Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/GJFvvd_DhSTge6litoTaxiewidk.roa
File: GJFvvd_DhSTge6litoTaxiewidk.roa (raw, json)
Hash identifier: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=
Subject key identifier: 18:91:6F:BD:DF:C3:85:24:E0:7B:A9:62:B6:84:DA:C6:27:B0:89:D9
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 0194228D344DF5AD6BEE7281E3321D65F950
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/GJFvvd_DhSTge6litoTaxiewidk.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15510
IP address blocks: 46.17.88.0/21 maxlen: 24
91.192.192.0/22 maxlen: 24
91.215.184.0/22 maxlen: 24
185.27.244.0/22 maxlen: 24
193.164.206.0/23 maxlen: 24
193.200.80.0/23 maxlen: 24
194.116.174.0/23 maxlen: 24
195.8.126.0/24 maxlen: 24
2a03:be80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:34:4d:f5:ad:6b:ee:72:81:e3:32:1d:65:f9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18916fbddfc38524e07ba962b684dac627b089d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:2e:0f:b3:10:f2:31:ed:78:37:6b:08:b7:
1f:29:10:28:d4:2c:b2:4c:1e:53:be:45:24:e9:2f:
e5:f1:e2:5d:57:38:bf:31:e4:13:0a:ed:08:8d:b1:
e8:8f:e7:82:6d:97:0c:5c:33:fc:b5:fc:9d:36:cd:
0d:e1:21:0d:c8:1a:8e:f5:da:a9:cc:09:55:e0:be:
5e:49:91:65:27:9d:21:55:01:8f:86:ad:eb:70:c7:
f6:64:01:12:82:ac:38:f8:67:1e:df:c0:f1:21:3d:
3d:f5:2f:7e:1f:d7:93:3a:6d:d8:7d:59:a3:d8:49:
24:96:62:f6:62:ce:d6:30:28:64:df:d1:a0:6a:75:
3d:7b:86:7f:b6:12:fe:6c:be:7e:34:e9:c1:d4:d9:
6e:52:12:2e:bc:39:c9:50:53:ab:1b:78:21:d4:04:
4e:45:5b:38:68:44:94:b1:0e:7d:cb:de:63:44:94:
2a:21:e2:77:33:d2:7e:0e:8c:46:9f:c8:99:86:09:
30:c8:4a:9f:f9:80:62:33:58:58:48:a7:84:34:40:
ff:f1:0f:9b:90:a4:3b:20:a9:38:12:e5:b4:7c:7e:
54:f9:43:10:d1:27:9f:5c:f1:45:a1:0b:ff:9a:b7:
bb:24:0d:25:39:d6:04:a2:5a:02:50:89:ed:bb:a3:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:6F:BD:DF:C3:85:24:E0:7B:A9:62:B6:84:DA:C6:27:B0:89:D9
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/GJFvvd_DhSTge6litoTaxiewidk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.88.0/21
91.192.192.0/22
91.215.184.0/22
185.27.244.0/22
193.164.206.0/23
193.200.80.0/23
194.116.174.0/23
195.8.126.0/24
IPv6:
2a03:be80::/32
Signature Algorithm: sha256WithRSAEncryption
7b:84:43:95:b9:f9:ec:30:a5:48:79:66:ba:53:64:e7:87:51:
0b:72:84:84:25:89:9f:0b:76:2f:8d:64:41:4e:76:75:cf:dd:
90:85:e0:3d:61:37:e0:21:60:24:13:66:a4:59:40:a9:77:d9:
88:6c:2d:0b:30:ba:70:72:c2:4d:cd:88:93:d3:29:c7:c1:93:
aa:53:02:7d:8d:4e:57:ca:ff:2d:60:a3:d7:b5:ef:e5:8c:39:
0e:23:e5:72:6d:81:b9:25:3d:af:3c:a8:0d:db:f0:28:ad:cb:
07:be:61:af:1f:c8:5a:29:0c:21:44:31:03:c5:a5:c1:fb:52:
38:f5:f0:01:01:26:11:65:97:2a:1e:44:44:9b:b7:06:b6:76:
d7:43:bc:c9:f7:48:f8:bf:fb:ad:02:b1:54:51:de:b7:78:d0:
fe:52:88:de:f1:d8:50:2a:ab:f6:04:88:a8:fb:ab:ba:25:1e:
39:33:f1:7e:14:e6:8d:ef:10:9b:e4:e1:27:47:60:7c:14:21:
b7:72:4f:ba:73:a5:14:df:ec:29:b5:af:d4:5d:d8:17:e0:ba:
3f:f4:58:ef:a8:53:01:b3:2b:a2:57:e4:56:99:80:f8:2b:de:
6f:bc:a3:07:71:98:50:5f:a4:98:66:7e:06:f1:42:d8:25:eb:
2f:79:4e:5f
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQijTRN9a1r7nKB4zIdZflQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk
OGE5ZjUwHhcNMjUwMTAxMTU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODkxNmZiZGRmYzM4NTI0ZTA3YmE5NjJiNjg0ZGFjNjI3YjA4OWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkEuD7MQ8jHteDdrCLcfKRAo1Cyy
TB5TvkUk6S/l8eJdVzi/MeQTCu0IjbHoj+eCbZcMXDP8tfydNs0N4SENyBqO9dqp
zAlV4L5eSZFlJ50hVQGPhq3rcMf2ZAESgqw4+Gce38DxIT099S9+H9eTOm3YfVmj
2EkklmL2Ys7WMChk39GganU9e4Z/thL+bL5+NOnB1NluUhIuvDnJUFOrG3gh1ARO
RVs4aESUsQ59y95jRJQqIeJ3M9J+DoxGn8iZhgkwyEqf+YBiM1hYSKeENED/8Q+b
kKQ7IKk4EuW0fH5U+UMQ0SefXPFFoQv/mre7JA0lOdYEoloCUIntu6NJqwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFBiRb73fw4Uk4HupYraE2sYnsInZMB8GA1UdIwQY
MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt
N2E3OTRkNWNlZDNkLzEvR0pGdnZkX0RoU1RnZTZsaXRvVGF4aWV3aWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk
LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDLhFYAwQC
W8DAAwQCW9e4AwQCuRv0AwQBwaTOAwQBwchQAwQBwnSuAwQAwwh+MA0EAgACMAcD
BQAqA76AMA0GCSqGSIb3DQEBCwUAA4IBAQB7hEOVufnsMKVIeWa6U2Tnh1ELcoSE
JYmfC3YvjWRBTnZ1z92QheA9YTfgIWAkE2akWUCpd9mIbC0LMLpwcsJNzYiT0ynH
wZOqUwJ9jU5Xyv8tYKPXte/ljDkOI+VybYG5JT2vPKgN2/AorcsHvmGvH8haKQwh
RDEDxaXB+1I49fABASYRZZcqHkREm7cGtnbXQ7zJ90j4v/utArFUUd63eND+Uoje
8dhQKqv2BIio+6u6JR45M/F+FOaN7xCb5OEnR2B8FCG3ck+6c6UU3+wpta/UXdgX
4Lo/9FjvqFMBsyuiV+RWmYD4K95vvKMHcZhQX6SYZn4G8ULYJesveU5f
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:00 2025 by rpki-client