Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zG5Gv8ujebURp28wywTD7kiNVs4.roa
File: zG5Gv8ujebURp28wywTD7kiNVs4.roa (raw, json)
Hash identifier: Ptj2OGvHklGmFEnQjxTzIijObNm+2X5D6o3C8+XhLm4=
Subject key identifier: CC:6E:46:BF:CB:A3:79:B5:11:A7:6F:30:CB:04:C3:EE:48:8D:56:CE
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019081C0403FD82E9E67B3067702B8A5B338
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zG5Gv8ujebURp28wywTD7kiNVs4.roa
Signing time: Fri 05 Jul 2024 07:16:18 +0000
ROA not before: Fri 05 Jul 2024 07:16:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 2.56.184.0/22 maxlen: 22
31.40.232.0/22 maxlen: 24
45.11.152.0/24 maxlen: 24
45.11.153.0/24 maxlen: 24
45.147.153.0/24 maxlen: 24
45.147.154.0/24 maxlen: 24
45.147.155.0/24 maxlen: 24
85.8.168.0/22 maxlen: 22
194.31.180.0/22 maxlen: 22
194.121.59.0/24 maxlen: 24
194.124.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:c0:40:3f:d8:2e:9e:67:b3:06:77:02:b8:a5:b3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jul 5 07:16:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc6e46bfcba379b511a76f30cb04c3ee488d56ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:fe:f8:25:2d:3d:9d:4f:24:94:e0:56:2d:
b4:17:a6:10:21:dc:ab:cf:d8:4b:e6:b2:43:f9:97:
14:19:ad:be:9e:95:79:32:72:25:24:95:de:30:ad:
50:91:9b:6b:7a:65:bc:7e:48:69:bf:6a:e1:45:e1:
26:b4:92:bc:05:42:79:2c:00:03:4f:70:66:24:ef:
d5:1b:b3:46:09:b7:01:ae:21:23:0b:d2:ac:5f:9f:
a1:56:ee:4c:7c:c6:b0:b0:7c:4c:18:eb:13:fa:1f:
ac:07:b1:70:79:f8:28:81:98:83:00:16:ee:c0:4c:
74:59:bc:44:ef:9a:f0:af:54:f3:d4:33:20:50:f7:
1c:10:f9:cb:66:d3:bf:ee:a3:4c:fe:89:74:13:90:
ad:e0:48:7c:e0:4e:6c:89:9a:37:6e:97:f4:4e:f4:
ee:66:62:9c:9f:57:54:86:de:6a:83:6c:13:2a:af:
ce:b6:e9:67:57:15:12:ca:73:0e:24:39:01:11:1e:
df:8c:7e:5c:5a:69:c3:ee:f9:35:4c:4b:34:2d:7c:
dd:83:6c:45:6e:a9:68:aa:a4:7f:aa:8b:87:24:eb:
71:81:15:63:56:65:54:32:52:1e:bb:35:dd:29:6e:
e4:43:8c:8f:50:2d:56:69:2e:9e:46:80:19:b5:65:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6E:46:BF:CB:A3:79:B5:11:A7:6F:30:CB:04:C3:EE:48:8D:56:CE
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zG5Gv8ujebURp28wywTD7kiNVs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.184.0/22
31.40.232.0/22
45.11.152.0/23
45.147.153.0-45.147.155.255
85.8.168.0/22
194.31.180.0/22
194.121.59.0/24
194.124.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:46:5c:79:f8:2c:ce:29:7a:b5:6f:a8:ba:fb:39:bf:ee:a8:
2a:a3:5b:ff:85:64:d0:5d:7e:90:a1:86:79:17:35:4a:94:9d:
71:c2:cf:13:a5:80:1e:34:0c:20:3a:f8:7b:7b:8a:bd:57:35:
62:a3:83:e7:54:0f:ed:e7:39:12:3a:eb:e8:1d:c8:58:ed:64:
77:31:7f:57:b5:d6:ba:1c:74:c4:0f:ae:ab:38:29:25:25:57:
e8:c0:4a:32:5e:8d:05:50:05:f5:40:28:0d:0b:97:fa:57:3c:
7f:e2:f7:94:50:ea:49:51:fd:24:c1:0a:8a:b4:04:96:cb:db:
ea:56:19:fb:78:20:36:0a:9a:e1:04:c0:67:40:74:57:a4:1a:
bd:b3:43:88:f5:35:01:27:90:8b:76:e2:54:91:14:79:a3:a5:
5f:3c:73:0e:2f:e5:ec:c6:24:a4:a0:74:bc:51:d0:21:b1:47:
f5:70:f9:b5:f9:a6:b5:45:3c:51:22:ad:e2:cb:a5:2c:d9:ec:
b1:a0:6f:b7:75:a2:10:1b:6d:39:85:e5:ab:23:44:44:bd:79:
be:36:bb:8e:c4:13:30:47:16:de:ba:19:e4:1f:6b:5d:53:de:
5b:1e:b5:3c:e0:32:0b:a1:d8:0e:18:e5:c7:26:e1:02:1c:84:
ce:e4:36:59
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZCBwEA/2C6eZ7MGdwK4pbM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjQwNzA1MDcxNjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzZlNDZiZmNiYTM3OWI1MTFhNzZmMzBjYjA0YzNlZTQ4OGQ1NmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qf++CUtPZ1PJJTgVi20F6YQIdyr
z9hL5rJD+ZcUGa2+npV5MnIlJJXeMK1QkZtremW8fkhpv2rhReEmtJK8BUJ5LAAD
T3BmJO/VG7NGCbcBriEjC9KsX5+hVu5MfMawsHxMGOsT+h+sB7FwefgogZiDABbu
wEx0WbxE75rwr1Tz1DMgUPccEPnLZtO/7qNM/ol0E5Ct4Eh84E5siZo3bpf0TvTu
ZmKcn1dUht5qg2wTKq/OtulnVxUSynMOJDkBER7fjH5cWmnD7vk1TEs0LXzdg2xF
bqloqqR/qouHJOtxgRVjVmVUMlIeuzXdKW7kQ4yPUC1WaS6eRoAZtWUbRQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFMxuRr/Lo3m1EadvMMsEw+5IjVbOMB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvekc1R3Y4dWplYlVScDI4d3l3VEQ3a2lOVnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCAji4AwQC
HyjoAwQBLQuYMAwDBAAtk5kDBAItk5gDBAJVCKgDBALCH7QDBADCeTsDBADCfJAw
DQYJKoZIhvcNAQELBQADggEBAG9GXHn4LM4perVvqLr7Ob/uqCqjW/+FZNBdfpCh
hnkXNUqUnXHCzxOlgB40DCA6+Ht7ir1XNWKjg+dUD+3nORI66+gdyFjtZHcxf1e1
1rocdMQPrqs4KSUlV+jASjJejQVQBfVAKA0Ll/pXPH/i95RQ6klR/STBCoq0BJbL
2+pWGft4IDYKmuEEwGdAdFekGr2zQ4j1NQEnkIt24lSRFHmjpV88cw4v5ezGJKSg
dLxR0CGxR/Vw+bX5prVFPFEireLLpSzZ7LGgb7d1ohAbbTmF5asjRES9eb42u47E
EzBHFt66GeQfa11T3lsetTzgMguh2A4Y5ccm4QIchM7kNlk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:14 2025 by rpki-client