Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/GqSZzRT-6EUjEpPpSprb5uTXjdY.roa
File: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (raw, json)
Hash identifier: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=
Subject key identifier: 1A:A4:99:CD:14:FE:E8:45:23:12:93:E9:4A:9A:DB:E6:E4:D7:8D:D6
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DED43C0CFB383CBA7851860B690D4
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/GqSZzRT-6EUjEpPpSprb5uTXjdY.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49666
IP address blocks: 176.65.243.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ed:43:c0:cf:b3:83:cb:a7:85:18:60:b6:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa499cd14fee845231293e94a9adbe6e4d78dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:be:7b:23:a9:6d:9f:b0:a7:8d:fb:aa:6f:
fd:9d:a4:1a:92:33:f4:fd:19:4b:b6:75:97:2e:da:
b6:54:ae:b3:cc:b3:4e:b3:60:d4:16:87:70:7d:4d:
9d:9b:7b:ed:c5:e7:c4:46:af:05:e8:51:d7:de:e4:
ea:72:16:c4:57:14:f3:31:61:4a:e4:f2:1d:d5:cf:
5c:85:7c:9f:e7:a3:08:7c:f0:4f:ec:84:18:5f:45:
4e:4c:66:09:95:b5:d3:c7:44:2c:69:c2:43:be:ea:
be:f9:99:aa:45:e6:52:16:b4:02:cf:6b:1f:c2:6f:
a3:a5:29:4e:55:a7:6b:6d:92:85:30:d6:78:b0:b8:
ac:82:d7:27:b1:7d:aa:a4:cb:50:f8:ad:22:23:88:
11:09:21:75:8f:ba:b1:89:d7:f2:77:e6:2b:04:05:
76:85:57:4f:9f:98:7d:3c:ab:a2:af:2d:ae:1b:8b:
7b:b4:82:91:4e:10:e1:85:61:c6:e3:22:e5:9c:f6:
62:ca:5e:2d:cf:26:93:a9:8e:3e:96:6b:a6:46:37:
8a:cd:01:f1:a1:a8:94:88:a9:b5:d5:2b:a6:91:e6:
6a:a3:fd:38:e2:86:bd:26:00:ec:ec:6c:f2:b9:f7:
49:c9:f2:68:d0:d6:b2:9d:a7:52:cf:3d:6b:88:a3:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:99:CD:14:FE:E8:45:23:12:93:E9:4A:9A:DB:E6:E4:D7:8D:D6
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/GqSZzRT-6EUjEpPpSprb5uTXjdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:78:d3:46:01:de:a9:8f:f9:ec:24:5b:eb:a0:30:33:81:b3:
f6:bd:32:f2:a3:89:5c:a6:f6:b2:6a:c2:98:81:f7:ee:ba:c0:
3f:3c:30:ac:d1:ca:ee:32:35:c5:32:46:14:0f:be:a8:8b:5a:
9b:c4:8e:49:4d:bb:54:3d:72:13:88:33:66:ad:2a:c0:24:54:
58:68:a5:ed:95:ad:2d:47:63:10:b7:e6:64:61:cc:28:42:f8:
7b:55:70:ee:d3:ce:e9:e6:60:12:38:b7:77:36:42:dc:84:8c:
9c:41:e2:38:3e:ad:5f:ad:d8:87:18:aa:18:0b:87:82:e1:6f:
b6:22:91:4b:51:1b:f3:0a:43:ad:cc:a4:fb:75:53:ed:f2:2a:
fb:45:cc:ad:8b:d3:e7:ae:7e:40:8c:b1:5d:dd:48:8e:4f:39:
44:fd:a2:e3:a0:63:30:ba:2d:0e:37:d6:f9:62:6d:cc:4d:ac:
00:44:b5:34:7f:fa:b8:58:f2:c4:d8:41:e9:09:c7:86:d1:35:
90:38:12:ab:bc:72:cd:c1:f1:bc:07:c2:7d:8e:d6:d6:0d:b0:
09:a0:01:09:af:81:56:39:69:e7:b9:30:97:8f:6c:dc:ae:50:
fd:75:66:96:ab:3e:d3:bc:e2:05:68:c4:75:27:e5:cb:61:f9:
b4:71:a9:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQije1DwM+zg8unhRhgtpDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjUwMTAxMTU0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWE0OTljZDE0ZmVlODQ1MjMxMjkzZTk0YTlhZGJlNmU0ZDc4ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xW+eyOpbZ+wp437qm/9naQakjP0
/RlLtnWXLtq2VK6zzLNOs2DUFodwfU2dm3vtxefERq8F6FHX3uTqchbEVxTzMWFK
5PId1c9chXyf56MIfPBP7IQYX0VOTGYJlbXTx0QsacJDvuq++ZmqReZSFrQCz2sf
wm+jpSlOVadrbZKFMNZ4sLisgtcnsX2qpMtQ+K0iI4gRCSF1j7qxidfyd+YrBAV2
hVdPn5h9PKuiry2uG4t7tIKRThDhhWHG4yLlnPZiyl4tzyaTqY4+lmumRjeKzQHx
oaiUiKm11SumkeZqo/044oa9JgDs7GzyufdJyfJo0NaynadSzz1riKPjUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqkmc0U/uhFIxKT6Uqa2+bk143WMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvR3FTWnpSVC02RVVqRXBQcFNwcmI1dVRYamRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEHzMA0G
CSqGSIb3DQEBCwUAA4IBAQBbeNNGAd6pj/nsJFvroDAzgbP2vTLyo4lcpvayasKY
gffuusA/PDCs0cruMjXFMkYUD76oi1qbxI5JTbtUPXITiDNmrSrAJFRYaKXtla0t
R2MQt+ZkYcwoQvh7VXDu087p5mASOLd3NkLchIycQeI4Pq1frdiHGKoYC4eC4W+2
IpFLURvzCkOtzKT7dVPt8ir7Rcyti9Pnrn5AjLFd3UiOTzlE/aLjoGMwui0ON9b5
Ym3MTawARLU0f/q4WPLE2EHpCceG0TWQOBKrvHLNwfG8B8J9jtbWDbAJoAEJr4FW
OWnnuTCXj2zcrlD9dWaWqz7TvOIFaMR1J+XLYfm0calE
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:36 2025 by rpki-client