Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/ghOgZScInzU-k80H-uXo6Z44fh4.roa
File: ghOgZScInzU-k80H-uXo6Z44fh4.roa (raw, json)
Hash identifier: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=
Subject key identifier: 82:13:A0:65:27:08:9F:35:3E:93:CD:07:FA:E5:E8:E9:9E:38:7E:1E
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019424B3CA6F7F8459A62CC77A6133874F35
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/ghOgZScInzU-k80H-uXo6Z44fh4.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208890
IP address blocks: 193.228.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ca:6f:7f:84:59:a6:2c:c7:7a:61:33:87:4f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8213a06527089f353e93cd07fae5e8e99e387e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:ac:b6:bc:a2:c9:46:5d:76:6d:bc:e5:83:
13:e5:de:55:c7:a9:84:5c:1d:eb:47:a9:2a:7e:01:
0f:da:5b:79:0a:2d:3e:e2:d6:6a:2f:88:b8:e8:1e:
ff:4a:36:6c:07:59:0b:22:e2:1e:b5:ab:eb:02:26:
99:a4:a5:e4:57:9a:47:d0:a5:ee:94:df:8d:49:e6:
71:9e:e0:4d:04:7d:10:d1:f4:c9:2e:68:0a:30:ef:
e3:89:4e:a7:0a:3f:d1:40:ad:41:b7:8a:af:9e:f5:
48:01:78:bf:39:98:21:5a:02:fb:84:c4:34:01:99:
ec:1b:39:b3:23:86:be:5f:60:00:b0:e1:e7:8b:8d:
2b:bc:8c:0b:b2:04:ba:eb:43:7d:00:bd:3a:84:61:
f3:3d:aa:71:f4:48:6f:a3:bc:4a:56:01:17:9f:62:
aa:e1:75:51:a9:2e:0f:86:57:83:34:da:32:62:00:
a2:cf:2d:7d:6e:a6:41:d8:ad:a3:6a:bf:13:48:4a:
ad:54:12:a0:06:b0:4c:8e:d1:7c:e7:a6:e5:42:de:
c7:f7:a0:a8:57:5d:03:91:ed:86:06:6a:63:6a:cf:
a7:17:75:12:c7:2e:bf:c8:5d:ae:60:07:c1:4b:44:
b5:3c:77:21:4b:fe:c1:c4:e8:3b:a5:50:f5:9e:68:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:A0:65:27:08:9F:35:3E:93:CD:07:FA:E5:E8:E9:9E:38:7E:1E
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/ghOgZScInzU-k80H-uXo6Z44fh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.162.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c0:2f:21:7e:3b:61:3c:06:15:b4:bf:7e:7e:d8:f9:09:02:
6b:1e:06:4c:a5:dd:c7:e1:c5:96:51:f7:2b:26:89:12:f2:81:
70:72:41:6e:a1:d9:eb:9b:3c:0e:22:36:bd:58:a7:7d:f7:62:
2c:11:26:e5:79:06:03:0f:85:69:3b:59:b0:ca:96:80:02:76:
fc:8b:d4:8e:32:40:2a:b1:6f:3f:77:df:fb:e7:06:5d:70:02:
9b:da:1f:ca:c0:a8:5a:1b:4c:d3:ca:f6:26:13:f0:ae:39:d2:
80:3d:26:7b:b2:64:6d:f7:65:e4:73:4e:24:cc:08:c0:ed:43:
50:55:c3:44:d5:06:b2:ed:23:d7:0f:26:28:f6:1d:91:c1:ac:
e9:aa:3e:9b:88:2f:14:d0:ea:2b:27:f6:47:ae:b1:d0:4d:14:
7d:90:5a:78:a1:29:97:5d:38:61:4e:0b:05:fa:3a:78:76:cf:
45:64:03:d0:4f:64:36:c1:a5:45:d0:43:ba:ac:d8:9b:fc:7b:
3f:53:76:48:98:c8:ee:b7:39:6d:45:73:c6:6c:71:11:93:8d:
b6:cf:33:ca:23:9c:6f:3a:6e:4a:6e:6c:7d:54:52:d0:7e:b8:
d5:c2:34:c5:cf:12:86:61:79:39:6a:31:25:31:9b:52:41:a6:
2e:f5:af:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks8pvf4RZpizHemEzh081MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjUwMTAyMDE0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjEzYTA2NTI3MDg5ZjM1M2U5M2NkMDdmYWU1ZThlOTllMzg3ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E2stryiyUZddm285YMT5d5Vx6mE
XB3rR6kqfgEP2lt5Ci0+4tZqL4i46B7/SjZsB1kLIuIetavrAiaZpKXkV5pH0KXu
lN+NSeZxnuBNBH0Q0fTJLmgKMO/jiU6nCj/RQK1Bt4qvnvVIAXi/OZghWgL7hMQ0
AZnsGzmzI4a+X2AAsOHni40rvIwLsgS660N9AL06hGHzPapx9Ehvo7xKVgEXn2Kq
4XVRqS4PhleDNNoyYgCizy19bqZB2K2jar8TSEqtVBKgBrBMjtF856blQt7H96Co
V10Dke2GBmpjas+nF3USxy6/yF2uYAfBS0S1PHchS/7BxOg7pVD1nmjIiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIToGUnCJ81PpPNB/rl6OmeOH4eMB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvZ2hPZ1pTY0luelUtazgwSC11WG82WjQ0Zmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSiMA0G
CSqGSIb3DQEBCwUAA4IBAQA4wC8hfjthPAYVtL9+ftj5CQJrHgZMpd3H4cWWUfcr
JokS8oFwckFuodnrmzwOIja9WKd992IsESbleQYDD4VpO1mwypaAAnb8i9SOMkAq
sW8/d9/75wZdcAKb2h/KwKhaG0zTyvYmE/CuOdKAPSZ7smRt92Xkc04kzAjA7UNQ
VcNE1Qay7SPXDyYo9h2Rwazpqj6biC8U0OorJ/ZHrrHQTRR9kFp4oSmXXThhTgsF
+jp4ds9FZAPQT2Q2waVF0EO6rNib/Hs/U3ZImMjutzltRXPGbHERk422zzPKI5xv
Om5Kbmx9VFLQfrjVwjTFzxKGYXk5ajElMZtSQaYu9a/w
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:50 2025 by rpki-client