Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/gjpjAVA2a-HyoJThFrYTk2A-C2I.roa
File: gjpjAVA2a-HyoJThFrYTk2A-C2I.roa (raw, json)
Hash identifier: lZn6ybmbqgIOsI+VZxBRomY13WVJGXAKMDWvRhdqaM8=
Subject key identifier: 82:3A:63:01:50:36:6B:E1:F2:A0:94:E1:16:B6:13:93:60:3E:0B:62
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0195385AB20EA61A09D386B6D8D78DA4DE9B
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/gjpjAVA2a-HyoJThFrYTk2A-C2I.roa
Signing time: Mon 24 Feb 2025 14:27:02 +0000
ROA not before: Mon 24 Feb 2025 14:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 128.65.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:5a:b2:0e:a6:1a:09:d3:86:b6:d8:d7:8d:a4:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Feb 24 14:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=823a630150366be1f2a094e116b61393603e0b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:fd:e4:5e:70:89:b3:5a:c7:6d:40:86:5e:
31:c6:d2:9d:1f:2c:19:86:41:12:68:44:9d:7e:59:
a8:69:4d:70:3c:68:1f:93:b6:d5:27:c3:fc:1d:dd:
68:33:f5:2b:f9:f5:81:dd:9f:d4:cb:65:71:ef:fd:
1e:1c:e0:c7:74:d4:c0:c7:aa:de:cd:d5:64:1e:be:
e9:28:07:a1:82:df:8f:17:8d:51:de:1d:ba:cb:b8:
37:03:ec:3a:e2:95:b9:cb:1a:52:75:02:46:81:d1:
86:6d:a6:6f:31:d0:f4:26:7c:36:b7:31:5f:74:96:
03:e6:c0:13:f4:03:a7:e6:66:fc:02:3f:db:ae:0f:
90:39:75:aa:00:16:35:ea:29:6d:95:4f:7d:55:b0:
f8:73:9b:57:38:97:3e:b1:ac:3d:16:aa:a5:c9:0f:
98:24:f0:96:7e:36:24:b7:bc:cb:4b:d7:29:fa:13:
99:52:ad:78:e1:4f:8c:32:14:10:51:f0:e3:6e:56:
b7:5e:31:f5:77:25:c9:36:42:1b:34:d7:87:7e:fb:
13:35:ce:d5:86:40:98:6a:71:ea:ad:6e:1b:71:ed:
91:37:fe:7a:dc:00:1c:84:a7:b6:83:a6:ee:34:0a:
b3:d8:1d:e7:97:15:06:96:78:5c:15:f4:4e:ca:f1:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:63:01:50:36:6B:E1:F2:A0:94:E1:16:B6:13:93:60:3E:0B:62
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/gjpjAVA2a-HyoJThFrYTk2A-C2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.168.0/22
Signature Algorithm: sha256WithRSAEncryption
26:4a:92:2f:a0:cd:b0:eb:40:7b:55:ae:76:35:91:5d:b7:6d:
5a:16:c3:41:eb:49:df:90:60:56:0f:0b:60:e3:87:88:7e:91:
92:c4:66:5e:c8:12:6e:c1:d9:d7:6d:61:ce:57:56:4e:bf:51:
df:79:8f:48:5b:e0:12:04:d8:bd:45:33:8f:6a:82:f7:d1:1f:
9b:09:5f:26:3a:8e:90:68:cd:41:71:c0:df:98:c4:78:ca:21:
e4:ee:c9:af:35:28:fd:bd:97:ad:d1:16:9c:c0:7b:df:79:a6:
5f:7d:96:22:c0:c6:3e:3c:1d:4f:e4:e5:e2:bf:f8:c1:6b:af:
69:8b:d9:22:1f:9c:c4:9f:d9:f4:07:a6:d8:13:84:02:99:1f:
0d:a6:e4:50:8d:b4:bc:21:66:23:be:33:ec:33:bd:0d:8a:ed:
b7:ff:ea:65:da:df:9a:ef:26:59:4a:c5:f7:c6:be:0d:74:6b:
e2:4c:36:47:53:51:27:ba:d5:d7:67:92:4c:ab:38:82:49:42:
42:f6:bd:4f:ca:d5:c4:cf:35:75:73:30:c6:8d:24:8c:b3:d6:
2d:87:77:83:f5:e2:13:cc:4a:f4:1a:eb:cd:2f:0a:29:b6:a3:
a6:41:c7:d5:dd:c6:db:54:ef:5c:ab:39:22:bf:d5:e1:37:fa:
f3:86:82:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU4WrIOphoJ04a22NeNpN6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjlmNTBjYTFjMzRhM2JlNjEwMDQ4ZDEzOGFmM2MwNzUz
YWY5MmIwHhcNMjUwMjI0MTQyNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjNhNjMwMTUwMzY2YmUxZjJhMDk0ZTExNmI2MTM5MzYwM2UwYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZD95F5wibNax21Ahl4xxtKdHywZ
hkESaESdflmoaU1wPGgfk7bVJ8P8Hd1oM/Ur+fWB3Z/Uy2Vx7/0eHODHdNTAx6re
zdVkHr7pKAehgt+PF41R3h26y7g3A+w64pW5yxpSdQJGgdGGbaZvMdD0Jnw2tzFf
dJYD5sAT9AOn5mb8Aj/brg+QOXWqABY16iltlU99VbD4c5tXOJc+saw9FqqlyQ+Y
JPCWfjYkt7zLS9cp+hOZUq144U+MMhQQUfDjbla3XjH1dyXJNkIbNNeHfvsTNc7V
hkCYanHqrW4bce2RN/563AAchKe2g6buNAqz2B3nlxUGlnhcFfROyvGuYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFII6YwFQNmvh8qCU4Ra2E5NgPgtiMB8GA1UdIwQY
MBaAFMX59Qyhw0o75hAEjROK88B1OvkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEt
OTBhZDBjYWRmZjc5LzEvZ2pwakFWQTJhLUh5b0pUaEZyWVRrMkEtQzJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEtOTBhZDBjYWRmZjc5
LzEveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgEGoMA0G
CSqGSIb3DQEBCwUAA4IBAQAmSpIvoM2w60B7Va52NZFdt21aFsNB60nfkGBWDwtg
44eIfpGSxGZeyBJuwdnXbWHOV1ZOv1HfeY9IW+ASBNi9RTOPaoL30R+bCV8mOo6Q
aM1BccDfmMR4yiHk7smvNSj9vZet0RacwHvfeaZffZYiwMY+PB1P5OXiv/jBa69p
i9kiH5zEn9n0B6bYE4QCmR8NpuRQjbS8IWYjvjPsM70Niu23/+pl2t+a7yZZSsX3
xr4NdGviTDZHU1EnutXXZ5JMqziCSUJC9r1PytXEzzV1czDGjSSMs9Yth3eD9eIT
zEr0GuvNLwoptqOmQcfV3cbbVO9cqzkiv9XhN/rzhoJw
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:35 2025 by rpki-client