Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/GAhdV6Tg3WkeS5BXSmsXJP8d_l0.roa
File: GAhdV6Tg3WkeS5BXSmsXJP8d_l0.roa (raw, json)
Hash identifier: PGha2Dhee2o/g9I0OSrMN/SFSjYryDj/xIN5FBpTwEY=
Subject key identifier: 18:08:5D:57:A4:E0:DD:69:1E:4B:90:57:4A:6B:17:24:FF:1D:FE:5D
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01822449F6DB7C735AF7F7F9331A96EA7ADA
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/GAhdV6Tg3WkeS5BXSmsXJP8d_l0.roa
Signing time: Fri 22 Jul 2022 05:03:23 +0000
ROA not before: Fri 22 Jul 2022 05:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 195.184.92.0/23 maxlen: 24
193.37.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:49:f6:db:7c:73:5a:f7:f7:f9:33:1a:96:ea:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Jul 22 05:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18085d57a4e0dd691e4b90574a6b1724ff1dfe5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1a:f4:c5:91:3b:d8:fa:d8:96:1e:8a:d3:c7:
1b:24:76:87:63:f8:1d:3b:de:11:a8:97:75:a4:cb:
80:04:92:f8:d8:24:7b:f8:8e:9f:be:7e:9c:3a:33:
5f:17:96:07:c0:76:7f:e5:ee:13:32:57:a9:81:e7:
64:7a:cf:ea:1e:16:b5:09:c2:f6:fe:1d:83:af:b6:
47:04:c4:0c:17:47:dd:b0:d1:27:1a:05:44:75:e5:
1d:3a:36:1a:14:55:44:92:7b:19:a7:a1:6d:6b:82:
db:e1:ba:89:ea:33:54:e9:cf:18:76:c8:1d:12:69:
20:0a:c3:e9:96:9d:05:63:6d:d9:5f:62:b1:9e:2d:
eb:36:ae:e8:24:ed:f3:e3:2b:05:7a:23:ef:85:b1:
3d:60:0d:4b:aa:49:01:e0:c6:61:5d:fc:5a:cf:f8:
47:e7:b1:79:5e:8b:1f:1b:85:1a:c6:f2:e2:ca:77:
9c:08:2f:2e:33:9f:fe:95:95:44:8d:59:a5:40:f5:
ff:40:3f:d6:43:85:1b:b0:9a:65:25:5f:0f:d2:d3:
9c:93:72:57:4c:43:8e:43:85:8a:49:87:97:59:54:
f5:45:db:7a:4d:f2:d1:ae:49:c8:d6:b8:d4:2d:ad:
0f:4c:8b:c7:0a:80:fd:1b:a2:6a:f9:f5:26:9b:16:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:5D:57:A4:E0:DD:69:1E:4B:90:57:4A:6B:17:24:FF:1D:FE:5D
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/GAhdV6Tg3WkeS5BXSmsXJP8d_l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.236.0/24
195.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:46:1f:b2:69:cf:c0:6c:3a:c0:7d:25:1b:f7:33:ee:e5:2d:
e9:4b:6e:82:11:5d:bc:25:b7:ed:36:fb:04:7b:91:75:a5:c2:
60:92:fc:9b:7d:38:e8:b8:2e:56:88:13:2c:72:42:5e:2a:38:
df:3c:f4:95:44:78:c1:aa:6f:12:3d:e7:de:c4:6f:3c:67:4d:
82:c5:52:e2:8c:15:82:47:93:90:52:e1:33:30:a2:6a:df:87:
2b:cf:71:8a:78:ba:ec:c3:77:06:fb:de:83:06:2f:3b:ad:f9:
b7:92:3f:fd:29:5b:46:5c:82:be:5c:40:cf:e4:e3:cd:5c:5d:
6a:51:cf:46:c2:c5:91:fa:e0:cd:28:6e:d4:31:32:af:8c:b7:
38:8f:ec:4e:05:3b:0b:ca:b0:5f:d0:39:09:ab:2d:04:6c:f7:
f5:f7:b2:85:25:89:b2:27:bc:4f:cb:1a:eb:23:6b:56:b8:fc:
7f:90:32:71:9b:fd:b2:41:70:c8:aa:9f:49:d7:9a:58:23:17:
4b:c6:49:cd:27:e9:54:52:3c:36:2a:ca:ed:32:38:fd:30:f5:
c4:37:46:9f:2c:45:60:0b:bb:49:e5:c1:58:e3:c3:1c:7b:fb:
d9:59:db:15:d8:83:76:1b:fa:ad:39:19:ec:34:68:11:01:2e:
b3:00:05:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYIkSfbbfHNa9/f5MxqW6nraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjIwNzIyMDUwMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODA4NWQ1N2E0ZTBkZDY5MWU0YjkwNTc0YTZiMTcyNGZmMWRmZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBr0xZE72PrYlh6K08cbJHaHY/gd
O94RqJd1pMuABJL42CR7+I6fvn6cOjNfF5YHwHZ/5e4TMlepgedkes/qHha1CcL2
/h2Dr7ZHBMQMF0fdsNEnGgVEdeUdOjYaFFVEknsZp6Fta4Lb4bqJ6jNU6c8Ydsgd
EmkgCsPplp0FY23ZX2Kxni3rNq7oJO3z4ysFeiPvhbE9YA1LqkkB4MZhXfxaz/hH
57F5XosfG4UaxvLiynecCC8uM5/+lZVEjVmlQPX/QD/WQ4UbsJplJV8P0tOck3JX
TEOOQ4WKSYeXWVT1Rdt6TfLRrknI1rjULa0PTIvHCoD9G6Jq+fUmmxY6eQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBgIXVek4N1pHkuQV0prFyT/Hf5dMB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvR0FoZFY2VGczV2tlUzVCWFNtc1hKUDhkX2wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSXsAwQB
w7hcMA0GCSqGSIb3DQEBCwUAA4IBAQA/Rh+yac/AbDrAfSUb9zPu5S3pS26CEV28
JbftNvsEe5F1pcJgkvybfTjouC5WiBMsckJeKjjfPPSVRHjBqm8SPefexG88Z02C
xVLijBWCR5OQUuEzMKJq34crz3GKeLrsw3cG+96DBi87rfm3kj/9KVtGXIK+XEDP
5OPNXF1qUc9GwsWR+uDNKG7UMTKvjLc4j+xOBTsLyrBf0DkJqy0EbPf197KFJYmy
J7xPyxrrI2tWuPx/kDJxm/2yQXDIqp9J15pYIxdLxknNJ+lUUjw2KsrtMjj9MPXE
N0afLEVgC7tJ5cFY48Mce/vZWdsV2IN2G/qtORnsNGgRAS6zAAXJ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:16 2025 by rpki-client