Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gOuJx3oVxeLBvCI9EqQ_82LFiQg.roa
File: gOuJx3oVxeLBvCI9EqQ_82LFiQg.roa (raw, json)
Hash identifier: goUd8H++G0dHp/Vkt8jHJ2soYiJlmbm1k97O+jTSbHU=
Subject key identifier: 80:EB:89:C7:7A:15:C5:E2:C1:BC:22:3D:12:A4:3F:F3:62:C5:89:08
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01856ED4CF2986092F2ED42CEBBCCECB98FB
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gOuJx3oVxeLBvCI9EqQ_82LFiQg.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201295
IP address blocks: 94.74.145.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cf:29:86:09:2f:2e:d4:2c:eb:bc:ce:cb:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80eb89c77a15c5e2c1bc223d12a43ff362c58908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9a:f5:6c:c9:54:da:0b:a4:7b:36:58:1b:51:
b2:22:95:d4:fd:c5:88:a7:02:bf:cc:54:8a:4d:24:
db:5f:e2:61:07:ee:dc:06:0d:0f:7a:92:0f:b9:84:
26:b6:bb:10:c4:e4:eb:b7:c7:58:67:66:6c:86:9a:
f3:cc:86:f5:fd:0f:1b:c2:f1:90:9d:83:6a:71:2c:
c9:94:ec:34:fd:d6:8d:94:73:49:f2:a3:20:21:50:
51:a4:4e:cb:65:5e:22:50:a1:50:18:df:11:c1:e9:
5b:dd:86:dc:ea:ae:97:66:13:0a:10:4a:73:ce:bd:
ad:8f:56:4c:97:19:a0:ac:7f:a1:e7:eb:e0:34:cb:
a8:22:1a:04:98:62:3d:84:3e:3e:3f:68:93:bc:01:
5c:86:bf:69:48:00:c8:8f:70:82:ae:df:6e:33:06:
ee:c1:a2:d4:d3:f0:54:92:71:68:c3:24:81:b4:d8:
f5:ea:48:e7:15:8c:25:0c:85:29:27:87:b6:29:58:
48:9e:fd:ad:7a:15:f4:cb:de:ff:b0:fd:5c:95:f4:
d0:28:ac:44:6c:e2:28:dd:ea:a8:a3:ac:6b:64:4e:
1b:1c:3e:84:3d:4c:56:8d:15:88:aa:78:cb:2c:01:
65:59:3f:66:51:3d:b6:e0:c4:a6:76:64:6e:67:a3:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:89:C7:7A:15:C5:E2:C1:BC:22:3D:12:A4:3F:F3:62:C5:89:08
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gOuJx3oVxeLBvCI9EqQ_82LFiQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.145.0/24
94.74.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:79:8d:6c:e0:44:61:f9:66:22:0b:b2:73:ca:2d:16:17:d5:
d5:0f:c7:52:26:19:d4:4f:cf:11:40:06:a3:25:b8:61:bf:fb:
e1:29:5f:07:86:f0:ae:73:d6:10:e8:48:4c:85:b2:1a:a4:2c:
ec:27:c3:b9:5c:9e:7b:5c:78:76:a5:f9:88:0e:bf:d4:b3:d6:
92:0e:57:ab:8c:f9:1f:bb:0b:76:ee:3e:19:ea:1f:db:d5:bd:
a3:74:87:95:99:00:c6:07:dc:ce:a2:23:5f:b0:70:9c:58:32:
f7:7a:d5:e7:8e:7a:29:54:7b:50:8d:37:ca:f6:42:96:50:94:
03:02:0f:65:fe:0e:58:5f:24:1b:8f:b6:a5:85:14:22:a9:1c:
ff:4a:b7:df:fc:b4:4c:a8:5a:35:3c:17:e7:8b:d8:4f:15:2b:
1a:40:a3:ac:14:0b:0a:d9:76:d4:3f:2f:bb:15:91:73:00:f3:
89:75:ce:e9:85:d3:1b:29:b5:8f:e7:55:c9:fe:ec:45:30:2a:
32:2d:7c:e4:e2:fc:e3:d4:c4:3a:c2:5b:6e:c2:a1:bf:b9:c8:
60:e6:50:4b:66:b0:f8:12:a0:8d:f2:52:35:87:33:37:3f:f5:
fb:41:0c:e4:d0:cd:fb:a3:a0:06:70:6f:83:44:01:c7:71:3e:
62:4d:41:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVu1M8phgkvLtQs67zOy5j7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwMTAxMTkzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGViODljNzdhMTVjNWUyYzFiYzIyM2QxMmE0M2ZmMzYyYzU4OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJr1bMlU2gukezZYG1GyIpXU/cWI
pwK/zFSKTSTbX+JhB+7cBg0PepIPuYQmtrsQxOTrt8dYZ2ZshprzzIb1/Q8bwvGQ
nYNqcSzJlOw0/daNlHNJ8qMgIVBRpE7LZV4iUKFQGN8Rwelb3Ybc6q6XZhMKEEpz
zr2tj1ZMlxmgrH+h5+vgNMuoIhoEmGI9hD4+P2iTvAFchr9pSADIj3CCrt9uMwbu
waLU0/BUknFowySBtNj16kjnFYwlDIUpJ4e2KVhInv2tehX0y97/sP1clfTQKKxE
bOIo3eqoo6xrZE4bHD6EPUxWjRWIqnjLLAFlWT9mUT224MSmdmRuZ6Pk1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIDricd6FcXiwbwiPRKkP/NixYkIMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvZ091Sngzb1Z4ZUxCdkNJOUVxUV84MkxGaVFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXkqRAwQA
Xkq2MA0GCSqGSIb3DQEBCwUAA4IBAQCNeY1s4ERh+WYiC7Jzyi0WF9XVD8dSJhnU
T88RQAajJbhhv/vhKV8HhvCuc9YQ6EhMhbIapCzsJ8O5XJ57XHh2pfmIDr/Us9aS
DlerjPkfuwt27j4Z6h/b1b2jdIeVmQDGB9zOoiNfsHCcWDL3etXnjnopVHtQjTfK
9kKWUJQDAg9l/g5YXyQbj7alhRQiqRz/Srff/LRMqFo1PBfni9hPFSsaQKOsFAsK
2XbUPy+7FZFzAPOJdc7phdMbKbWP51XJ/uxFMCoyLXzk4vzj1MQ6wltuwqG/uchg
5lBLZrD4EqCN8lI1hzM3P/X7QQzk0M37o6AGcG+DRAHHcT5iTUH7
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:24 2025 by rpki-client