Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa
File: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (raw, json)
Hash identifier: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=
Subject key identifier: 83:30:6A:16:A5:FE:18:E8:81:08:15:25:12:04:EC:12:71:EE:5E:F3
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 0194236A427EABFEA257F8E4B9765CE5CCF4
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203089
IP address blocks: 45.148.214.0/24 maxlen: 24
45.148.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:7e:ab:fe:a2:57:f8:e4:b9:76:5c:e5:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83306a16a5fe18e8810815251204ec1271ee5ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7b:f4:3d:5b:13:cd:08:a8:2c:34:13:a6:12:
22:f4:19:f2:65:6d:4f:71:c5:bd:47:04:44:ad:09:
22:75:cc:37:63:19:4a:78:9f:48:18:f1:22:f5:a0:
79:b5:17:32:c8:fb:97:69:e6:55:39:49:de:5e:22:
ff:9a:80:3a:4b:bd:88:a0:11:b9:0f:5f:f5:d2:ee:
df:ea:93:d5:79:19:12:bb:d8:18:95:fd:6e:16:ab:
09:9a:2b:00:ca:75:ea:12:f8:7d:44:79:ee:92:43:
75:63:0d:3c:3f:8d:9b:a8:e5:53:1f:b1:ce:78:2e:
a7:6b:44:8e:1b:b8:20:08:4b:0d:cd:78:b5:4c:0c:
26:31:41:a6:56:0e:54:56:37:9c:97:a8:91:ef:c3:
b3:59:81:31:13:95:82:87:1c:35:6f:e0:49:9e:b1:
8f:8a:1a:df:e5:15:1d:c2:a1:4d:e6:bf:69:98:05:
a3:4a:e3:29:b4:eb:4c:72:98:b3:6c:59:e4:ce:df:
be:78:25:1b:1e:67:60:cd:fc:79:ae:7a:a1:8a:63:
74:04:c9:51:d5:04:de:f9:1f:f2:43:ad:40:20:f8:
82:1a:8f:22:c4:0e:44:b0:9f:3d:09:67:f4:b7:18:
0e:1e:04:67:0b:fb:b2:80:9d:ed:f5:62:5c:25:02:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:6A:16:A5:FE:18:E8:81:08:15:25:12:04:EC:12:71:EE:5E:F3
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.214.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:25:6f:0d:81:1a:16:6c:2b:a8:ea:15:f7:da:99:42:fd:4f:
8c:96:35:31:d4:a4:bd:51:ed:51:b9:f8:f5:e8:f5:86:47:70:
d4:e6:ad:35:62:56:04:95:05:b0:4d:fe:9e:48:91:3a:9d:9b:
62:01:3b:c4:8f:d4:7e:e2:39:2f:92:c7:6b:2a:95:b5:4c:ed:
de:73:3b:84:18:6a:f8:6c:ea:0d:53:26:a0:64:79:5a:cd:73:
b5:16:cf:02:44:f0:4d:96:d6:8d:c7:b0:43:45:05:4d:45:9a:
bf:1e:2b:da:2b:81:76:dc:19:36:0f:ab:72:d1:9e:54:d3:63:
48:37:8e:2b:0a:dd:c6:6a:85:6b:4c:29:2c:a0:1e:bb:46:34:
96:f4:a0:fe:6d:33:e4:4d:56:5a:73:7f:05:b8:f9:55:53:f2:
84:1a:c1:46:1e:4c:7d:97:41:80:63:7a:34:8a:1f:6b:8e:ad:
4e:91:f3:2e:91:ce:14:1d:5f:00:84:ba:89:58:45:39:47:30:
9b:a3:7b:78:01:89:2b:a2:2f:22:bf:3e:36:1a:05:22:c7:3d:
5f:44:39:d2:b6:0f:0e:d5:9f:86:2f:ec:5d:5a:98:5a:53:98:
7e:a1:b7:db:b1:62:11:8f:55:a7:99:8d:1e:b9:ae:5b:1e:19:
45:5a:d0:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjakJ+q/6iV/jkuXZc5cz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx
OTUxYzIwHhcNMjUwMTAxMTk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzMwNmExNmE1ZmUxOGU4ODEwODE1MjUxMjA0ZWMxMjcxZWU1ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHv0PVsTzQioLDQTphIi9BnyZW1P
ccW9RwRErQkidcw3YxlKeJ9IGPEi9aB5tRcyyPuXaeZVOUneXiL/moA6S72IoBG5
D1/10u7f6pPVeRkSu9gYlf1uFqsJmisAynXqEvh9RHnukkN1Yw08P42bqOVTH7HO
eC6na0SOG7ggCEsNzXi1TAwmMUGmVg5UVjecl6iR78OzWYExE5WChxw1b+BJnrGP
ihrf5RUdwqFN5r9pmAWjSuMptOtMcpizbFnkzt++eCUbHmdgzfx5rnqhimN0BMlR
1QTe+R/yQ61AIPiCGo8ixA5EsJ89CWf0txgOHgRnC/uygJ3t9WJcJQJYjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMwahal/hjogQgVJRIE7BJx7l7zMB8GA1UdIwQY
MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct
YWQwMjdlOTVjNWM3LzEvZ3pCcUZxWC1HT2lCQ0JVbEVnVHNFbkh1WHZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3
LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZTWMA0G
CSqGSIb3DQEBCwUAA4IBAQDEJW8NgRoWbCuo6hX32plC/U+MljUx1KS9Ue1Rufj1
6PWGR3DU5q01YlYElQWwTf6eSJE6nZtiATvEj9R+4jkvksdrKpW1TO3eczuEGGr4
bOoNUyagZHlazXO1Fs8CRPBNltaNx7BDRQVNRZq/HivaK4F23Bk2D6ty0Z5U02NI
N44rCt3GaoVrTCksoB67RjSW9KD+bTPkTVZac38FuPlVU/KEGsFGHkx9l0GAY3o0
ih9rjq1OkfMukc4UHV8AhLqJWEU5RzCbo3t4AYkroi8ivz42GgUixz1fRDnStg8O
1Z+GL+xdWphaU5h+obfbsWIRj1WnmY0eua5bHhlFWtDC
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:23 2025 by rpki-client