Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa
File: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (raw, json)
Hash identifier: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=
Subject key identifier: 18:C6:5B:75:97:FB:0D:54:CC:56:D1:B4:ED:4C:C9:F2:86:10:65:CF
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 019428231F3BAEBA0770D1AE46A7529E7E81
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa
Signing time: Thu 02 Jan 2025 17:49:37 +0000
ROA not before: Thu 02 Jan 2025 17:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 46.28.240.0/21 maxlen: 24
193.22.169.0/24 maxlen: 24
193.41.210.0/23 maxlen: 24
195.80.237.0/24 maxlen: 24
2a02:2978::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1f:3b:ae:ba:07:70:d1:ae:46:a7:52:9e:7e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 17:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18c65b7597fb0d54cc56d1b4ed4cc9f2861065cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:00:bc:78:33:4a:34:da:4a:96:2f:46:7e:
d0:a5:d2:58:b9:ee:aa:55:5a:3c:0e:1d:d6:3f:bd:
66:cb:48:0d:43:9c:83:ff:cb:4a:7b:ae:1a:a4:58:
57:bb:53:c3:6e:ee:a9:11:8a:75:b1:c8:1d:bb:9d:
ba:24:3a:ca:ba:fd:4f:cc:08:a4:f7:a1:8a:f8:c6:
b9:7f:bf:a9:94:f3:6f:12:d5:a7:6b:d6:bc:01:6d:
76:98:7c:ea:38:6d:a1:cd:9d:e2:b5:86:db:72:3e:
1b:eb:5d:fd:09:26:48:94:78:c3:54:e7:9a:74:23:
65:47:f7:35:05:d5:f6:01:0c:92:a6:a8:1d:20:03:
ed:56:94:7d:bf:1f:96:1e:01:d5:c1:0d:e2:fe:ba:
49:6c:ee:88:ea:b1:82:de:1e:58:6c:43:2f:1e:b0:
83:6d:53:81:aa:71:0e:4c:f9:b1:02:45:40:9e:7c:
66:13:06:27:11:c4:58:04:a0:af:5c:8d:61:78:92:
34:94:be:aa:69:ae:b9:a9:41:db:8a:2d:f7:34:30:
64:37:4c:b5:ce:4a:b9:ef:57:a5:c9:cd:c3:88:b9:
21:f9:22:8c:0e:65:db:c6:30:6d:12:f0:8c:9a:bf:
7e:d0:fb:48:06:7e:b9:d4:8c:c4:bd:a5:fb:f7:e2:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C6:5B:75:97:FB:0D:54:CC:56:D1:B4:ED:4C:C9:F2:86:10:65:CF
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.240.0/21
193.22.169.0/24
193.41.210.0/23
195.80.237.0/24
IPv6:
2a02:2978::/32
Signature Algorithm: sha256WithRSAEncryption
77:dd:96:17:5a:25:1f:40:e7:7e:ae:65:b4:aa:f5:55:44:60:
85:e0:0c:ea:a7:9a:6b:cb:e9:87:2d:7e:dc:bc:e3:7f:43:de:
76:7a:c0:58:83:7d:8e:cf:27:5e:cf:a3:8d:96:9d:94:ea:c4:
f6:3c:6e:b8:bd:4f:4f:d9:30:a6:14:0f:2a:fa:7c:f4:c8:49:
63:de:b4:23:1e:3e:99:70:c8:46:80:b6:f0:7f:8b:a7:8c:a0:
2f:85:d3:4c:dd:a2:59:3e:42:36:37:6d:54:64:38:e3:78:63:
48:af:4d:8c:62:54:b6:76:f9:c2:9d:79:39:0a:6d:06:50:3a:
a6:0b:d5:49:ce:c0:d8:52:92:b1:b5:66:1d:e5:b8:d0:a9:70:
0c:95:d6:42:9d:cd:d4:81:b9:11:7e:7c:2e:c1:32:fe:6b:70:
de:b2:98:70:cf:60:3f:6e:97:ef:8d:a3:13:9c:5d:f2:ed:15:
3e:fd:94:c5:69:f9:60:bc:ff:c0:e7:44:eb:6b:76:9b:37:d4:
a0:2c:f0:f4:df:9f:01:7e:b9:a3:47:7e:7f:d5:b8:90:d9:7f:
cf:1f:21:c0:28:45:7c:70:f8:9a:5b:e8:d4:c7:55:31:eb:a8:
3f:37:a8:4f:15:11:8b:a8:78:fd:65:b6:d7:df:66:ed:bb:ae:
95:95:d0:36
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQoIx87rroHcNGuRqdSnn6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk
ZDM3MDIwHhcNMjUwMTAyMTc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGM2NWI3NTk3ZmIwZDU0Y2M1NmQxYjRlZDRjYzlmMjg2MTA2NWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDgAvHgzSjTaSpYvRn7QpdJYue6q
VVo8Dh3WP71my0gNQ5yD/8tKe64apFhXu1PDbu6pEYp1scgdu526JDrKuv1PzAik
96GK+Ma5f7+plPNvEtWna9a8AW12mHzqOG2hzZ3itYbbcj4b6139CSZIlHjDVOea
dCNlR/c1BdX2AQySpqgdIAPtVpR9vx+WHgHVwQ3i/rpJbO6I6rGC3h5YbEMvHrCD
bVOBqnEOTPmxAkVAnnxmEwYnEcRYBKCvXI1heJI0lL6qaa65qUHbii33NDBkN0y1
zkq571elyc3DiLkh+SKMDmXbxjBtEvCMmr9+0PtIBn651IzEvaX79+Ln8wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBjGW3WX+w1UzFbRtO1MyfKGEGXPMB8GA1UdIwQY
MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt
MThiMWE5MzdhNTY3LzEvR01aYmRaZjdEVlRNVnRHMDdVeko4b1lRWmM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3
LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhzwAwQA
wRapAwQBwSnSAwQAw1DtMA0EAgACMAcDBQAqAil4MA0GCSqGSIb3DQEBCwUAA4IB
AQB33ZYXWiUfQOd+rmW0qvVVRGCF4Azqp5pry+mHLX7cvON/Q952esBYg32Ozyde
z6ONlp2U6sT2PG64vU9P2TCmFA8q+nz0yElj3rQjHj6ZcMhGgLbwf4unjKAvhdNM
3aJZPkI2N21UZDjjeGNIr02MYlS2dvnCnXk5Cm0GUDqmC9VJzsDYUpKxtWYd5bjQ
qXAMldZCnc3UgbkRfnwuwTL+a3Desphwz2A/bpfvjaMTnF3y7RU+/ZTFaflgvP/A
50Tra3abN9SgLPD0358BfrmjR35/1biQ2X/PHyHAKEV8cPiaW+jUx1Ux66g/N6hP
FRGLqHj9ZbbX32btu66VldA2
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:11 2025 by rpki-client