Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/GWxeu1y_CzxjapRD6Erht2PYQd8.roa
File: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (raw, json)
Hash identifier: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=
Subject key identifier: 19:6C:5E:BB:5C:BF:0B:3C:63:6A:94:43:E8:4A:E1:B7:63:D8:41:DF
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 019420D62501F1F69D32810B0E1CE36AB5F9
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/GWxeu1y_CzxjapRD6Erht2PYQd8.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21100
IP address blocks: 91.235.129.0/24 maxlen: 24
185.174.172.0/22 maxlen: 22
185.237.206.0/23 maxlen: 23
195.54.162.0/24 maxlen: 24
2a06:c6c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:25:01:f1:f6:9d:32:81:0b:0e:1c:e3:6a:b5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196c5ebb5cbf0b3c636a9443e84ae1b763d841df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:bb:17:db:bf:70:05:12:4a:f1:e7:a6:a4:
5e:c0:55:c3:17:a8:db:ff:9a:44:8e:46:81:78:e8:
df:e9:06:ca:25:89:64:15:14:4d:72:77:d2:52:e5:
7d:7b:77:ed:b6:44:44:93:08:af:4c:8e:89:b8:9e:
8a:a5:22:74:1c:c4:8b:a5:e4:a0:f4:20:c1:fe:9a:
09:2e:cc:3d:35:f9:fb:40:47:3d:66:38:06:2a:83:
ee:d6:aa:35:9c:19:73:b2:ae:9d:60:5f:31:77:71:
12:40:f2:f4:27:ed:c5:90:c9:4b:dd:48:e8:52:86:
28:75:a7:63:a6:d2:d5:71:35:e8:33:d2:a8:a7:39:
fa:56:1a:e4:87:dc:09:83:6e:a7:88:3f:bc:98:e0:
70:b8:d4:a4:8f:52:6d:17:f1:cc:18:43:32:2a:6b:
b6:8c:19:4e:d0:fd:9b:43:42:86:e4:8a:5c:86:20:
c1:9c:9f:f7:2a:9b:ee:81:e1:27:f7:7c:85:12:be:
99:73:7b:17:9e:d6:ac:00:db:ed:3e:ab:90:a8:8b:
29:54:de:d4:53:6c:4e:7a:86:7f:47:47:0c:01:14:
a8:70:23:83:dc:ac:82:26:c0:ff:8b:e9:fc:4c:a8:
67:30:84:f8:77:0e:8e:81:44:af:75:5e:94:aa:d6:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6C:5E:BB:5C:BF:0B:3C:63:6A:94:43:E8:4A:E1:B7:63:D8:41:DF
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/GWxeu1y_CzxjapRD6Erht2PYQd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.129.0/24
185.174.172.0/22
185.237.206.0/23
195.54.162.0/24
IPv6:
2a06:c6c0::/48
Signature Algorithm: sha256WithRSAEncryption
68:77:32:f9:3b:9f:8b:14:e2:bc:c7:19:c8:72:c2:d4:27:a0:
90:bc:09:37:cc:49:20:78:8f:83:5c:9e:15:dc:8c:3a:fc:b5:
bd:01:89:dd:02:7f:78:ea:eb:a9:9c:0e:b3:25:96:74:51:68:
79:c8:75:06:7f:1d:42:86:de:f0:6e:7f:48:f0:4e:33:ba:7c:
75:94:f0:48:15:6d:ba:dc:d2:81:87:f0:c0:c8:32:78:e1:eb:
19:eb:61:8a:79:b6:66:91:c4:c0:0d:d9:64:24:43:cc:40:15:
15:4a:42:2c:1d:3f:35:48:2d:e4:dd:4e:cb:07:07:72:de:dd:
79:76:8d:6d:aa:34:cd:cf:6e:67:36:63:de:dd:2b:fd:bd:b6:
70:ba:83:0f:ed:01:ca:31:dd:59:de:86:b1:bc:8b:03:f2:9a:
82:ab:e7:f8:46:02:a0:b4:66:df:4f:ea:64:17:83:5d:0d:eb:
bd:42:09:f2:54:da:1f:a5:2a:81:e2:de:1e:7d:49:e2:49:0b:
bc:a0:d2:ae:bc:be:dd:f4:9d:ec:f9:cb:9a:b6:5a:88:64:4e:
6a:62:3f:56:3b:40:47:d3:59:52:b9:0b:9c:39:82:e2:78:15:
59:25:ae:39:cd:63:17:76:53:ef:bf:40:7c:7f:4a:7b:ac:59:
7f:99:ff:76
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQg1iUB8fadMoELDhzjarX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk
ZDU1NWEwHhcNMjUwMTAxMDc0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTZjNWViYjVjYmYwYjNjNjM2YTk0NDNlODRhZTFiNzYzZDg0MWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWC7F9u/cAUSSvHnpqRewFXDF6jb
/5pEjkaBeOjf6QbKJYlkFRRNcnfSUuV9e3fttkREkwivTI6JuJ6KpSJ0HMSLpeSg
9CDB/poJLsw9Nfn7QEc9ZjgGKoPu1qo1nBlzsq6dYF8xd3ESQPL0J+3FkMlL3Ujo
UoYodadjptLVcTXoM9Kopzn6Vhrkh9wJg26niD+8mOBwuNSkj1JtF/HMGEMyKmu2
jBlO0P2bQ0KG5IpchiDBnJ/3KpvugeEn93yFEr6Zc3sXntasANvtPquQqIspVN7U
U2xOeoZ/R0cMARSocCOD3KyCJsD/i+n8TKhnMIT4dw6OgUSvdV6UqtZXYwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFBlsXrtcvws8Y2qUQ+hK4bdj2EHfMB8GA1UdIwQY
MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt
OTVjNTAwMWJmYzcwLzEvR1d4ZXUxeV9DenhqYXBSRDZFcmh0MlBZUWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUtOTVjNTAwMWJmYzcw
LzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAW+uBAwQC
ua6sAwQBue3OAwQAwzaiMA8EAgACMAkDBwAqBsbAAAAwDQYJKoZIhvcNAQELBQAD
ggEBAGh3Mvk7n4sU4rzHGchywtQnoJC8CTfMSSB4j4NcnhXcjDr8tb0Bid0Cf3jq
66mcDrMllnRRaHnIdQZ/HUKG3vBuf0jwTjO6fHWU8EgVbbrc0oGH8MDIMnjh6xnr
YYp5tmaRxMAN2WQkQ8xAFRVKQiwdPzVILeTdTssHB3Le3Xl2jW2qNM3Pbmc2Y97d
K/29tnC6gw/tAcox3VnehrG8iwPymoKr5/hGAqC0Zt9P6mQXg10N671CCfJU2h+l
KoHi3h59SeJJC7yg0q68vt30nez5y5q2WohkTmpiP1Y7QEfTWVK5C5w5guJ4FVkl
rjnNYxd2U++/QHx/SnusWX+Z/3Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:28:24 2025 by rpki-client