Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/gjV1b6nl-2sIdV0OViEWc13VOgw.roa
File: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (raw, json)
Hash identifier: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=
Subject key identifier: 82:35:75:6F:A9:E5:FB:6B:08:75:5D:0E:56:21:16:73:5D:D5:3A:0C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019426D9C701DF08D2ADB572195EDA687492
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/gjV1b6nl-2sIdV0OViEWc13VOgw.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51606
IP address blocks: 217.22.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c7:01:df:08:d2:ad:b5:72:19:5e:da:68:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8235756fa9e5fb6b08755d0e562116735dd53a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:16:0d:8f:7a:9f:41:73:a0:c8:6b:43:89:
c4:8b:f0:4a:f3:86:07:08:ea:19:16:95:f6:af:68:
86:9f:e0:17:0d:6a:1b:92:21:dd:6f:52:76:0e:73:
7b:7c:8b:6a:f2:ff:1b:0f:4a:b1:0a:d2:57:49:1d:
c4:e4:58:40:6c:7d:11:6c:b2:b6:bb:42:3e:15:4f:
39:e8:0e:47:cf:2e:0d:d6:e3:c8:52:97:53:c1:e4:
2b:67:8f:48:68:81:77:6e:6c:21:bc:d8:1f:14:d5:
cd:cf:e4:68:f5:77:73:af:cd:65:c9:ee:0b:cf:c3:
da:ae:4b:ee:65:cc:c8:d0:9e:7b:0e:26:e1:7c:fc:
88:05:a8:8c:d6:4d:a6:e0:0e:dc:e8:f0:2d:28:d7:
a3:e0:60:42:eb:94:07:c0:3c:78:e6:ea:63:ee:2d:
b3:2b:f4:e2:85:67:d7:ae:7b:00:d0:b9:fd:be:20:
a4:5e:6d:ca:13:d0:a2:49:36:24:22:78:c5:23:d3:
69:2b:64:88:66:9b:d3:29:6c:0a:49:13:07:f3:7b:
f2:32:46:58:6a:69:9c:3b:f0:c7:6e:c5:36:45:ec:
c5:dc:48:8a:61:1b:ca:91:db:41:a8:ca:6a:f9:4b:
15:0e:d4:c7:25:92:ea:fc:99:96:f2:72:9f:00:f9:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:75:6F:A9:E5:FB:6B:08:75:5D:0E:56:21:16:73:5D:D5:3A:0C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/gjV1b6nl-2sIdV0OViEWc13VOgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.116.0/23
Signature Algorithm: sha256WithRSAEncryption
81:78:14:4b:61:dc:c7:25:5a:ac:e4:04:75:6b:a0:6d:a9:48:
b1:27:04:25:c5:4a:30:c3:d4:b7:5a:5b:f5:01:2c:3d:11:14:
83:01:13:b0:9c:0b:3d:35:1a:27:26:96:0a:1b:82:50:39:b3:
dc:bd:bc:49:ac:69:dc:d4:de:4e:95:1a:e3:e2:c2:bf:53:06:
d3:57:d1:0a:43:95:19:8f:5d:6a:c8:43:cc:d8:dd:14:6d:ee:
4e:df:ef:70:57:ab:fb:90:28:ca:63:7e:74:dd:c4:ce:2f:7c:
66:75:8f:7b:99:58:c8:9b:b8:9f:e6:f3:5d:74:22:3b:50:f6:
8f:2a:a6:75:af:d2:fd:e7:3a:0f:93:3a:9d:1d:fe:4d:c8:9d:
56:45:a8:ff:f4:a2:d8:cd:12:5e:40:df:04:bc:76:4a:b6:6a:
7e:60:6f:93:68:a5:75:fa:f8:50:49:a9:9d:70:f9:ab:10:01:
2a:a3:96:f9:98:13:29:0e:13:2c:4c:88:6e:ab:91:3d:00:c0:
4c:6d:a4:1d:a2:55:54:5f:4d:eb:73:9f:ae:0c:50:05:5c:29:
cb:14:36:5e:9c:ea:90:be:3e:b1:60:86:80:60:74:fe:6b:ad:
60:54:3c:f2:89:73:e0:1a:2d:8f:34:03:a8:bb:be:00:db:19:
96:e6:cb:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2ccB3wjSrbVyGV7aaHSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjUwMTAyMTE0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjM1NzU2ZmE5ZTVmYjZiMDg3NTVkMGU1NjIxMTY3MzVkZDUzYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ0WDY96n0FzoMhrQ4nEi/BK84YH
COoZFpX2r2iGn+AXDWobkiHdb1J2DnN7fItq8v8bD0qxCtJXSR3E5FhAbH0RbLK2
u0I+FU856A5Hzy4N1uPIUpdTweQrZ49IaIF3bmwhvNgfFNXNz+Ro9Xdzr81lye4L
z8ParkvuZczI0J57DibhfPyIBaiM1k2m4A7c6PAtKNej4GBC65QHwDx45upj7i2z
K/TihWfXrnsA0Ln9viCkXm3KE9CiSTYkInjFI9NpK2SIZpvTKWwKSRMH83vyMkZY
ammcO/DHbsU2RezF3EiKYRvKkdtBqMpq+UsVDtTHJZLq/JmW8nKfAPnr+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFII1dW+p5ftrCHVdDlYhFnNd1ToMMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvZ2pWMWI2bmwtMnNJZFYwT1ZpRVdjMTNWT2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2RZ0MA0G
CSqGSIb3DQEBCwUAA4IBAQCBeBRLYdzHJVqs5AR1a6BtqUixJwQlxUoww9S3Wlv1
ASw9ERSDAROwnAs9NRonJpYKG4JQObPcvbxJrGnc1N5OlRrj4sK/UwbTV9EKQ5UZ
j11qyEPM2N0Ube5O3+9wV6v7kCjKY3503cTOL3xmdY97mVjIm7if5vNddCI7UPaP
KqZ1r9L95zoPkzqdHf5NyJ1WRaj/9KLYzRJeQN8EvHZKtmp+YG+TaKV1+vhQSamd
cPmrEAEqo5b5mBMpDhMsTIhuq5E9AMBMbaQdolVUX03rc5+uDFAFXCnLFDZenOqQ
vj6xYIaAYHT+a61gVDzyiXPgGi2PNAOou74A2xmW5suf
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:26:15 2025 by rpki-client