a9DjRrDYdAc00NM89xaWJCwQzqv0S6j7cBOK/B8/Hzq
2D2LIifonHvoBb+GaC/6RrOvJ6XcjGZTWJbMP1QgOZvdPdgLQ2q1svpDrwrDk0ZC
Levdl6JlunjZFFNOnGBOoKkaJXjji75HOimJDgzsHhl4vFHWqnNt2K/lAlms8Li2
e7p4yoBy2j/KqfHUxM9umOC3THJryWMQ8/WlBq+zBHc+gCs1rT5FBIkvNNL/O0SE
iSGPyYglROeaeaPFlMQXvqIt9PfvsOF7t4rvwR+66CvLcqpUuzfLUOOuHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBit4hQ5g6QWvZwAJpziQYJXKrfnMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvR0szaUZEbURwQmE5bkFBbW5PSkJnbGNxdC1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOLMA0G
CSqGSIb3DQEBCwUAA4IBAQDpVfXF2FIs0yiJbX1A5p7nEvvNa9/ay+pLsZO2yRjD
eNnf2uAFYxDIfRYbJlUvrasAmVarXRalICCGi68eM9jH9TCIA/qQAAtKRbN3uu/J
tBdO0VfU0X85+8BSu+Agni8Cwvjl0Hu8lbT+UGO90G91KtJ3Z2Y9k2ukmin+b+4Z
vomWyUt3a1fN+nPgZAviVCqsJ8DHWDvZr0SqljOuKTWrkk9+ctd2bhRz2w7/jwR+
3T0YBRyF2tl8ysBbv2+2OwTBYnrG4xnG4CwECIo8S6BlXvZ7MgPNxWGKKwu2viqD
do6+qSEYuhhuS6triEr8uRFMO7NB5ymfeR40TQXXUZyS
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:29 2025 by rpki-client