Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa
File: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (raw, json)
Hash identifier: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=
Subject key identifier: 82:61:A6:94:15:EE:4F:85:CC:69:DC:05:20:C3:3F:46:EE:C0:F2:B6
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E2B750BCC2531BCCDC2D4BDCC3A43
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 77.74.229.0/24 maxlen: 24
109.105.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:75:0b:cc:25:31:bc:cd:c2:d4:bd:cc:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8261a69415ee4f85cc69dc0520c33f46eec0f2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:b5:33:30:34:fb:05:d0:4b:bc:1c:f2:11:
4f:c7:2f:25:f4:8b:6c:7e:18:f9:77:a7:ac:01:ee:
90:57:0e:e3:9e:5b:a6:b4:b2:da:2e:64:56:9a:44:
b0:ab:69:eb:f5:30:e5:23:b5:4e:41:44:fa:f1:ad:
33:6b:ca:1f:18:92:5b:4c:38:ef:29:55:17:9c:95:
7e:8f:9c:78:83:f8:4d:a4:44:fc:ab:4d:06:9e:e9:
ec:1e:a6:70:8b:ac:f6:e9:70:2c:44:ba:34:c4:6f:
71:4e:01:58:7a:06:be:c8:20:35:52:61:e8:05:eb:
a5:e2:cb:2f:78:76:16:cd:81:e0:7e:53:5a:ff:b4:
9b:04:c6:8f:fb:a2:48:92:c7:ef:e2:49:5c:d8:85:
f5:72:d8:0a:e2:ce:d1:fe:ff:7c:82:54:0d:6e:8c:
53:74:95:13:7d:ba:f3:ae:ba:62:8e:e2:8a:c3:ca:
ae:7a:c7:82:5d:35:f9:20:2a:d4:58:63:8a:bc:66:
dc:05:97:8a:8f:f5:f5:de:53:5c:7d:cb:a4:70:3b:
56:15:bc:58:33:50:dc:bc:ae:5f:88:df:75:fc:40:
12:b8:a8:b1:29:94:13:89:2f:43:90:a9:d5:4e:17:
11:cb:48:69:1b:ff:13:09:4d:72:00:43:2e:61:64:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:61:A6:94:15:EE:4F:85:CC:69:DC:05:20:C3:3F:46:EE:C0:F2:B6
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:69:62:28:a7:74:ae:7e:2f:f8:3d:76:f3:46:33:a5:c8:16:
81:1f:f9:59:1a:ed:db:b1:56:24:13:84:f7:f0:61:07:2a:da:
17:5d:6d:0f:a7:f4:8a:df:71:19:e4:f3:0e:d2:21:b6:e4:b3:
e4:c9:3d:41:8b:c6:2d:3a:3a:02:32:db:a0:7a:4a:63:7a:92:
52:07:1d:3c:98:b1:68:ed:b9:0a:0c:e5:4e:bd:5a:02:93:07:
69:00:a1:f9:4c:36:41:1a:4a:e9:07:a3:c6:fc:b4:8e:b2:fe:
6d:a4:b7:9e:fe:32:5a:d2:cf:41:9d:c3:62:39:16:75:84:cb:
aa:37:d0:39:65:1c:5d:d3:4e:46:64:cd:b0:d5:46:dd:df:b2:
dc:30:de:01:70:3e:91:67:29:1f:98:d8:13:1d:cc:4f:89:21:
07:80:5c:18:97:bb:d7:d0:71:67:bf:7b:03:cc:52:60:5e:e0:
db:ad:1f:a2:80:06:e2:00:0b:ee:e2:6e:13:35:60:4a:d2:80:
46:5c:89:ff:71:c2:a9:ca:94:1d:98:cd:bc:17:52:e4:35:fa:
9a:bf:a1:27:04:f1:fb:4b:8f:32:9e:44:84:13:7f:94:7f:47:
36:80:86:87:2f:88:06:d0:9a:71:3b:dc:cd:a9:ac:ba:7c:77:
e5:fc:21:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijit1C8wlMbzNwtS9zDpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjUwMTAxMTU0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjYxYTY5NDE1ZWU0Zjg1Y2M2OWRjMDUyMGMzM2Y0NmVlYzBmMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfO1MzA0+wXQS7wc8hFPxy8l9Its
fhj5d6esAe6QVw7jnlumtLLaLmRWmkSwq2nr9TDlI7VOQUT68a0za8ofGJJbTDjv
KVUXnJV+j5x4g/hNpET8q00GnunsHqZwi6z26XAsRLo0xG9xTgFYega+yCA1UmHo
Beul4ssveHYWzYHgflNa/7SbBMaP+6JIksfv4klc2IX1ctgK4s7R/v98glQNboxT
dJUTfbrzrrpijuKKw8queseCXTX5ICrUWGOKvGbcBZeKj/X13lNcfcukcDtWFbxY
M1DcvK5fiN91/EASuKixKZQTiS9DkKnVThcRy0hpG/8TCU1yAEMuYWSJ7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIJhppQV7k+FzGncBSDDP0buwPK2MB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvZ21HbWxCWHVUNFhNYWR3RklNTV9SdTdBOHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUrlAwQA
bWnGMA0GCSqGSIb3DQEBCwUAA4IBAQBOaWIop3Sufi/4PXbzRjOlyBaBH/lZGu3b
sVYkE4T38GEHKtoXXW0Pp/SK33EZ5PMO0iG25LPkyT1Bi8YtOjoCMtugekpjepJS
Bx08mLFo7bkKDOVOvVoCkwdpAKH5TDZBGkrpB6PG/LSOsv5tpLee/jJa0s9BncNi
ORZ1hMuqN9A5ZRxd005GZM2w1Ubd37LcMN4BcD6RZykfmNgTHcxPiSEHgFwYl7vX
0HFnv3sDzFJgXuDbrR+igAbiAAvu4m4TNWBK0oBGXIn/ccKpypQdmM28F1LkNfqa
v6EnBPH7S48ynkSEE3+Uf0c2gIaHL4gG0JpxO9zNqay6fHfl/CF9
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:33 2025 by rpki-client