Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/Gg-6i49nKWrXVm0exSrLUfySN0A.roa
File: Gg-6i49nKWrXVm0exSrLUfySN0A.roa (raw, json)
Hash identifier: M9zsVWr189y0jPD/c9OzYfEqJ2TjJukOsOHg1GdGskc=
Subject key identifier: 1A:0F:BA:8B:8F:67:29:6A:D7:56:6D:1E:C5:2A:CB:51:FC:92:37:40
Certificate issuer: /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial: 018B46E618FD878F0AE4F6A603730ED0E60A
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/Gg-6i49nKWrXVm0exSrLUfySN0A.roa
Signing time: Thu 19 Oct 2023 07:46:06 +0000
ROA not before: Thu 19 Oct 2023 07:46:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 194.11.212.0/24 maxlen: 24
194.11.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:e6:18:fd:87:8f:0a:e4:f6:a6:03:73:0e:d0:e6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Validity
Not Before: Oct 19 07:46:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a0fba8b8f67296ad7566d1ec52acb51fc923740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:67:36:ff:af:99:e2:0b:86:7d:e2:ad:56:
7b:51:da:50:e4:bb:ba:39:9f:1c:a2:e3:db:b9:fa:
09:b4:4f:82:ca:b7:0b:66:ee:7d:97:72:7d:ed:f6:
84:3c:0a:94:99:48:1a:43:37:2c:b7:f3:32:ab:4a:
44:e8:56:24:2b:98:bf:ca:ea:5d:fc:e5:3e:7d:e6:
91:17:71:0e:ac:a3:ae:4c:3d:0e:1a:c6:3e:02:f9:
8d:93:32:14:5f:a1:0a:ea:4e:4f:3d:df:b3:8a:99:
c2:71:3f:09:88:96:13:d8:ce:19:5d:68:c7:50:ab:
1a:24:4b:e3:c7:13:f6:8c:9f:65:eb:e0:17:df:e1:
92:2f:b9:04:6a:a2:5b:c8:cb:96:d8:f0:e2:04:5b:
1b:d8:71:f0:de:8b:cd:52:22:db:d7:0c:dc:ac:73:
a9:da:87:03:e7:58:bc:f3:6e:6f:1b:ec:ee:6b:fc:
78:f1:fc:dd:06:fd:c3:d8:ac:ea:2a:e5:32:5c:8c:
30:80:1f:83:2e:35:e9:7d:fd:08:af:23:ba:b9:1e:
03:d3:05:eb:3c:7a:2a:81:41:9e:69:46:a8:35:50:
99:4c:fc:2f:8a:c1:3a:80:f4:54:fa:45:11:dd:5c:
b4:a6:65:cc:3e:8e:a9:a3:d0:7c:f7:87:a0:b5:7e:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:BA:8B:8F:67:29:6A:D7:56:6D:1E:C5:2A:CB:51:FC:92:37:40
X509v3 Authority Key Identifier:
keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/Gg-6i49nKWrXVm0exSrLUfySN0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.207.0/24
194.11.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b6:14:21:24:62:1a:3e:77:7e:97:e8:52:3e:8b:25:17:9a:
e7:65:23:74:45:6c:c7:af:51:7a:bf:7a:72:f4:75:2d:96:b4:
b3:fc:4f:dc:a7:e6:41:47:87:96:a0:a6:6f:db:9e:f7:7f:c2:
0b:9d:f1:37:66:bf:fe:a6:bd:1a:17:ce:eb:0b:f8:4d:b4:a6:
84:7d:bf:d8:62:4a:d9:08:fe:52:17:69:ba:d7:63:a8:8a:30:
59:55:d1:c9:e7:27:44:6f:da:f5:e2:fe:d7:48:47:73:ea:6d:
ae:58:ed:4e:6d:6e:ad:d6:f1:95:1f:9c:67:33:e1:6a:82:c9:
87:63:5e:43:06:60:90:a8:32:6d:dd:53:1d:c2:d8:ad:59:63:
c4:5c:11:d5:0d:0c:dd:85:f8:99:c8:70:fa:4a:66:88:1e:02:
6c:1c:34:ce:09:00:f9:0a:6b:d8:cf:18:f4:38:06:93:06:8a:
e1:df:3a:54:ec:4a:88:8a:a5:ba:cb:d6:19:4a:2d:bb:9d:82:
4c:d6:4f:e0:85:99:96:07:15:c9:0b:d3:b7:82:2d:ea:9f:51:
c9:b5:f4:c7:d5:68:fa:e4:12:d3:23:ae:f1:6e:40:05:24:5a:
c0:18:b4:b3:55:c0:79:7f:6c:65:b5:6c:17:68:7c:4e:e0:dc:
f3:5e:e4:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtG5hj9h48K5PamA3MO0OYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzQ5ODMzZjQzOWI5ZTA2NzdkOGQzYmYxZjUyZGZiZmIy
YzYyNGYwHhcNMjMxMDE5MDc0NjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTBmYmE4YjhmNjcyOTZhZDc1NjZkMWVjNTJhY2I1MWZjOTIzNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomNnNv+vmeILhn3irVZ7UdpQ5Lu6
OZ8couPbufoJtE+CyrcLZu59l3J97faEPAqUmUgaQzcst/Myq0pE6FYkK5i/yupd
/OU+feaRF3EOrKOuTD0OGsY+AvmNkzIUX6EK6k5PPd+zipnCcT8JiJYT2M4ZXWjH
UKsaJEvjxxP2jJ9l6+AX3+GSL7kEaqJbyMuW2PDiBFsb2HHw3ovNUiLb1wzcrHOp
2ocD51i8825vG+zua/x48fzdBv3D2KzqKuUyXIwwgB+DLjXpff0IryO6uR4D0wXr
PHoqgUGeaUaoNVCZTPwvisE6gPRU+kUR3Vy0pmXMPo6po9B894egtX6ohwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBoPuouPZylq11ZtHsUqy1H8kjdAMB8GA1UdIwQY
MBaAFPHEmDP0ObngZ32NO/H1Lfv7LGJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQt
MGYwZmE2YjZlNGJkLzEvR2ctNmk0OW5LV3JYVm0wZXhTckxVZnlTTjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQtMGYwZmE2YjZlNGJk
LzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgvPAwQA
wgvUMA0GCSqGSIb3DQEBCwUAA4IBAQCzthQhJGIaPnd+l+hSPoslF5rnZSN0RWzH
r1F6v3py9HUtlrSz/E/cp+ZBR4eWoKZv2573f8ILnfE3Zr/+pr0aF87rC/hNtKaE
fb/YYkrZCP5SF2m612OoijBZVdHJ5ydEb9r14v7XSEdz6m2uWO1ObW6t1vGVH5xn
M+FqgsmHY15DBmCQqDJt3VMdwtitWWPEXBHVDQzdhfiZyHD6SmaIHgJsHDTOCQD5
CmvYzxj0OAaTBorh3zpU7EqIiqW6y9YZSi27nYJM1k/ghZmWBxXJC9O3gi3qn1HJ
tfTH1Wj65BLTI67xbkAFJFrAGLSzVcB5f2xltWwXaHxO4NzzXuTT
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:52:19 2025 by rpki-client