Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/gvYmKgsxkju-CWf3LCef-n0CAdY.roa
File: gvYmKgsxkju-CWf3LCef-n0CAdY.roa (raw, json)
Hash identifier: uoZv7m3rOa849clj8/F7Vmp+yH3AzZEY6vhZ6pfSL0w=
Subject key identifier: 82:F6:26:2A:0B:31:92:3B:BE:09:67:F7:2C:27:9F:FA:7D:02:01:D6
Certificate issuer: /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial: 0185D343A96D6036F0F37B7FB1ADEA694BFD
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/gvYmKgsxkju-CWf3LCef-n0CAdY.roa
Signing time: Sat 21 Jan 2023 07:38:24 +0000
ROA not before: Sat 21 Jan 2023 07:38:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51420
IP address blocks: 109.164.64.0/19 maxlen: 24
109.164.97.0/24 maxlen: 24
109.164.96.0/24 maxlen: 24
109.164.96.0/23 maxlen: 23
2a03:3a06::/31 maxlen: 32
2a03:3a05::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:43:a9:6d:60:36:f0:f3:7b:7f:b1:ad:ea:69:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Validity
Not Before: Jan 21 07:38:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f6262a0b31923bbe0967f72c279ffa7d0201d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:04:80:bf:a8:4c:25:d8:89:3f:ad:e4:9d:
23:96:e1:79:76:4a:41:7e:ca:25:61:c3:77:be:eb:
ef:16:eb:c0:fc:34:bd:a8:29:b7:10:9a:6d:fa:cb:
52:e0:80:62:b7:bb:9c:68:8a:78:58:b4:11:47:7f:
d5:d5:25:27:ba:7b:87:cb:69:46:bb:6e:95:fb:50:
8a:56:4d:ef:ad:fb:37:b6:12:4d:7b:b7:ae:10:30:
65:c3:75:6c:23:69:02:b8:60:e5:95:3e:8b:7b:71:
45:0d:df:82:bd:f1:70:9f:7b:3a:95:36:ac:a9:45:
e2:b5:fa:9a:bd:39:f1:2d:e7:be:dd:de:d8:8f:7c:
f9:51:f8:ed:ec:c9:6a:3f:5c:b0:93:be:58:30:d4:
75:10:ac:e2:6c:77:f4:f9:08:ad:35:a5:00:af:cf:
d6:10:60:34:f8:7a:4b:03:63:d2:85:74:fb:57:82:
39:a7:0f:2a:cf:00:41:c7:52:e8:09:39:dd:9a:fb:
1d:b4:b4:4b:93:fc:fd:6e:ef:4e:a9:a4:1a:32:33:
c3:5c:64:fc:e5:55:16:9b:42:f2:49:0e:06:88:a8:
fa:f1:2d:14:e1:48:2c:ba:cc:c7:b7:55:f3:f2:ae:
5f:ee:77:b3:77:02:ef:3d:fe:b8:4f:88:c2:31:4e:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:26:2A:0B:31:92:3B:BE:09:67:F7:2C:27:9F:FA:7D:02:01:D6
X509v3 Authority Key Identifier:
keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/gvYmKgsxkju-CWf3LCef-n0CAdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.64.0-109.164.97.255
IPv6:
2a03:3a05::-2a03:3a07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:88:d8:d8:f3:83:a5:f4:40:7e:2d:fd:e0:31:eb:c6:e5:ee:
a0:7c:1e:83:55:f6:b3:e8:45:4e:28:3b:85:97:82:e6:98:8a:
9f:51:fc:d0:fc:80:1a:b7:90:24:52:3f:2b:2b:e9:c3:1f:47:
b4:ad:b7:4e:28:71:56:b3:30:6d:f8:25:35:a0:0a:6b:eb:9f:
03:df:6c:0c:71:be:fa:7d:a0:77:70:5b:53:97:d9:35:ba:b0:
91:b7:58:e4:61:b2:bd:3b:3f:bd:36:20:8a:fe:fc:8e:c9:55:
19:db:71:96:0a:03:d3:e3:6b:33:dc:5b:1a:9c:4a:fb:7a:bd:
9d:8f:bb:5b:b0:ba:2b:4b:64:5b:10:2c:d0:7e:2a:e4:d5:0e:
a1:b3:df:e0:38:85:25:86:bf:b4:b6:e3:03:8f:88:13:1a:91:
07:34:19:65:d4:c0:2f:1c:59:5d:4c:15:6a:93:bd:57:72:df:
fb:a3:16:f7:a2:07:b7:d3:73:a5:c7:bc:ba:e8:eb:38:8f:56:
e6:b2:cd:6c:34:cd:cc:c0:1f:b3:c6:44:8c:b1:8b:38:10:f3:
27:89:d2:21:f4:8a:1a:d2:5e:d4:c7:b2:ea:1a:c5:ac:66:7a:
1c:7d:5c:c4:7e:2c:61:56:fb:99:77:0d:91:8d:25:3a:77:ee:
42:5c:a0:db
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYXTQ6ltYDbw83t/sa3qaUv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYjljNjVkYzk1MDUzZTQzN2UzMmM5OWFjZjNiZGM1ZTk1
Y2IxZWUwHhcNMjMwMTIxMDczODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmY2MjYyYTBiMzE5MjNiYmUwOTY3ZjcyYzI3OWZmYTdkMDIwMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg8EgL+oTCXYiT+t5J0jluF5dkpB
fsolYcN3vuvvFuvA/DS9qCm3EJpt+stS4IBit7ucaIp4WLQRR3/V1SUnunuHy2lG
u26V+1CKVk3vrfs3thJNe7euEDBlw3VsI2kCuGDllT6Le3FFDd+CvfFwn3s6lTas
qUXitfqavTnxLee+3d7Yj3z5Ufjt7MlqP1ywk75YMNR1EKzibHf0+QitNaUAr8/W
EGA0+HpLA2PShXT7V4I5pw8qzwBBx1LoCTndmvsdtLRLk/z9bu9OqaQaMjPDXGT8
5VUWm0LySQ4GiKj68S0U4UgsuszHt1Xz8q5f7nezdwLvPf64T4jCMU5W1wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFIL2JioLMZI7vgln9ywnn/p9AgHWMB8GA1UdIwQY
MBaAFOC5xl3JUFPkN+MsmazzvcXpXLHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNExuR1hjbFFVLVEzNHl5WnJQTzl4ZWxjc2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9kMDE5YmItODc2OC00NDc4LWEzOWEt
Yjk0Zjc2NTRhOGM3LzEvZ3ZZbUtnc3hranUtQ1dmM0xDZWYtbjBDQWRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9kMDE5YmItODc2OC00NDc4LWEzOWEtYjk0Zjc2NTRhOGM3
LzEvNExuR1hjbFFVLVEzNHl5WnJQTzl4ZWxjc2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAUBAIAATAOMAwDBAZtpEAD
BAFtpGAwFgQCAAIwEDAOAwUAKgM6BQMFAyoDOgAwDQYJKoZIhvcNAQELBQADggEB
AACI2Njzg6X0QH4t/eAx68bl7qB8HoNV9rPoRU4oO4WXguaYip9R/ND8gBq3kCRS
Pysr6cMfR7Stt04ocVazMG34JTWgCmvrnwPfbAxxvvp9oHdwW1OX2TW6sJG3WORh
sr07P702IIr+/I7JVRnbcZYKA9PjazPcWxqcSvt6vZ2Pu1uwuitLZFsQLNB+KuTV
DqGz3+A4hSWGv7S24wOPiBMakQc0GWXUwC8cWV1MFWqTvVdy3/ujFveiB7fTc6XH
vLro6ziPVuayzWw0zczAH7PGRIyxizgQ8yeJ0iH0ihrSXtTHsuoaxaxmehx9XMR+
LGFW+5l3DZGNJTp37kJcoNs=
-----END CERTIFICATE-----
Generated at Thu Dec 28 15:40:17 2023 by rpki-client on console-ams.rpki-client.org