Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/GzFkstv5wkhfRB-938uIDYh-Wxo.roa
File: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (raw, json)
Hash identifier: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=
Subject key identifier: 1B:31:64:B2:DB:F9:C2:48:5F:44:1F:BD:DF:CB:88:0D:88:7E:5B:1A
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 019421B22957621B143BD31986BEBDE9C024
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/GzFkstv5wkhfRB-938uIDYh-Wxo.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39635
IP address blocks: 195.246.240.0/23 maxlen: 23
195.246.240.0/24 maxlen: 24
195.246.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:29:57:62:1b:14:3b:d3:19:86:be:bd:e9:c0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b3164b2dbf9c2485f441fbddfcb880d887e5b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:bf:d2:6d:53:dd:6b:43:a3:eb:fc:04:28:
e3:ab:f9:38:b4:fa:0f:20:6c:8e:c7:93:d0:cd:54:
83:0c:cc:34:ec:1d:6d:7f:9a:f7:c5:e9:5e:d6:b8:
2d:99:ca:f1:a1:6d:30:08:f5:7c:ec:86:de:2e:35:
3f:cf:0a:8c:68:ed:be:69:02:b7:56:d1:c9:a7:a0:
fe:e7:5e:e6:64:84:74:c9:7c:c6:07:8a:7b:07:82:
9c:9c:90:6a:c6:e2:98:f6:05:b7:97:c4:a7:0e:27:
3a:4f:54:bc:95:05:7a:c2:80:a5:f2:fd:06:87:47:
6f:61:51:16:9b:d3:79:40:3b:e8:ab:be:6c:41:66:
15:59:0a:69:62:26:15:29:3d:a0:b8:51:ba:05:39:
18:91:5d:b5:dd:fd:13:ce:c2:eb:84:2e:89:aa:1d:
77:b4:7c:8f:59:49:83:5e:b0:d6:bf:4f:75:7d:e7:
e2:3d:73:7b:29:3a:42:ff:e9:5e:11:0d:f5:6d:f5:
d4:52:db:5d:7b:5f:16:38:7b:8e:26:46:55:f1:05:
6f:7b:15:0d:d2:ed:a6:78:00:d8:24:9c:9a:e0:ec:
f0:3c:ec:86:a9:20:30:c7:a8:ab:2c:dd:8e:c3:b9:
a0:a0:09:f8:59:e2:4c:b0:82:f1:c7:99:a3:87:e7:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:64:B2:DB:F9:C2:48:5F:44:1F:BD:DF:CB:88:0D:88:7E:5B:1A
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/GzFkstv5wkhfRB-938uIDYh-Wxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.240.0/23
Signature Algorithm: sha256WithRSAEncryption
80:e0:19:a2:de:89:3d:d5:95:59:af:24:3f:c2:6b:1a:5f:26:
de:f2:76:93:c6:3e:e0:50:1b:76:e5:41:29:78:5a:49:9d:a1:
f1:da:4c:d9:62:2b:57:4b:f4:6a:6d:9f:a1:3a:ac:9f:16:78:
53:0c:9b:73:ab:76:6d:0f:5a:fe:9f:60:dd:6b:6c:28:a0:d2:
7c:b9:a7:60:3b:b3:a3:42:d6:e4:d4:07:fe:f3:f9:a7:9f:34:
2a:a9:ce:8a:5c:ca:7f:60:33:66:d4:d5:2e:e8:ff:bf:bd:ad:
c5:52:3b:77:0d:25:32:df:3f:5d:ee:53:b7:20:52:be:2f:1e:
15:6a:2e:2b:c2:f3:75:7e:c5:d9:7d:cc:1a:9b:2e:1b:7b:6e:
e8:57:15:66:c7:98:d6:9f:65:f3:dc:5b:f6:66:d0:b0:c8:b0:
0d:c8:14:f4:27:55:87:b9:8e:c4:6a:a4:fe:0a:49:a5:61:e5:
89:76:1f:cb:19:3c:a6:e3:4c:51:a2:e0:5b:25:cb:05:24:b7:
1a:31:0d:d0:f7:65:19:fc:74:47:48:74:81:a2:0a:1d:69:02:
e6:a3:48:79:a7:8d:88:6a:a4:77:bf:88:c4:05:4d:10:d2:55:
cc:8d:a2:53:05:73:4e:b6:46:05:2a:a1:f1:29:21:33:6c:31:
e1:aa:7c:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsilXYhsUO9MZhr696cAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMWJiNDRlZGUyYWZlMGJmYTlkNzhiYTI5MzI0OTU1Zjdm
YzYwOTEwHhcNMjUwMTAxMTE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjMxNjRiMmRiZjljMjQ4NWY0NDFmYmRkZmNiODgwZDg4N2U1YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEm/0m1T3WtDo+v8BCjjq/k4tPoP
IGyOx5PQzVSDDMw07B1tf5r3xele1rgtmcrxoW0wCPV87IbeLjU/zwqMaO2+aQK3
VtHJp6D+517mZIR0yXzGB4p7B4KcnJBqxuKY9gW3l8SnDic6T1S8lQV6woCl8v0G
h0dvYVEWm9N5QDvoq75sQWYVWQppYiYVKT2guFG6BTkYkV213f0TzsLrhC6Jqh13
tHyPWUmDXrDWv091fefiPXN7KTpC/+leEQ31bfXUUttde18WOHuOJkZV8QVvexUN
0u2meADYJJya4OzwPOyGqSAwx6irLN2Ow7mgoAn4WeJMsILxx5mjh+fauQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBsxZLLb+cJIX0Qfvd/LiA2IflsaMB8GA1UdIwQY
MBaAFMMbtE7eKv4L+p14uikySVX3/GCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgt
NGJiYjgzOGEyNzc5LzEvR3pGa3N0djV3a2hmUkItOTM4dUlEWWgtV3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgtNGJiYjgzOGEyNzc5
LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/bwMA0G
CSqGSIb3DQEBCwUAA4IBAQCA4Bmi3ok91ZVZryQ/wmsaXybe8naTxj7gUBt25UEp
eFpJnaHx2kzZYitXS/RqbZ+hOqyfFnhTDJtzq3ZtD1r+n2Dda2wooNJ8uadgO7Oj
Qtbk1Af+8/mnnzQqqc6KXMp/YDNm1NUu6P+/va3FUjt3DSUy3z9d7lO3IFK+Lx4V
ai4rwvN1fsXZfcwamy4be27oVxVmx5jWn2Xz3Fv2ZtCwyLANyBT0J1WHuY7EaqT+
CkmlYeWJdh/LGTym40xRouBbJcsFJLcaMQ3Q92UZ/HRHSHSBogodaQLmo0h5p42I
aqR3v4jEBU0Q0lXMjaJTBXNOtkYFKqHxKSEzbDHhqnzd
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:23 2025 by rpki-client