Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gq2-4Hv1V1_sfcbAeo7IwPAsTGI.roa
File: Gq2-4Hv1V1_sfcbAeo7IwPAsTGI.roa (raw, json)
Hash identifier: t72oaNiSbVHqQva+2WFrXlRVmQnkEfD7bwi1Hfa/mh0=
Subject key identifier: 1A:AD:BE:E0:7B:F5:57:5F:EC:7D:C6:C0:7A:8E:C8:C0:F0:2C:4C:62
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195765F1E90EAE58236DF7360738FC5799D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gq2-4Hv1V1_sfcbAeo7IwPAsTGI.roa
Signing time: Sat 08 Mar 2025 15:28:19 +0000
ROA not before: Sat 08 Mar 2025 15:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 94.103.166.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:76:5f:1e:90:ea:e5:82:36:df:73:60:73:8f:c5:79:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 8 15:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aadbee07bf5575fec7dc6c07a8ec8c0f02c4c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:74:f0:e5:12:47:98:be:da:c6:11:39:d9:
3b:eb:05:60:23:78:bb:0a:bf:66:33:27:73:67:76:
b5:6a:6b:1d:0b:87:e8:a8:c6:00:4b:50:82:b3:51:
a9:fe:a4:d1:15:05:3c:0a:87:de:3d:f7:7c:a5:8b:
c4:8d:0c:fc:8e:5c:a1:6b:0a:7e:0a:d4:99:85:7b:
92:a3:6f:ec:4b:48:fe:6d:7b:24:38:cf:b3:35:e2:
28:36:26:1c:1a:23:9d:2c:aa:d9:47:28:4d:b5:a1:
87:af:26:14:a9:28:0a:9e:7f:55:66:fb:4f:c3:e0:
5e:e2:9d:b1:8e:ce:5c:fb:7a:48:cd:1b:e9:ec:0b:
a4:3a:4d:42:cc:5e:43:5d:f7:22:9b:36:13:1b:de:
fb:95:b3:ab:3c:56:83:12:ba:ba:b9:b4:c7:20:d3:
d5:55:b3:8c:cc:5e:bc:41:87:2f:79:5c:a1:ac:4b:
11:a6:19:f3:8d:c9:c8:82:7a:0a:69:e3:bd:e3:2e:
e2:11:0d:8a:00:9f:70:48:13:8d:fe:11:f6:14:df:
7b:b9:06:b7:31:f3:e3:34:36:b2:86:18:57:fb:3e:
fd:62:5c:c8:13:29:23:21:13:5a:fb:f3:22:0f:d1:
2c:ba:86:eb:23:b8:9a:d2:bd:a8:bd:18:3a:7c:f7:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:BE:E0:7B:F5:57:5F:EC:7D:C6:C0:7A:8E:C8:C0:F0:2C:4C:62
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gq2-4Hv1V1_sfcbAeo7IwPAsTGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:c2:ab:2c:b0:a9:69:61:42:a1:04:b2:0f:1a:40:91:fb:0d:
c9:36:2a:56:25:84:e3:35:4a:d5:0a:17:23:bf:7c:cb:1c:a4:
52:9e:87:0b:78:ce:2c:0d:b0:ef:3c:38:73:37:a4:c8:17:02:
d6:61:77:37:1b:a5:2c:f4:be:1c:97:ca:78:24:98:25:b8:49:
7f:47:43:1c:48:8d:d1:56:33:88:8a:cf:cb:09:40:1d:3a:4d:
81:3b:9f:b5:58:84:c4:b0:59:2b:6b:13:4c:c1:d2:ef:b5:c6:
43:65:dc:49:f3:14:29:36:3e:88:05:8c:c1:d4:e1:cc:a9:66:
2f:fa:30:0b:da:80:06:98:08:8e:5e:37:72:3e:6c:d6:cb:1c:
fe:b5:c5:34:97:68:ea:1e:ae:c6:53:1b:89:6d:ac:05:b7:95:
f9:49:c9:0c:45:86:b4:d5:28:ca:c1:e9:85:84:53:a1:95:36:
12:fa:a8:b1:c2:12:cb:50:2e:74:dd:cd:a7:66:ee:af:1d:62:
ac:26:42:55:f1:e7:f7:c5:44:94:d6:6c:09:be:61:3c:4a:fd:
9e:61:4b:0a:2f:10:92:6f:b0:7a:d2:27:7a:90:d5:13:c0:53:
43:8e:b9:63:3c:d1:a0:96:e0:24:aa:45:37:54:21:46:76:d6:
fa:44:fa:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZV2Xx6Q6uWCNt9zYHOPxXmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzA4MTUyODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWFkYmVlMDdiZjU1NzVmZWM3ZGM2YzA3YThlYzhjMGYwMmM0YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBp08OUSR5i+2sYROdk76wVgI3i7
Cr9mMydzZ3a1amsdC4foqMYAS1CCs1Gp/qTRFQU8CofePfd8pYvEjQz8jlyhawp+
CtSZhXuSo2/sS0j+bXskOM+zNeIoNiYcGiOdLKrZRyhNtaGHryYUqSgKnn9VZvtP
w+Be4p2xjs5c+3pIzRvp7AukOk1CzF5DXfcimzYTG977lbOrPFaDErq6ubTHINPV
VbOMzF68QYcveVyhrEsRphnzjcnIgnoKaeO94y7iEQ2KAJ9wSBON/hH2FN97uQa3
MfPjNDayhhhX+z79YlzIEykjIRNa+/MiD9EsuobrI7ia0r2ovRg6fPey8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBqtvuB79Vdf7H3GwHqOyMDwLExiMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvR3EyLTRIdjFWMV9zZmNiQWVvN0l3UEFzVEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXmemAwQA
uS+OMA0GCSqGSIb3DQEBCwUAA4IBAQDSwqsssKlpYUKhBLIPGkCR+w3JNipWJYTj
NUrVChcjv3zLHKRSnocLeM4sDbDvPDhzN6TIFwLWYXc3G6Us9L4cl8p4JJgluEl/
R0McSI3RVjOIis/LCUAdOk2BO5+1WITEsFkraxNMwdLvtcZDZdxJ8xQpNj6IBYzB
1OHMqWYv+jAL2oAGmAiOXjdyPmzWyxz+tcU0l2jqHq7GUxuJbawFt5X5SckMRYa0
1SjKwemFhFOhlTYS+qixwhLLUC503c2nZu6vHWKsJkJV8ef3xUSU1mwJvmE8Sv2e
YUsKLxCSb7B60id6kNUTwFNDjrljPNGgluAkqkU3VCFGdtb6RPob
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:20 2025 by rpki-client