Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/gmwAPvVAgEiXQ8Lsl22XbLnjtW4.roa
File: gmwAPvVAgEiXQ8Lsl22XbLnjtW4.roa (raw, json)
Hash identifier: 6xScpbRD1ESfjHN/ryxncMz1vPQcFrnSs/ubSMfwADc=
Subject key identifier: 82:6C:00:3E:F5:40:80:48:97:43:C2:EC:97:6D:97:6C:B9:E3:B5:6E
Certificate issuer: /CN=6aebc95381af87a34aee42e6854cc608a90b4acc
Certificate serial: 01838E96F350F2BD2E607423182BBB2CFF8E
Authority key identifier: 6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/gmwAPvVAgEiXQ8Lsl22XbLnjtW4.roa
Signing time: Fri 30 Sep 2022 13:30:00 +0000
ROA not before: Fri 30 Sep 2022 13:30:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25521
IP address blocks: 185.223.112.0/22 maxlen: 22
46.30.160.0/21 maxlen: 21
93.188.32.0/21 maxlen: 21
176.115.96.0/21 maxlen: 21
193.106.136.0/22 maxlen: 22
193.0.216.0/22 maxlen: 22
193.0.220.0/23 maxlen: 23
91.224.24.0/23 maxlen: 23
82.193.96.0/19 maxlen: 19
195.64.148.0/23 maxlen: 23
2a02:2610::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:96:f3:50:f2:bd:2e:60:74:23:18:2b:bb:2c:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aebc95381af87a34aee42e6854cc608a90b4acc
Validity
Not Before: Sep 30 13:30:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=826c003ef54080489743c2ec976d976cb9e3b56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:9b:38:0f:d8:30:7d:89:a3:0e:0d:e4:97:
ac:03:ad:eb:d5:ce:e9:c4:c8:a1:cc:88:c9:bc:32:
c3:c1:00:b3:dd:13:37:e4:56:23:24:65:aa:e2:95:
73:b5:fb:b3:77:86:01:f9:b3:83:d8:ea:17:c2:c4:
26:8f:b6:bf:d9:cc:92:1b:65:20:ca:b6:49:e2:4f:
0f:08:3a:c0:40:5e:82:96:f4:b6:b4:2d:e0:c6:c2:
bc:7f:7e:19:84:c2:b2:b6:b9:46:1a:5c:b9:4d:ad:
67:6f:b0:c6:9a:35:80:42:4e:9e:0a:47:7d:d4:21:
df:7a:b6:8c:cb:5a:df:79:eb:1e:ff:39:d2:a6:34:
85:1c:99:61:a2:4c:0c:e7:20:50:59:58:69:a3:47:
be:23:38:29:d4:e7:ce:83:7a:f6:bd:5f:29:d8:03:
d4:b6:77:0d:cb:37:cd:2b:c7:29:2e:13:cc:5b:ea:
3e:e5:11:94:4d:a7:da:18:43:06:db:5f:14:98:4c:
23:a3:55:9d:35:8d:c9:61:16:74:e0:62:4f:9b:18:
bb:64:0a:6c:78:e7:e2:a9:82:9a:94:72:6c:80:62:
fb:f9:b1:84:41:00:20:16:f3:2f:bc:c4:1a:02:8e:
2e:1f:2c:11:c8:dd:87:f4:59:62:fa:3d:6b:fc:bb:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:00:3E:F5:40:80:48:97:43:C2:EC:97:6D:97:6C:B9:E3:B5:6E
X509v3 Authority Key Identifier:
keyid:6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/gmwAPvVAgEiXQ8Lsl22XbLnjtW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/auvJU4Gvh6NK7kLmhUzGCKkLSsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.160.0/21
82.193.96.0/19
91.224.24.0/23
93.188.32.0/21
176.115.96.0/21
185.223.112.0/22
193.0.216.0-193.0.221.255
193.106.136.0/22
195.64.148.0/23
IPv6:
2a02:2610::/32
Signature Algorithm: sha256WithRSAEncryption
54:9b:aa:24:e1:db:6a:29:d3:1b:75:cc:04:66:e9:53:1d:f4:
77:2e:50:7b:0a:25:93:f9:32:1b:ce:91:8b:fd:52:ba:ce:e9:
0c:55:6c:8e:70:61:14:05:c9:25:a9:f7:a6:4f:75:30:c1:bb:
6a:3c:cb:12:63:45:a0:f5:25:14:3f:9d:86:9b:d2:6d:46:1b:
32:da:68:dc:33:59:45:4f:0c:0b:1f:ac:09:44:dc:4c:c0:d4:
27:b8:83:ac:9c:16:a6:d7:4c:d5:a2:27:73:ad:78:f6:41:2c:
4e:82:49:f4:2e:ce:64:e4:3c:c2:e1:6a:74:fa:58:6b:12:eb:
85:be:eb:6f:7d:c1:98:f7:28:3e:9c:25:43:db:87:1b:bf:50:
08:f6:39:a1:e6:75:86:9c:2b:8a:b2:cf:33:79:62:ae:1d:6d:
5b:44:97:37:1b:eb:06:ed:25:b3:ed:af:54:b0:a3:d6:02:d2:
77:79:f8:fb:81:be:1a:f2:90:02:a3:4d:bf:a8:82:fd:12:89:
c7:44:64:24:00:c8:32:16:80:63:65:f4:3f:b0:15:bf:9f:43:
34:b7:39:43:5b:9a:3c:68:70:5c:67:f6:06:e9:6a:7c:78:9d:
d9:35:e6:3b:fb:23:60:58:2f:41:84:6b:5b:0a:39:9c:46:d6:
ff:f6:41:05
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYOOlvNQ8r0uYHQjGCu7LP+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWJjOTUzODFhZjg3YTM0YWVlNDJlNjg1NGNjNjA4YTkw
YjRhY2MwHhcNMjIwOTMwMTMzMDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjZjMDAzZWY1NDA4MDQ4OTc0M2MyZWM5NzZkOTc2Y2I5ZTNiNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko2bOA/YMH2Jow4N5JesA63r1c7p
xMihzIjJvDLDwQCz3RM35FYjJGWq4pVztfuzd4YB+bOD2OoXwsQmj7a/2cySG2Ug
yrZJ4k8PCDrAQF6ClvS2tC3gxsK8f34ZhMKytrlGGly5Ta1nb7DGmjWAQk6eCkd9
1CHferaMy1rfeese/znSpjSFHJlhokwM5yBQWVhpo0e+Izgp1OfOg3r2vV8p2APU
tncNyzfNK8cpLhPMW+o+5RGUTafaGEMG218UmEwjo1WdNY3JYRZ04GJPmxi7ZAps
eOfiqYKalHJsgGL7+bGEQQAgFvMvvMQaAo4uHywRyN2H9Fli+j1r/LuNSwIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFIJsAD71QIBIl0PC7Jdtl2y547VuMB8GA1UdIwQY
MBaAFGrryVOBr4ejSu5C5oVMxgipC0rMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXV2SlU0R3ZoNk5LN2tMbWhVekdDS2tMU3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZDZlZGUtNzdmYy00MGZhLTg3Njct
ODRlZmFmOTA0ODZjLzEvZ213QVB2VkFnRWlYUThMc2wyMlhiTG5qdFc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZDZlZGUtNzdmYy00MGZhLTg3NjctODRlZmFmOTA0ODZj
LzEvYXV2SlU0R3ZoNk5LN2tMbWhVekdDS2tMU3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQDLh6gAwQF
UsFgAwQBW+AYAwQDXbwgAwQDsHNgAwQCud9wMAwDBAPBANgDBAHBANwDBALBaogD
BAHDQJQwDQQCAAIwBwMFACoCJhAwDQYJKoZIhvcNAQELBQADggEBAFSbqiTh22op
0xt1zARm6VMd9HcuUHsKJZP5MhvOkYv9UrrO6QxVbI5wYRQFySWp96ZPdTDBu2o8
yxJjRaD1JRQ/nYab0m1GGzLaaNwzWUVPDAsfrAlE3EzA1Ce4g6ycFqbXTNWiJ3Ot
ePZBLE6CSfQuzmTkPMLhanT6WGsS64W+6299wZj3KD6cJUPbhxu/UAj2OaHmdYac
K4qyzzN5Yq4dbVtElzcb6wbtJbPtr1Swo9YC0nd5+PuBvhrykAKjTb+ogv0SicdE
ZCQAyDIWgGNl9D+wFb+fQzS3OUNbmjxocFxn9gbpanx4ndk15jv7I2BYL0GEa1sK
OZxG1v/2QQU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:36 2024 by rpki-client on console-ams.rpki-client.org