Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/G5qqYSuzHfCr0CVEhMKyermQdqM.roa
File: G5qqYSuzHfCr0CVEhMKyermQdqM.roa (raw, json)
Hash identifier: Rvdm6p4ylgJWHnb6OB1SROR2CorisS+3ucFMfFRZ8AY=
Subject key identifier: 1B:9A:AA:61:2B:B3:1D:F0:AB:D0:25:44:84:C2:B2:7A:B9:90:76:A3
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445312995AABC3CF504197174A85BD5
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/G5qqYSuzHfCr0CVEhMKyermQdqM.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 193.31.12.0/24 maxlen: 24
193.31.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:31:29:95:aa:bc:3c:f5:04:19:71:74:a8:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b9aaa612bb31df0abd0254484c2b27ab99076a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:13:90:5b:00:bb:31:44:7d:c2:eb:27:51:97:
e1:20:04:57:87:17:e9:aa:d8:7e:38:ca:6d:11:fe:
95:8a:3f:af:8c:bb:13:20:91:ea:65:71:29:64:72:
eb:d3:27:b3:7a:92:84:ad:a5:1f:ca:a9:7b:18:5c:
5b:a8:92:a1:04:ed:e9:d2:ed:49:66:e3:da:e2:f1:
ad:46:49:fa:95:ac:91:44:22:09:e5:f6:d4:7c:03:
f5:f2:fd:9f:3b:2e:d3:9e:8d:1b:1f:5b:a0:7d:e8:
ed:3e:a5:aa:15:dc:69:af:9b:9f:28:4a:06:50:12:
b7:95:2c:64:ec:34:b7:9f:1a:f4:20:89:50:cf:d2:
6e:fb:74:9f:10:e8:17:82:1f:ea:f4:99:fa:85:b8:
2a:e2:b3:b4:b7:d8:b1:fd:5c:e8:cb:22:d2:a8:ac:
77:08:c5:4c:27:f9:5d:69:e7:93:3a:0f:7f:cd:91:
4a:34:a0:55:f3:e6:d2:4e:c5:bc:24:d5:7f:bf:f1:
4f:3c:51:a1:3c:e5:eb:b8:7d:1a:c0:e4:8f:0b:7f:
bf:79:65:83:ae:79:f2:67:c0:85:e7:16:33:7f:74:
a2:2c:41:1b:ba:07:13:3e:4b:76:23:e6:2b:d4:4f:
fc:54:ea:83:4e:7a:4a:8d:7f:92:f5:6b:90:bb:d9:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:AA:61:2B:B3:1D:F0:AB:D0:25:44:84:C2:B2:7A:B9:90:76:A3
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/G5qqYSuzHfCr0CVEhMKyermQdqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:e4:73:c1:fe:8f:ef:8b:18:b6:80:05:69:07:5b:07:24:ac:
a2:18:70:a2:ac:d3:39:5b:fc:b3:2a:1c:b1:98:34:b8:77:26:
4f:45:04:3a:23:54:01:23:65:38:44:d0:44:24:e9:26:2c:8c:
3f:b5:af:e3:7b:c2:8b:bc:41:0f:3b:2b:7c:89:15:51:a3:d4:
06:a5:c8:37:ac:2e:32:17:21:cc:c3:8b:76:6b:43:b3:cc:67:
3d:1e:7f:38:f4:d5:04:0d:8e:3b:b1:83:72:b2:a0:d1:3c:10:
0c:9f:aa:8f:a0:6c:3f:80:a3:5d:2d:9f:13:12:ad:41:72:df:
15:39:de:8f:e7:16:c1:47:7c:d6:47:20:52:d3:d9:a7:00:74:
9e:ea:8a:dd:c6:23:fa:3f:ae:ee:38:d0:0e:16:15:b3:5d:bd:
e8:4b:bd:81:86:f0:57:19:04:23:ca:e4:99:84:31:23:e9:e8:
22:37:5b:25:a3:1c:5c:8d:d2:49:7e:af:c8:e3:57:66:78:25:
fb:27:01:67:1c:bc:93:3c:5d:b1:61:2a:4a:66:93:7a:3e:60:
49:73:71:79:1a:5d:6f:83:fb:b1:1e:2b:71:82:89:94:f8:11:
3d:00:c6:e9:3e:e1:95:9d:fd:e3:d8:c5:b0:90:b5:22:49:ab:
6a:ad:ee:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRTEplaq8PPUEGXF0qFvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjlhYWE2MTJiYjMxZGYwYWJkMDI1NDQ4NGMyYjI3YWI5OTA3NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xOQWwC7MUR9wusnUZfhIARXhxfp
qth+OMptEf6Vij+vjLsTIJHqZXEpZHLr0yezepKEraUfyql7GFxbqJKhBO3p0u1J
ZuPa4vGtRkn6layRRCIJ5fbUfAP18v2fOy7Tno0bH1ugfejtPqWqFdxpr5ufKEoG
UBK3lSxk7DS3nxr0IIlQz9Ju+3SfEOgXgh/q9Jn6hbgq4rO0t9ix/VzoyyLSqKx3
CMVMJ/ldaeeTOg9/zZFKNKBV8+bSTsW8JNV/v/FPPFGhPOXruH0awOSPC3+/eWWD
rnnyZ8CF5xYzf3SiLEEbugcTPkt2I+Yr1E/8VOqDTnpKjX+S9WuQu9ncFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuaqmErsx3wq9AlRITCsnq5kHajMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvRzVxcVlTdXpIZkNyMENWRWhNS3llcm1RZHFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR8MMA0G
CSqGSIb3DQEBCwUAA4IBAQCb5HPB/o/vixi2gAVpB1sHJKyiGHCirNM5W/yzKhyx
mDS4dyZPRQQ6I1QBI2U4RNBEJOkmLIw/ta/je8KLvEEPOyt8iRVRo9QGpcg3rC4y
FyHMw4t2a0OzzGc9Hn849NUEDY47sYNysqDRPBAMn6qPoGw/gKNdLZ8TEq1Bct8V
Od6P5xbBR3zWRyBS09mnAHSe6ordxiP6P67uONAOFhWzXb3oS72BhvBXGQQjyuSZ
hDEj6egiN1sloxxcjdJJfq/I41dmeCX7JwFnHLyTPF2xYSpKZpN6PmBJc3F5Gl1v
g/uxHitxgomU+BE9AMbpPuGVnf3j2MWwkLUiSatqre5P
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:47 2025 by rpki-client