Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/GxR7z8RKcSPGLTL-vNXCK33Iesc.roa
File: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (raw, json)
Hash identifier: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=
Subject key identifier: 1B:14:7B:CF:C4:4A:71:23:C6:2D:32:FE:BC:D5:C2:2B:7D:C8:7A:C7
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 01941FFA379E5729EF9CCC09B6EBE22F1FF7
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/GxR7z8RKcSPGLTL-vNXCK33Iesc.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205192
IP address blocks: 185.226.160.0/24 maxlen: 24
185.226.161.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:9e:57:29:ef:9c:cc:09:b6:eb:e2:2f:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b147bcfc44a7123c62d32febcd5c22b7dc87ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:74:5b:75:d2:09:44:91:b1:7c:c7:07:9a:
aa:91:5c:ef:9e:ec:d6:03:1b:09:ca:f7:8d:92:f8:
ca:bb:09:35:1c:ee:15:1c:66:d3:ac:b3:71:0a:cd:
14:be:8a:b8:c5:7a:d2:6a:e2:c9:8b:c5:18:23:62:
ff:98:5a:9f:66:2f:b2:ab:df:34:66:31:cb:65:be:
ee:5e:34:d4:f9:b7:63:2e:a1:94:27:c2:03:74:07:
f8:62:37:10:33:74:92:f8:14:65:69:11:42:68:f8:
b3:84:b8:df:6f:84:e8:62:3f:9e:6e:83:e4:02:31:
02:12:3b:95:13:af:b8:db:86:15:ce:f1:bb:c5:0c:
19:45:a6:ce:ae:16:bb:a6:b9:f1:5e:1d:d1:95:c2:
50:53:38:16:fd:48:6e:5c:da:43:2c:e3:ee:e2:7a:
d7:09:bd:83:75:3f:42:db:af:66:92:88:39:56:00:
2b:9e:4c:b6:66:40:e0:40:24:70:6a:ff:db:df:b0:
9e:03:61:4a:57:66:d2:59:8f:2e:e2:98:eb:ac:86:
43:22:97:de:4a:7f:e8:fb:a4:dd:c2:c3:33:be:46:
bb:b4:8e:b2:26:a4:87:18:73:17:0c:63:4f:79:17:
28:20:22:15:3b:32:ac:3f:78:9c:99:50:31:8c:b8:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:7B:CF:C4:4A:71:23:C6:2D:32:FE:BC:D5:C2:2B:7D:C8:7A:C7
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/GxR7z8RKcSPGLTL-vNXCK33Iesc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:40:db:01:dd:99:a5:f0:2b:51:0b:a1:91:fa:d2:78:0e:ba:
f4:de:d9:db:f8:ef:1f:60:6b:64:3c:76:d0:05:80:5f:b5:cb:
1f:73:15:32:3a:a0:31:82:4a:3f:1e:6d:8d:b0:b3:aa:89:0f:
2f:0b:7d:07:6f:90:12:e9:e7:11:08:21:41:2c:2f:e1:14:ed:
aa:55:79:12:a2:5d:45:db:ae:2c:62:e7:06:63:3d:a5:5a:fe:
95:b0:1c:83:f8:61:39:20:57:9b:df:99:25:be:59:fe:3f:0d:
9f:4b:56:62:4b:9f:08:1d:53:04:a0:ec:21:f2:0f:03:5d:d1:
47:cd:7d:c2:d8:0f:dd:03:bb:35:a7:a9:28:d3:0b:1c:cf:e5:
4d:73:b2:d2:a3:b4:cc:25:6a:3a:eb:41:84:c8:ec:f1:0b:c8:
8c:fa:92:11:2f:87:de:37:95:c0:27:09:aa:2e:f3:ee:47:3d:
91:df:13:df:56:92:46:51:a1:db:2c:ef:c3:8b:38:f3:f1:f1:
7d:63:a0:7f:f0:74:2b:66:24:dd:b0:90:66:9e:41:5a:b9:34:
44:e2:7e:6f:87:1d:a0:27:b3:45:c1:42:be:bc:58:79:5a:7c:
32:d8:f3:f5:77:a3:70:53:37:c5:7d:fd:de:51:f1:3c:fa:e8:
b3:01:d6:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+jeeVynvnMwJtuviLx/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk
ZTdjNTEwHhcNMjUwMTAxMDM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjE0N2JjZmM0NGE3MTIzYzYyZDMyZmViY2Q1YzIyYjdkYzg3YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHR0W3XSCUSRsXzHB5qqkVzvnuzW
AxsJyveNkvjKuwk1HO4VHGbTrLNxCs0Uvoq4xXrSauLJi8UYI2L/mFqfZi+yq980
ZjHLZb7uXjTU+bdjLqGUJ8IDdAf4YjcQM3SS+BRlaRFCaPizhLjfb4ToYj+eboPk
AjECEjuVE6+424YVzvG7xQwZRabOrha7prnxXh3RlcJQUzgW/UhuXNpDLOPu4nrX
Cb2DdT9C269mkog5VgArnky2ZkDgQCRwav/b37CeA2FKV2bSWY8u4pjrrIZDIpfe
Sn/o+6TdwsMzvka7tI6yJqSHGHMXDGNPeRcoICIVOzKsP3icmVAxjLgclQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBsUe8/ESnEjxi0y/rzVwit9yHrHMB8GA1UdIwQY
MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt
NWU2MGY2ZGEyYjA5LzEvR3hSN3o4UktjU1BHTFRMLXZOWENLMzNJZXNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5
LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueKgMA0G
CSqGSIb3DQEBCwUAA4IBAQCMQNsB3Zml8CtRC6GR+tJ4Drr03tnb+O8fYGtkPHbQ
BYBftcsfcxUyOqAxgko/Hm2NsLOqiQ8vC30Hb5AS6ecRCCFBLC/hFO2qVXkSol1F
264sYucGYz2lWv6VsByD+GE5IFeb35klvln+Pw2fS1ZiS58IHVMEoOwh8g8DXdFH
zX3C2A/dA7s1p6ko0wscz+VNc7LSo7TMJWo660GEyOzxC8iM+pIRL4feN5XAJwmq
LvPuRz2R3xPfVpJGUaHbLO/Dizjz8fF9Y6B/8HQrZiTdsJBmnkFauTRE4n5vhx2g
J7NFwUK+vFh5Wnwy2PP1d6NwUzfFff3eUfE8+uizAdaL
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:54:07 2025 by rpki-client