Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/gA2VeOc__NflxeLdsWWIIUZ9Deg.roa
File: gA2VeOc__NflxeLdsWWIIUZ9Deg.roa (raw, json)
Hash identifier: ipk5YS27VQlaPqS1epEEueLOZHeXvism8b/2q3vbuaY=
Subject key identifier: 80:0D:95:78:E7:3F:FC:D7:E5:C5:E2:DD:B1:65:88:21:46:7D:0D:E8
Certificate issuer: /CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Certificate serial: 019422FBF31ECA816087904B35DB84041F22
Authority key identifier: E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/gA2VeOc__NflxeLdsWWIIUZ9Deg.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 193.84.112.0/24 maxlen: 24
195.248.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f3:1e:ca:81:60:87:90:4b:35:db:84:04:1f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800d9578e73ffcd7e5c5e2ddb1658821467d0de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:d3:c8:bf:75:e7:2e:ff:6a:ef:7d:8b:72:
19:16:0b:be:37:7a:13:65:fb:88:2f:63:0a:56:b9:
33:74:d2:0b:70:86:3d:e6:67:eb:61:fa:4f:46:63:
aa:56:04:b3:d9:9c:b8:6a:01:c1:88:0f:30:f6:e0:
fb:9f:73:cb:4b:30:7a:df:4f:c9:63:4a:47:e6:df:
e8:c2:7f:a7:65:1e:53:c5:11:59:6a:57:84:58:02:
84:ad:29:e6:e1:56:a7:ae:1f:47:78:25:96:c8:17:
dc:59:2e:b9:20:a0:52:c3:32:6e:04:dd:f9:39:87:
9b:bf:95:a8:e7:f5:0a:a7:b8:b3:ba:43:64:0f:a5:
3d:7f:f8:48:03:3f:9d:5f:77:2f:bb:cd:91:b5:ae:
8a:e4:20:c2:15:2e:7b:c7:02:e7:cb:e5:b0:ce:ac:
6e:a1:ed:cd:fc:6e:22:87:fe:53:0c:21:9e:ed:61:
e7:1e:9a:de:b3:54:f9:b8:b0:67:37:4b:fb:b5:1d:
7e:cc:5d:b3:78:92:d8:25:2a:06:01:51:92:ca:8e:
f0:1c:27:cf:e3:e7:53:7b:e9:e1:fc:0c:e0:84:77:
7b:a6:f1:98:48:d0:bd:5f:1d:84:a1:7f:fe:81:ad:
72:af:df:3a:44:7e:0f:d9:e7:09:71:29:1c:cb:37:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:95:78:E7:3F:FC:D7:E5:C5:E2:DD:B1:65:88:21:46:7D:0D:E8
X509v3 Authority Key Identifier:
keyid:E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/gA2VeOc__NflxeLdsWWIIUZ9Deg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.112.0/24
195.248.73.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5c:25:ea:c1:f6:4b:06:ea:bd:2e:43:4f:37:bb:b1:c8:60:
58:dc:64:18:6f:e3:9f:31:f1:70:4b:27:bb:81:fd:87:3c:f0:
27:8e:5d:6e:89:ff:57:74:20:49:20:6b:01:9a:44:56:d3:95:
3a:19:ae:6a:51:23:bd:f3:72:4d:57:34:21:51:ce:0e:f0:1e:
97:16:c4:fe:c5:6d:e4:ab:66:b2:29:4d:01:f0:8d:59:fb:f0:
53:da:6d:3b:93:73:3e:88:77:a2:b0:90:1a:45:a8:e4:77:bf:
ca:c3:cd:58:84:73:d1:60:09:bf:f2:09:c8:63:16:56:e0:33:
36:76:52:e1:f9:eb:0a:a2:69:10:5f:b5:0f:56:f0:c7:f0:38:
f5:a6:89:a7:36:df:3f:54:f2:1e:2b:f2:16:d0:4a:d5:f5:73:
ef:d6:d1:b8:64:05:d3:93:e7:a2:8f:04:fc:d7:cb:16:b4:08:
57:20:01:41:29:50:5d:2d:93:32:fc:49:7b:de:cf:ad:cc:35:
70:c6:33:d7:28:de:73:f6:62:f8:4a:80:45:ca:ce:71:56:db:
2a:f5:22:0e:db:d0:dc:ab:c8:3a:c9:20:cd:c7:cf:69:f7:d9:
0b:c7:3c:cf:24:3f:8f:40:bd:87:64:43:45:9f:8b:85:3e:e2:
01:f3:ae:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQi+/MeyoFgh5BLNduEBB8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDRhMWMyY2E0YTRkYjAzMzM3NWUzNjBkZTMyMzc5MGJh
NmE1YjkwHhcNMjUwMTAxMTc0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDBkOTU3OGU3M2ZmY2Q3ZTVjNWUyZGRiMTY1ODgyMTQ2N2QwZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmfTyL915y7/au99i3IZFgu+N3oT
ZfuIL2MKVrkzdNILcIY95mfrYfpPRmOqVgSz2Zy4agHBiA8w9uD7n3PLSzB630/J
Y0pH5t/own+nZR5TxRFZaleEWAKErSnm4Vanrh9HeCWWyBfcWS65IKBSwzJuBN35
OYebv5Wo5/UKp7izukNkD6U9f/hIAz+dX3cvu82Rta6K5CDCFS57xwLny+Wwzqxu
oe3N/G4ih/5TDCGe7WHnHpres1T5uLBnN0v7tR1+zF2zeJLYJSoGAVGSyo7wHCfP
4+dTe+nh/AzghHd7pvGYSNC9Xx2EoX/+ga1yr986RH4P2ecJcSkcyzeCAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIANlXjnP/zX5cXi3bFliCFGfQ3oMB8GA1UdIwQY
MBaAFOIEocLKSk2wMzdeNg3jI3kLpqW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdTaHdzcEtUYkF6TjE0MkRlTWplUXVtcGJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMmU5MDUtNzg1NC00NzNjLTk1MGIt
Y2Y0YmQ0ZjNmMjlkLzEvZ0EyVmVPY19fTmZseGVMZHNXV0lJVVo5RGVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xMmU5MDUtNzg1NC00NzNjLTk1MGItY2Y0YmQ0ZjNmMjlk
LzEvNGdTaHdzcEtUYkF6TjE0MkRlTWplUXVtcGJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwVRwAwQA
w/hJMA0GCSqGSIb3DQEBCwUAA4IBAQCXXCXqwfZLBuq9LkNPN7uxyGBY3GQYb+Of
MfFwSye7gf2HPPAnjl1uif9XdCBJIGsBmkRW05U6Ga5qUSO983JNVzQhUc4O8B6X
FsT+xW3kq2ayKU0B8I1Z+/BT2m07k3M+iHeisJAaRajkd7/Kw81YhHPRYAm/8gnI
YxZW4DM2dlLh+esKomkQX7UPVvDH8Dj1pomnNt8/VPIeK/IW0ErV9XPv1tG4ZAXT
k+eijwT818sWtAhXIAFBKVBdLZMy/El73s+tzDVwxjPXKN5z9mL4SoBFys5xVtsq
9SIO29Dcq8g6ySDNx89p99kLxzzPJD+PQL2HZENFn4uFPuIB864H
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:54 2025 by rpki-client