Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/gc6g1C2J1IjiC6a4YzgHVoMBVvE.roa
File: gc6g1C2J1IjiC6a4YzgHVoMBVvE.roa (raw, json)
Hash identifier: l0wZmz1eeJH0pgzgb/M7lMO1lTKuzQbmbwUCcga2Ghs=
Subject key identifier: 81:CE:A0:D4:2D:89:D4:88:E2:0B:A6:B8:63:38:07:56:83:01:56:F1
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 019422FC48BC4EA930DB2E78D29FFD979A71
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/gc6g1C2J1IjiC6a4YzgHVoMBVvE.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51013
IP address blocks: 92.118.24.0/22 maxlen: 24
92.118.24.0/24 maxlen: 24
92.118.26.0/24 maxlen: 24
92.118.27.0/24 maxlen: 24
185.111.88.0/22 maxlen: 24
185.111.88.0/24 maxlen: 24
185.111.89.0/24 maxlen: 24
185.111.90.0/24 maxlen: 24
185.111.91.0/24 maxlen: 24
185.140.108.0/24 maxlen: 24
193.32.232.0/22 maxlen: 24
193.32.232.0/24 maxlen: 24
193.32.233.0/24 maxlen: 24
193.32.234.0/24 maxlen: 24
193.32.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:48:bc:4e:a9:30:db:2e:78:d2:9f:fd:97:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81cea0d42d89d488e20ba6b863380756830156f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:92:18:7d:9b:01:9d:a5:8f:2f:5f:a2:a3:
a3:6d:21:e4:a8:30:67:bd:eb:37:35:39:9e:9d:61:
e7:c2:e4:42:a2:07:03:e1:47:70:a8:b1:d5:a7:76:
0d:ee:27:60:ef:d4:be:b9:72:f0:a3:c2:aa:79:7d:
a7:09:bd:0d:49:2d:16:0f:24:3b:22:68:de:dd:0c:
99:3d:fd:d9:3a:5c:a2:60:79:c1:80:58:33:d4:2f:
69:62:e7:45:86:2b:2a:93:e8:db:34:1b:1a:3d:32:
59:41:f5:bc:64:60:38:2e:27:1c:27:85:4f:a7:e5:
47:3f:0a:6b:2e:12:d6:b5:9c:29:8c:a1:a4:44:28:
8d:9b:6b:62:ab:40:d8:29:04:ac:46:01:fe:85:96:
13:f6:6c:ec:92:fb:f5:0b:c0:57:de:51:9e:6b:72:
e6:ed:4f:15:69:c6:7e:5e:72:27:75:2d:01:9b:de:
b4:ed:9b:75:6c:21:9d:ab:86:9c:8e:42:be:1e:b6:
44:4b:5e:d4:96:57:b0:f5:51:2e:07:ed:43:a0:5e:
2b:1a:bb:63:f5:32:bd:9f:fb:36:0f:0d:80:19:3a:
1b:8b:42:a6:fc:22:51:85:a2:ba:91:33:c5:78:fa:
15:bf:50:ec:af:88:59:82:2a:ea:9e:c9:2c:95:f1:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:A0:D4:2D:89:D4:88:E2:0B:A6:B8:63:38:07:56:83:01:56:F1
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/gc6g1C2J1IjiC6a4YzgHVoMBVvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.24.0/22
185.111.88.0/22
185.140.108.0/24
193.32.232.0/22
Signature Algorithm: sha256WithRSAEncryption
08:f2:30:c4:a4:a8:d0:e7:2f:35:f2:a1:d1:2b:df:1f:0b:ee:
20:d7:02:a7:e9:7b:f5:56:52:ab:14:cb:67:eb:e5:39:b5:04:
25:ec:ba:82:99:d8:c5:de:63:a0:3f:14:0e:f3:97:73:c1:da:
ac:7c:f6:f9:43:27:93:4f:3c:89:74:54:8b:f5:62:36:cf:24:
05:0f:25:6e:d7:92:8b:66:93:6f:a6:e9:b5:d1:6b:1b:a6:79:
3a:cb:ef:72:61:d8:71:bd:d1:12:17:d1:67:49:ed:d4:63:aa:
bb:61:9c:bd:3e:78:00:fc:f2:bd:99:da:f9:e5:18:13:32:6f:
5d:a6:16:31:46:cc:50:42:fb:7a:21:ac:bb:62:4b:93:a1:53:
80:d3:d1:ca:a5:16:5b:84:e1:dd:8f:7c:ee:e7:0c:ba:3d:97:
18:53:0f:8e:84:8e:63:bd:54:bd:db:dd:ac:a4:20:3c:84:e5:
c0:22:3d:57:d9:75:d0:92:a4:c2:90:ae:10:47:42:03:c9:69:
5a:a8:94:e7:bc:ff:14:06:74:5e:d0:06:11:0f:b9:14:1c:78:
cb:c8:47:40:45:c2:83:77:79:b7:ab:88:6d:25:ff:40:ae:84:
d6:a4:af:af:4b:f1:ee:86:a3:dd:58:62:57:be:d8:6e:29:43:
aa:58:71:56
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQi/Ei8Tqkw2y540p/9l5pxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTJhMGE4MDlkYzNjZDFmYmQ4OTUxYThmODBmNjk5MjVl
MTE5MDgwHhcNMjUwMTAxMTc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWNlYTBkNDJkODlkNDg4ZTIwYmE2Yjg2MzM4MDc1NjgzMDE1NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b+SGH2bAZ2ljy9foqOjbSHkqDBn
ves3NTmenWHnwuRCogcD4UdwqLHVp3YN7idg79S+uXLwo8KqeX2nCb0NSS0WDyQ7
Imje3QyZPf3ZOlyiYHnBgFgz1C9pYudFhisqk+jbNBsaPTJZQfW8ZGA4LiccJ4VP
p+VHPwprLhLWtZwpjKGkRCiNm2tiq0DYKQSsRgH+hZYT9mzskvv1C8BX3lGea3Lm
7U8VacZ+XnIndS0Bm9607Zt1bCGdq4acjkK+HrZES17Ullew9VEuB+1DoF4rGrtj
9TK9n/s2Dw2AGTobi0Km/CJRhaK6kTPFePoVv1Dsr4hZgirqnskslfFQOwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIHOoNQtidSI4gumuGM4B1aDAVbxMB8GA1UdIwQY
MBaAFIgSoKgJ3DzR+9iVGo+A9pkl4RkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJLZ3FBbmNQTkg3MkpVYWo0RDJtU1hoR1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jOGFhMDktYmRmYi00M2NhLTg1MjIt
ZmE3NWNiZTliZWFkLzEvZ2M2ZzFDMkoxSWppQzZhNFl6Z0hWb01CVnZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jOGFhMDktYmRmYi00M2NhLTg1MjItZmE3NWNiZTliZWFk
LzEvaUJLZ3FBbmNQTkg3MkpVYWo0RDJtU1hoR1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXHYYAwQC
uW9YAwQAuYxsAwQCwSDoMA0GCSqGSIb3DQEBCwUAA4IBAQAI8jDEpKjQ5y818qHR
K98fC+4g1wKn6Xv1VlKrFMtn6+U5tQQl7LqCmdjF3mOgPxQO85dzwdqsfPb5QyeT
TzyJdFSL9WI2zyQFDyVu15KLZpNvpum10Wsbpnk6y+9yYdhxvdESF9FnSe3UY6q7
YZy9PngA/PK9mdr55RgTMm9dphYxRsxQQvt6Iay7YkuToVOA09HKpRZbhOHdj3zu
5wy6PZcYUw+OhI5jvVS9292spCA8hOXAIj1X2XXQkqTCkK4QR0IDyWlaqJTnvP8U
BnRe0AYRD7kUHHjLyEdARcKDd3m3q4htJf9AroTWpK+vS/HuhqPdWGJXvthuKUOq
WHFW
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:59 2025 by rpki-client