Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/GD-9n631uNSRgYJQm1IFJclkl_U.roa
File: GD-9n631uNSRgYJQm1IFJclkl_U.roa (raw, json)
Hash identifier: 7OlvcJ1tO8PBJobNmdxjO7ukNmc17Wt+B6PDydm2R90=
Subject key identifier: 18:3F:BD:9F:AD:F5:B8:D4:91:81:82:50:9B:52:05:25:C9:64:97:F5
Certificate issuer: /CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Certificate serial: 0192DD208D88E91F3726104E46BC84BE00AC
Authority key identifier: 6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/GD-9n631uNSRgYJQm1IFJclkl_U.roa
Signing time: Wed 30 Oct 2024 11:12:30 +0000
ROA not before: Wed 30 Oct 2024 11:12:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27970
IP address blocks: 193.16.100.0/24 maxlen: 24
2a00:12f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:20:8d:88:e9:1f:37:26:10:4e:46:bc:84:be:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Validity
Not Before: Oct 30 11:12:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=183fbd9fadf5b8d4918182509b520525c96497f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:e2:17:6d:4e:41:ad:53:53:a8:15:f7:97:
10:67:12:07:d2:92:7f:e5:f1:2b:46:ef:fd:3e:94:
16:fd:60:25:4f:fb:02:b1:34:62:7d:df:26:a2:9d:
54:de:35:1b:93:f6:ae:b0:a6:70:38:de:d2:eb:6f:
8f:5e:8c:cf:d3:66:43:b5:b3:dc:df:dd:2a:1f:34:
59:7b:8e:11:fd:18:5a:e8:c1:3e:e9:94:94:09:8e:
c2:52:05:9d:d6:b1:60:14:1d:41:bf:1a:30:62:9f:
e9:f0:d8:c3:48:ac:aa:ae:7c:f8:0e:1a:86:fe:dc:
ae:e6:42:ee:cf:d9:63:3a:ed:e6:c8:c9:8c:02:aa:
70:d3:f3:61:27:54:c1:b6:11:2c:1f:13:e1:f4:09:
9b:3f:7d:8b:f0:65:26:3a:1c:84:f3:5a:cb:82:b0:
de:fe:8e:c4:2f:1d:ac:ad:5e:66:9a:92:b7:be:68:
2f:b2:a1:7c:40:46:7e:f5:7a:18:5f:cb:7b:2b:f2:
84:28:ce:dd:ef:cf:62:0f:7e:bd:44:15:e3:1b:fd:
56:c4:ff:94:22:f1:6b:20:3f:8a:43:91:b7:70:c8:
58:e7:ea:ee:7f:5f:81:67:b0:d4:3f:7f:ef:45:33:
0c:35:e1:68:d6:8d:e9:a8:9d:10:28:fd:58:05:0c:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3F:BD:9F:AD:F5:B8:D4:91:81:82:50:9B:52:05:25:C9:64:97:F5
X509v3 Authority Key Identifier:
keyid:6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/GD-9n631uNSRgYJQm1IFJclkl_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.100.0/24
IPv6:
2a00:12f0::/32
Signature Algorithm: sha256WithRSAEncryption
63:b8:54:60:9b:75:b6:e9:2b:02:3b:c0:ea:a3:58:23:75:55:
fc:23:3c:33:15:f7:e2:a7:05:3e:ea:29:2a:15:a1:11:67:88:
63:6a:5f:b8:5c:7d:1a:4b:d9:c6:58:32:c4:b4:49:b3:af:12:
1d:a7:95:de:e5:65:6d:7a:03:d0:c8:dc:b0:3d:0b:e1:80:78:
63:8f:54:e1:32:64:ec:86:3d:14:1d:68:e0:9d:78:4e:36:7e:
95:60:ce:55:66:2d:46:05:92:24:19:47:be:4a:c6:37:28:e3:
5b:d9:47:0f:91:e1:72:0a:4c:a5:98:5b:02:83:9a:37:61:8a:
5e:a6:e9:e4:1a:0a:63:f1:65:33:0c:01:11:a3:ed:dd:08:f7:
72:e7:58:8a:a5:87:b8:02:c9:e5:aa:88:07:80:a5:b7:72:e8:
78:fa:93:3e:2a:72:9d:b1:41:e6:95:8e:df:95:99:9f:28:1b:
cd:00:28:ba:af:8c:54:de:6c:bc:5b:47:df:57:50:af:ac:e3:
71:19:ef:10:bd:92:72:3a:85:86:7c:81:42:20:04:2d:0c:23:
2f:5a:ec:e7:11:29:10:f0:67:2f:73:20:ee:19:42:86:b0:98:
05:b1:80:81:fb:6d:b0:c2:0a:a9:39:f6:6a:0c:f1:d5:9d:ce:
cb:ed:24:f8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZLdII2I6R83JhBORryEvgCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkM2VlMWE1MmE1ZDY1YjkwOTFkZTVhNWI0NjRmYjk3MDMy
ZDBlOWIwHhcNMjQxMDMwMTExMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODNmYmQ5ZmFkZjViOGQ0OTE4MTgyNTA5YjUyMDUyNWM5NjQ5N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+ziF21OQa1TU6gV95cQZxIH0pJ/
5fErRu/9PpQW/WAlT/sCsTRifd8mop1U3jUbk/ausKZwON7S62+PXozP02ZDtbPc
390qHzRZe44R/Rha6ME+6ZSUCY7CUgWd1rFgFB1BvxowYp/p8NjDSKyqrnz4DhqG
/tyu5kLuz9ljOu3myMmMAqpw0/NhJ1TBthEsHxPh9AmbP32L8GUmOhyE81rLgrDe
/o7ELx2srV5mmpK3vmgvsqF8QEZ+9XoYX8t7K/KEKM7d789iD369RBXjG/1WxP+U
IvFrID+KQ5G3cMhY5+ruf1+BZ7DUP3/vRTMMNeFo1o3pqJ0QKP1YBQyu5wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBg/vZ+t9bjUkYGCUJtSBSXJZJf1MB8GA1UdIwQY
MBaAFG0+4aUqXWW5CR3lpbRk+5cDLQ6bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlQ3aHBTcGRaYmtKSGVXbHRHVDdsd010RHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMmU3ZDUtM2EwZi00YmM2LTk2MTEt
MDU0MzVlZmQ4YmY2LzEvR0QtOW42MzF1TlNSZ1lKUW0xSUZKY2xrbF9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMmU3ZDUtM2EwZi00YmM2LTk2MTEtMDU0MzVlZmQ4YmY2
LzEvYlQ3aHBTcGRaYmtKSGVXbHRHVDdsd010RHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRBkMA0E
AgACMAcDBQAqABLwMA0GCSqGSIb3DQEBCwUAA4IBAQBjuFRgm3W26SsCO8Dqo1gj
dVX8IzwzFffipwU+6ikqFaERZ4hjal+4XH0aS9nGWDLEtEmzrxIdp5Xe5WVtegPQ
yNywPQvhgHhjj1ThMmTshj0UHWjgnXhONn6VYM5VZi1GBZIkGUe+SsY3KONb2UcP
keFyCkylmFsCg5o3YYpepunkGgpj8WUzDAERo+3dCPdy51iKpYe4AsnlqogHgKW3
cuh4+pM+KnKdsUHmlY7flZmfKBvNACi6r4xU3my8W0ffV1CvrONxGe8QvZJyOoWG
fIFCIAQtDCMvWuznESkQ8GcvcyDuGUKGsJgFsYCB+22wwgqpOfZqDPHVnc7L7ST4
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:22 2025 by rpki-client