Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Gliz-BNpscnFBdnwRtantXJuh_k.roa
File: Gliz-BNpscnFBdnwRtantXJuh_k.roa (raw, json)
Hash identifier: PEQIk9BaYI8Y2v7g7u4COPNMLwG1q8F6KZD9EUzARio=
Subject key identifier: 1A:58:B3:F8:13:69:B1:C9:C5:05:D9:F0:46:D6:A7:B5:72:6E:87:F9
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BDD34BFFEF28FEE45BC491E1026CA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Gliz-BNpscnFBdnwRtantXJuh_k.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56324
IP address blocks: 185.244.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dd:34:bf:fe:f2:8f:ee:45:bc:49:1e:10:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a58b3f81369b1c9c505d9f046d6a7b5726e87f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:97:47:35:2a:51:b4:61:9c:64:4d:f8:50:
d3:0e:16:c7:03:4e:78:d6:5e:50:cd:86:97:1a:bd:
1a:07:13:35:7d:37:d5:f5:86:b3:0d:31:95:aa:83:
fb:c1:04:c1:34:42:a7:0a:f7:92:aa:6a:79:b5:34:
98:ed:c5:80:1a:84:a7:b3:47:76:88:e0:d9:ed:f5:
73:11:75:e3:b7:ea:60:37:42:af:eb:5a:44:36:7a:
39:96:00:75:bf:df:ae:a1:8a:41:b6:32:92:21:5c:
3e:de:fc:80:b5:43:48:1c:5f:f9:58:70:87:e5:6d:
ab:c6:24:d1:33:dd:ba:25:65:dc:ec:5b:a7:55:73:
0b:0a:ef:61:d8:4d:59:63:5a:ce:e9:f7:7d:cb:65:
da:e2:07:4a:7a:70:da:ac:db:42:cd:14:c2:52:0f:
6b:10:0f:34:ac:dd:e9:e2:59:2a:e2:f3:6f:33:90:
41:8f:ac:b3:83:b3:b2:75:20:db:47:ba:fa:1e:fe:
10:7d:88:7e:d7:59:f4:ac:08:f7:f2:f9:ed:5c:f7:
82:4d:22:44:81:3b:da:c5:4f:36:c4:17:28:ae:d4:
bc:06:78:68:07:56:6d:d1:16:ef:fa:51:74:27:35:
2d:89:40:a1:ab:2f:8c:18:12:9a:d1:b7:60:24:32:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:58:B3:F8:13:69:B1:C9:C5:05:D9:F0:46:D6:A7:B5:72:6E:87:F9
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Gliz-BNpscnFBdnwRtantXJuh_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:c0:89:d9:02:b7:0d:1e:7a:87:89:98:6f:f7:d3:1e:11:10:
14:2f:f9:77:49:56:77:aa:c0:5d:6c:a1:91:75:a1:c7:1f:78:
02:a5:82:b3:0a:6c:2a:36:89:31:ef:ca:23:cd:5a:0b:a4:d4:
3c:7c:98:a5:cf:4f:e7:87:9f:01:22:98:84:08:3a:71:c4:61:
8e:5e:47:b4:8a:ac:25:7c:59:6b:56:34:df:06:7c:cd:73:a4:
64:2c:df:26:60:d7:63:1e:61:7a:aa:1f:0c:c5:1a:fe:d4:96:
05:20:6f:25:a9:5b:cc:5f:81:01:74:1a:46:e7:12:a5:0e:fc:
49:31:96:f1:f7:31:e8:57:82:bd:87:1f:8b:3a:1e:72:39:c5:
f8:9b:6c:d9:0c:40:c0:8e:e1:91:29:e3:9d:2f:39:fa:e6:91:
39:1c:63:36:0e:34:fc:e1:76:76:14:86:24:03:6c:b7:6b:69:
f9:eb:b2:7e:34:b8:a8:e4:f4:8e:cb:12:53:e6:b6:0e:a0:e6:
6a:04:e3:00:5b:fd:d7:6e:dd:6f:1c:f8:20:11:2c:f6:2d:b5:
0c:c8:e4:c7:7f:0e:59:c4:a0:6a:bd:3c:45:4b:06:a7:77:29:
5b:23:c5:df:24:7b:4d:98:b4:36:a3:4a:0d:b1:c6:97:a9:2d:
2e:1b:c8:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma900v/7yj+5FvEkeECbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTU4YjNmODEzNjliMWM5YzUwNWQ5ZjA0NmQ2YTdiNTcyNmU4N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof2XRzUqUbRhnGRN+FDTDhbHA054
1l5QzYaXGr0aBxM1fTfV9YazDTGVqoP7wQTBNEKnCveSqmp5tTSY7cWAGoSns0d2
iODZ7fVzEXXjt+pgN0Kv61pENno5lgB1v9+uoYpBtjKSIVw+3vyAtUNIHF/5WHCH
5W2rxiTRM926JWXc7FunVXMLCu9h2E1ZY1rO6fd9y2Xa4gdKenDarNtCzRTCUg9r
EA80rN3p4lkq4vNvM5BBj6yzg7OydSDbR7r6Hv4QfYh+11n0rAj38vntXPeCTSJE
gTvaxU82xBcortS8BnhoB1Zt0Rbv+lF0JzUtiUChqy+MGBKa0bdgJDICWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpYs/gTabHJxQXZ8EbWp7Vybof5MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvR2xpei1CTnBzY25GQmRud1J0YW50WEp1aF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufRgMA0G
CSqGSIb3DQEBCwUAA4IBAQA6wInZArcNHnqHiZhv99MeERAUL/l3SVZ3qsBdbKGR
daHHH3gCpYKzCmwqNokx78ojzVoLpNQ8fJilz0/nh58BIpiECDpxxGGOXke0iqwl
fFlrVjTfBnzNc6RkLN8mYNdjHmF6qh8MxRr+1JYFIG8lqVvMX4EBdBpG5xKlDvxJ
MZbx9zHoV4K9hx+LOh5yOcX4m2zZDEDAjuGRKeOdLzn65pE5HGM2DjT84XZ2FIYk
A2y3a2n567J+NLio5PSOyxJT5rYOoOZqBOMAW/3Xbt1vHPggESz2LbUMyOTHfw5Z
xKBqvTxFSwandylbI8XfJHtNmLQ2o0oNscaXqS0uG8ip
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:40 2025 by rpki-client