Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/GxKilLVepL5t_pYKZrftFkg3OVM.roa
File: GxKilLVepL5t_pYKZrftFkg3OVM.roa (raw, json)
Hash identifier: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=
Subject key identifier: 1B:12:A2:94:B5:5E:A4:BE:6D:FE:96:0A:66:B7:ED:16:48:37:39:53
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 019420D5CA8B24473D95B99A91A2EC876291
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/GxKilLVepL5t_pYKZrftFkg3OVM.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 82.146.160.0/19 maxlen: 24
82.146.170.0/24 maxlen: 24
91.245.248.0/22 maxlen: 24
2a0d:b3c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:8b:24:47:3d:95:b9:9a:91:a2:ec:87:62:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b12a294b55ea4be6dfe960a66b7ed1648373953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:c7:08:57:dc:f1:62:30:46:ce:3d:40:96:
cd:55:a9:77:02:12:37:6d:00:6e:3b:08:f5:9a:22:
0d:b8:e6:91:8a:e0:5c:0e:8f:b5:12:85:ea:0d:ad:
ca:b6:33:0b:a9:a0:6b:ed:1d:69:06:77:ad:30:0e:
36:36:df:bd:db:08:95:8d:64:bb:23:2c:d0:d3:67:
e5:04:c8:d0:06:ff:ae:bb:75:7c:48:43:2e:a7:f7:
8d:c9:6f:4d:33:d5:c6:36:82:e9:d9:65:9f:00:c3:
6a:6c:b5:eb:d3:e2:a4:db:7d:27:e2:6c:a9:e4:4e:
98:79:07:99:66:52:fc:60:b3:59:50:38:42:8d:02:
f5:f7:e9:81:b1:74:28:be:dc:bd:50:d6:9a:cd:04:
f9:93:7d:10:8e:b5:60:7c:2f:54:05:c6:a6:f7:4c:
2b:c4:24:f2:03:05:a7:54:cd:53:76:8c:f8:73:74:
3f:8b:39:57:94:3d:e4:34:d0:33:d7:47:1f:c4:a9:
7d:db:9b:96:3e:00:95:fb:e6:31:d5:c0:86:d9:78:
6f:47:7a:5e:5f:e9:cc:41:2c:1f:67:79:b0:95:ce:
ca:8c:68:37:5d:d1:38:cc:e0:ab:fc:b9:22:ac:f7:
5f:61:52:2b:69:e1:34:b3:5e:2e:40:76:f3:31:55:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:A2:94:B5:5E:A4:BE:6D:FE:96:0A:66:B7:ED:16:48:37:39:53
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/GxKilLVepL5t_pYKZrftFkg3OVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.160.0/19
91.245.248.0/22
IPv6:
2a0d:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:0d:a8:3a:07:af:60:40:f3:15:92:a2:20:37:f2:5c:28:a7:
68:eb:e6:cf:04:5c:2a:c3:47:72:bd:ee:3e:46:ad:33:9d:be:
06:7a:ab:01:37:1c:ba:2f:1f:b4:10:2f:3a:15:f7:9f:3c:5a:
d3:d8:c9:95:47:f3:80:07:f7:c2:2a:84:e5:5b:ec:f1:f7:4e:
b2:8c:08:d8:84:c7:6e:65:c8:ef:fc:89:d7:9f:d2:b5:bc:cd:
a7:87:7f:f8:0b:fb:95:76:a7:df:50:69:b0:45:1e:72:6f:d2:
25:65:08:b0:58:b9:df:c3:7f:26:ec:68:00:57:b2:ed:df:a2:
cd:13:75:0a:94:38:1b:6d:48:8c:f9:e4:d7:e9:e3:ed:ef:b6:
2f:bd:a5:39:4d:92:c0:2a:eb:d3:a1:6b:c0:63:bc:d0:6b:ef:
23:70:85:0b:41:b2:66:39:ed:f1:0d:2e:04:70:30:e0:a6:15:
f6:63:1c:70:24:f1:f1:44:10:ea:d9:eb:97:f5:b5:41:08:4d:
df:e0:c1:91:d0:46:2d:27:df:92:0f:d2:97:d5:b4:9c:28:15:
1f:8f:37:b8:ff:58:f3:0a:6b:8d:82:45:d7:13:34:e7:b2:6e:
ed:56:6b:50:2c:85:58:11:e5:64:43:55:3b:87:1c:82:f3:69:
7f:85:41:a0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQg1cqLJEc9lbmakaLsh2KRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx
MzM1NzgwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjEyYTI5NGI1NWVhNGJlNmRmZTk2MGE2NmI3ZWQxNjQ4MzczOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdrHCFfc8WIwRs49QJbNVal3AhI3
bQBuOwj1miINuOaRiuBcDo+1EoXqDa3KtjMLqaBr7R1pBnetMA42Nt+92wiVjWS7
IyzQ02flBMjQBv+uu3V8SEMup/eNyW9NM9XGNoLp2WWfAMNqbLXr0+Kk230n4myp
5E6YeQeZZlL8YLNZUDhCjQL19+mBsXQovty9UNaazQT5k30QjrVgfC9UBcam90wr
xCTyAwWnVM1Tdoz4c3Q/izlXlD3kNNAz10cfxKl925uWPgCV++Yx1cCG2XhvR3pe
X+nMQSwfZ3mwlc7KjGg3XdE4zOCr/LkirPdfYVIraeE0s14uQHbzMVVfrwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBsSopS1XqS+bf6WCma37RZINzlTMB8GA1UdIwQY
MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt
YWQ2ZjBiZjg4NDM4LzEvR3hLaWxMVmVwTDV0X3BZS1pyZnRGa2czT1ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4
LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUpKgAwQC
W/X4MA0EAgACMAcDBQMqDbPAMA0GCSqGSIb3DQEBCwUAA4IBAQCeDag6B69gQPMV
kqIgN/JcKKdo6+bPBFwqw0dyve4+Rq0znb4GeqsBNxy6Lx+0EC86FfefPFrT2MmV
R/OAB/fCKoTlW+zx906yjAjYhMduZcjv/InXn9K1vM2nh3/4C/uVdqffUGmwRR5y
b9IlZQiwWLnfw38m7GgAV7Lt36LNE3UKlDgbbUiM+eTX6ePt77YvvaU5TZLAKuvT
oWvAY7zQa+8jcIULQbJmOe3xDS4EcDDgphX2YxxwJPHxRBDq2euX9bVBCE3f4MGR
0EYtJ9+SD9KX1bScKBUfjze4/1jzCmuNgkXXEzTnsm7tVmtQLIVYEeVkQ1U7hxyC
82l/hUGg
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:24 2025 by rpki-client