Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gmpi4HutvH1aFeCavWDLtcJKvNY.roa
File: Gmpi4HutvH1aFeCavWDLtcJKvNY.roa (raw, json)
Hash identifier: oOPiru0dXSrixJNjNJl/rxn/SPzgPOhDBkz4f2JaqBY=
Subject key identifier: 1A:6A:62:E0:7B:AD:BC:7D:5A:15:E0:9A:BD:60:CB:B5:C2:4A:BC:D6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0190EA0860262683EE9533EA25D9120E8AE6
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gmpi4HutvH1aFeCavWDLtcJKvNY.roa
Signing time: Thu 25 Jul 2024 13:15:35 +0000
ROA not before: Thu 25 Jul 2024 13:15:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 89.46.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ea:08:60:26:26:83:ee:95:33:ea:25:d9:12:0e:8a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 25 13:15:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a6a62e07badbc7d5a15e09abd60cbb5c24abcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:91:01:bb:7f:aa:16:a2:bb:27:72:8e:a1:
ba:a1:ff:86:ae:65:e8:5a:24:ce:45:06:1f:ed:31:
06:8b:ad:24:c4:de:d8:af:95:67:5e:c0:d4:4a:fd:
77:e9:9e:be:5e:b3:f2:a7:49:d7:ae:3b:b3:3f:12:
72:20:c6:0f:71:61:5b:d5:d0:d1:cf:3f:ce:6e:6b:
b7:dc:6f:fd:cd:50:c6:47:cf:64:29:3c:ac:61:f3:
bf:78:f7:3a:21:21:a4:a4:c7:71:97:3f:dc:d0:d8:
96:5f:23:68:6f:47:11:5a:4a:21:70:f2:43:c2:8b:
1b:b2:c4:35:ac:ab:ee:2c:f8:4e:f5:1d:b9:8d:10:
13:53:62:5f:d2:b4:0a:99:28:85:dc:33:ad:31:8f:
f0:1e:95:30:d5:83:b1:bc:7c:11:02:17:3f:b8:32:
f7:20:d6:05:fc:25:a0:b4:28:f3:2d:a3:0f:c4:29:
d4:60:45:c4:76:6f:e8:6b:2a:54:60:54:79:17:5b:
5f:b7:8c:d2:bf:11:32:58:a4:d9:5b:5a:0e:83:1b:
68:20:4a:fa:c0:45:fc:a3:ff:bd:6f:f9:25:e0:d9:
b0:8a:15:6a:a2:f1:18:fe:b3:07:97:17:73:d7:72:
ed:d4:e1:d4:9e:3c:a5:ab:85:ba:d3:b6:fb:e5:da:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:62:E0:7B:AD:BC:7D:5A:15:E0:9A:BD:60:CB:B5:C2:4A:BC:D6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gmpi4HutvH1aFeCavWDLtcJKvNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.232.0/21
Signature Algorithm: sha256WithRSAEncryption
61:18:50:10:03:b0:56:28:20:53:65:5f:3a:5a:65:51:de:c1:
a4:0e:fd:4f:53:8b:31:66:38:65:06:ad:69:94:14:dd:c4:e2:
e5:65:11:e2:54:43:9f:53:12:6d:97:98:c1:a5:41:99:c0:71:
2a:81:51:91:bf:a9:c3:c6:b9:e3:62:22:55:df:11:1e:66:e2:
b3:be:d6:7f:96:1a:53:91:b8:61:b1:58:39:b6:7a:e4:a2:60:
42:d5:6a:9a:35:af:55:3f:93:64:bc:a2:d7:84:fa:d8:ff:7e:
d9:1f:88:bb:d2:ae:85:8c:c0:0f:6e:d4:2c:32:f1:1d:29:b0:
09:2b:b6:34:87:be:59:0f:0e:dc:d0:19:bd:6b:b6:b8:a2:56:
8b:78:f8:f4:55:5a:c6:35:33:5b:61:c0:fc:8b:71:30:28:b6:
40:84:ea:fc:65:c5:ec:0d:b0:3d:62:f9:33:59:e7:dd:57:23:
f6:58:27:02:d2:eb:f0:2b:c8:5a:b9:03:c6:28:8f:61:93:38:
9e:a9:5b:8b:47:0c:0e:e2:d9:83:df:65:b5:44:5a:eb:7d:13:
43:79:42:69:d4:16:4c:39:3f:4c:d3:9d:e4:88:a3:e9:0e:7b:
07:74:ae:e7:3d:77:a4:15:05:15:5f:8f:a4:12:2c:3e:20:4e:
e1:1f:d0:2e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZDqCGAmJoPulTPqJdkSDormMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwNzI1MTMxNTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTZhNjJlMDdiYWRiYzdkNWExNWUwOWFiZDYwY2JiNWMyNGFiY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1GRAbt/qhaiuydyjqG6of+GrmXo
WiTORQYf7TEGi60kxN7Yr5VnXsDUSv136Z6+XrPyp0nXrjuzPxJyIMYPcWFb1dDR
zz/Obmu33G/9zVDGR89kKTysYfO/ePc6ISGkpMdxlz/c0NiWXyNob0cRWkohcPJD
wosbssQ1rKvuLPhO9R25jRATU2Jf0rQKmSiF3DOtMY/wHpUw1YOxvHwRAhc/uDL3
INYF/CWgtCjzLaMPxCnUYEXEdm/oaypUYFR5F1tft4zSvxEyWKTZW1oOgxtoIEr6
wEX8o/+9b/kl4NmwihVqovEY/rMHlxdz13Lt1OHUnjylq4W607b75dr/CwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBpqYuB7rbx9WhXgmr1gy7XCSrzWMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0dtcGk0SHV0dkgxYUZlQ2F2V0RMdGNKS3ZOWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANZLugw
DQYJKoZIhvcNAQELBQADggEBAGEYUBADsFYoIFNlXzpaZVHewaQO/U9TizFmOGUG
rWmUFN3E4uVlEeJUQ59TEm2XmMGlQZnAcSqBUZG/qcPGueNiIlXfER5m4rO+1n+W
GlORuGGxWDm2euSiYELVapo1r1U/k2S8oteE+tj/ftkfiLvSroWMwA9u1Cwy8R0p
sAkrtjSHvlkPDtzQGb1rtriiVot4+PRVWsY1M1thwPyLcTAotkCE6vxlxewNsD1i
+TNZ591XI/ZYJwLS6/AryFq5A8Yoj2GTOJ6pW4tHDA7i2YPfZbVEWut9E0N5QmnU
Fkw5P0zTneSIo+kOewd0ruc9d6QVBRVfj6QSLD4gTuEf0C4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:20 2025 by rpki-client