Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/G0GNUJP7OR8YupD74ZDHt57bEcw.roa
File: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (raw, json)
Hash identifier: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=
Subject key identifier: 1B:41:8D:50:93:FB:39:1F:18:BA:90:FB:E1:90:C7:B7:9E:DB:11:CC
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 01942669E72B6A68CBEA6ED28322E61D16F6
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/G0GNUJP7OR8YupD74ZDHt57bEcw.roa
Signing time: Thu 02 Jan 2025 09:47:42 +0000
ROA not before: Thu 02 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211499
IP address blocks: 193.16.98.0/24 maxlen: 24
2001:678:f2c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:e7:2b:6a:68:cb:ea:6e:d2:83:22:e6:1d:16:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jan 2 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b418d5093fb391f18ba90fbe190c7b79edb11cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:f6:6b:e7:da:4c:1e:73:cc:ae:29:c3:c1:
8d:c1:57:ba:b0:48:6a:84:6e:5d:d0:c3:4f:67:47:
f2:47:96:b2:e5:74:e5:09:f0:8b:55:27:0e:07:fa:
c2:d3:1a:e3:7a:a3:a2:69:a4:51:52:63:51:9e:da:
3e:ab:f8:71:92:e1:4a:02:11:6a:46:c2:de:00:74:
df:24:da:cc:1a:76:fe:63:03:d8:0e:72:6c:1d:10:
74:7a:b2:7e:1e:5d:1e:5d:e0:58:b7:15:69:3f:8b:
fa:20:dd:b9:f4:5f:29:18:27:36:23:41:60:86:65:
d5:41:b4:f2:4e:cc:11:99:58:04:f3:f4:a1:2b:fb:
d9:df:c9:d4:5a:1b:1d:81:c9:cd:68:c4:96:66:61:
81:06:8c:cc:37:b3:6a:ab:87:5c:3f:e1:c0:5b:1b:
66:12:30:e5:4c:ed:57:b9:40:23:0f:ae:f0:de:c8:
69:b8:34:55:3d:9c:84:d5:c8:e3:d5:83:89:97:a6:
e7:50:50:01:72:b6:f3:e1:4c:fd:ee:74:c7:20:2a:
bd:4c:c6:ee:97:97:ab:fc:91:d6:c5:e7:cb:ee:32:
27:7d:17:a1:77:40:10:dd:80:89:7f:00:b5:ad:b6:
18:b8:cc:f9:01:34:a3:6c:a6:6c:25:0a:2e:fc:51:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:8D:50:93:FB:39:1F:18:BA:90:FB:E1:90:C7:B7:9E:DB:11:CC
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/G0GNUJP7OR8YupD74ZDHt57bEcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.98.0/24
IPv6:
2001:678:f2c::/48
Signature Algorithm: sha256WithRSAEncryption
5f:14:fa:c3:0b:95:c3:84:3a:e8:bd:49:7c:0f:36:c9:c7:15:
86:96:6f:61:a8:c6:48:e2:0a:84:f3:30:9a:fb:2e:bc:0d:19:
37:af:fd:ac:53:ef:21:c5:9b:46:14:19:ad:83:78:c7:04:0c:
76:34:a6:1b:8e:69:cc:cc:2e:fa:90:44:7c:45:df:97:e3:b3:
0d:f4:97:a5:5b:74:2c:af:76:a5:36:3e:1d:2c:94:ca:40:25:
7a:58:30:e6:3f:ff:20:fb:1e:99:27:49:9f:24:54:86:3f:0a:
5d:58:30:ea:96:ca:19:98:da:fd:fd:82:84:b9:87:cc:a0:13:
87:49:76:b3:3e:63:9f:2d:4e:68:5b:9a:71:0c:53:bf:43:d9:
e0:0a:96:9d:f2:fe:ea:f3:09:df:56:d2:17:47:2d:ad:0a:d1:
9f:9a:7c:93:20:a7:66:2e:6a:8b:da:a9:82:80:be:c1:f5:1b:
13:3d:64:8d:6e:96:0d:51:d8:4b:b5:1b:83:ab:90:2f:f1:08:
70:21:29:4b:be:01:0e:18:23:45:fe:f0:b8:a0:42:4f:3d:fb:
1e:39:29:32:40:60:25:ca:bd:32:f8:ba:b3:d9:89:3a:2c:24:
de:3b:7d:72:30:8a:84:f8:10:cb:a0:87:6d:30:41:8f:b0:cc:
5f:94:7f:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQmaecramjL6m7SgyLmHRb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4
ZDI1YTUwHhcNMjUwMTAyMDk0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjQxOGQ1MDkzZmIzOTFmMThiYTkwZmJlMTkwYzdiNzllZGIxMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmX2a+faTB5zzK4pw8GNwVe6sEhq
hG5d0MNPZ0fyR5ay5XTlCfCLVScOB/rC0xrjeqOiaaRRUmNRnto+q/hxkuFKAhFq
RsLeAHTfJNrMGnb+YwPYDnJsHRB0erJ+Hl0eXeBYtxVpP4v6IN259F8pGCc2I0Fg
hmXVQbTyTswRmVgE8/ShK/vZ38nUWhsdgcnNaMSWZmGBBozMN7Nqq4dcP+HAWxtm
EjDlTO1XuUAjD67w3shpuDRVPZyE1cjj1YOJl6bnUFABcrbz4Uz97nTHICq9TMbu
l5er/JHWxefL7jInfRehd0AQ3YCJfwC1rbYYuMz5ATSjbKZsJQou/FG7xwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBtBjVCT+zkfGLqQ++GQx7ee2xHMMB8GA1UdIwQY
MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt
MmFmNDc5MWQ5NmViLzEvRzBHTlVKUDdPUjhZdXBENzRaREh0NTdiRWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi
LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRBiMA8E
AgACMAkDBwAgAQZ4DywwDQYJKoZIhvcNAQELBQADggEBAF8U+sMLlcOEOui9SXwP
NsnHFYaWb2GoxkjiCoTzMJr7LrwNGTev/axT7yHFm0YUGa2DeMcEDHY0phuOaczM
LvqQRHxF35fjsw30l6VbdCyvdqU2Ph0slMpAJXpYMOY//yD7HpknSZ8kVIY/Cl1Y
MOqWyhmY2v39goS5h8ygE4dJdrM+Y58tTmhbmnEMU79D2eAKlp3y/urzCd9W0hdH
La0K0Z+afJMgp2YuaovaqYKAvsH1GxM9ZI1ulg1R2Eu1G4OrkC/xCHAhKUu+AQ4Y
I0X+8LigQk89+x45KTJAYCXKvTL4urPZiTosJN47fXIwioT4EMugh20wQY+wzF+U
fxU=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:48:09 2025 by rpki-client