Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/GGuXZz1yc1xuFR23Td7inYen2L4.roa
File: GGuXZz1yc1xuFR23Td7inYen2L4.roa (raw, json)
Hash identifier: ui5/826JA25f9/SYi3h45BSg+lQ8n/wQq8UKIUbEA80=
Subject key identifier: 18:6B:97:67:3D:72:73:5C:6E:15:1D:B7:4D:DE:E2:9D:87:A7:D8:BE
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 018A181F1564C35FBC5D8AED469BF5737F80
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/GGuXZz1yc1xuFR23Td7inYen2L4.roa
Signing time: Mon 21 Aug 2023 12:43:24 +0000
ROA not before: Mon 21 Aug 2023 12:43:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.125.192.0/22 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.8.0/23 maxlen: 32
93.114.10.0/23 maxlen: 32
93.114.12.0/22 maxlen: 32
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
185.229.250.0/24 maxlen: 32
203.166.152.0/22 maxlen: 32
203.166.148.0/22 maxlen: 32
188.119.116.0/22 maxlen: 32
89.249.51.0/24 maxlen: 32
94.176.112.0/20 maxlen: 32
91.132.184.0/22 maxlen: 32
185.38.102.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
43.240.140.0/22 maxlen: 32
203.109.60.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
83.229.76.0/22 maxlen: 32
119.13.192.0/20 maxlen: 32
119.13.208.0/20 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
185.90.243.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
89.19.42.0/23 maxlen: 32
93.180.224.0/20 maxlen: 32
103.204.124.0/22 maxlen: 32
209.20.176.0/21 maxlen: 32
185.131.220.0/24 maxlen: 32
93.180.192.0/20 maxlen: 32
93.115.12.0/23 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:1f:15:64:c3:5f:bc:5d:8a:ed:46:9b:f5:73:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Aug 21 12:43:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=186b97673d72735c6e151db74ddee29d87a7d8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:28:f2:76:96:f9:93:36:4c:dc:e6:7b:45:
db:88:85:3d:63:a8:96:c1:92:a4:d9:f6:f4:1b:af:
7e:4e:1b:63:99:d5:cd:2e:34:ed:72:44:d8:67:cf:
d3:4b:30:2f:c8:40:35:23:11:2f:74:96:b5:34:04:
3a:f7:f3:ee:63:bc:50:c5:d0:47:90:05:ca:0c:d2:
d0:aa:73:fc:44:06:fd:62:d5:bb:33:4d:7c:3c:e6:
d9:4f:4e:6b:20:d5:60:b2:35:27:10:ae:ca:25:a1:
be:19:3c:48:29:22:14:59:32:39:c3:4a:db:d1:c4:
e1:7c:eb:dd:62:92:0c:c0:4a:29:a5:61:3f:ad:c3:
d4:2a:41:bd:33:cf:f8:19:78:fa:ee:41:9d:a5:a7:
7c:75:37:2e:3b:d4:22:f3:a8:6c:84:a1:a0:17:bd:
5b:10:b3:42:46:af:5f:00:71:9a:a6:87:b1:d5:0e:
92:27:12:ed:cf:4e:63:b1:b2:8e:49:38:56:33:d3:
8b:50:6f:26:77:4a:b9:e4:0f:2c:90:67:25:c6:36:
f6:c4:bb:24:dc:6c:7e:e8:18:72:e8:30:45:86:1b:
22:e2:00:cf:4c:45:07:01:ca:47:5d:1a:5e:db:c6:
c3:a7:64:dc:af:c5:6e:f3:9d:f8:8c:90:b5:55:47:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:97:67:3D:72:73:5C:6E:15:1D:B7:4D:DE:E2:9D:87:A7:D8:BE
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/GGuXZz1yc1xuFR23Td7inYen2L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.140.0/22
45.142.92.0/22
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.42.0/23
89.34.78.0/23
89.38.132.0/23
89.249.51.0/24
91.132.184.0/22
92.43.84.0/22
93.114.8.0/21
93.115.12.0/23
93.180.192.0/20
93.180.224.0/20
94.176.112.0/20
95.215.36.0/22
103.204.124.0/22
119.13.192.0/19
121.91.80.0/21
150.129.92.0/22
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.229.250.0/24
188.119.116.0/22
203.109.60.0/22
203.166.148.0-203.166.155.255
209.20.176.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:e4:4f:4d:f6:74:ce:53:75:7a:62:4a:99:4a:64:43:d1:2f:
ca:f6:3d:7c:19:d5:64:27:ab:85:ca:51:fe:08:28:c1:4a:b8:
1b:2e:ad:43:ec:04:4f:4d:cd:bc:5d:e8:62:0b:84:2e:37:96:
fa:e1:87:50:10:60:63:8f:49:fc:ad:02:11:71:3c:0b:11:66:
b7:58:45:76:67:6c:58:a5:03:f7:18:74:11:52:51:a1:bd:aa:
b3:56:c6:c7:f9:38:e0:04:09:fb:38:71:c4:8b:34:65:f2:6d:
f4:8b:a7:d6:61:3e:84:14:8d:b7:f4:04:60:40:cf:c6:21:4e:
07:d5:06:e3:bc:30:bc:5d:ac:c5:a3:11:c6:fb:9a:be:23:b7:
ef:d6:53:6b:57:71:7f:f1:5e:ba:86:f1:5e:04:d6:48:5d:cc:
a8:a4:25:b2:91:8c:62:b1:d4:5b:e2:2a:70:0f:97:5f:8e:30:
d7:b3:a1:fa:f6:26:49:78:8a:12:62:6a:04:56:70:0e:cb:14:
89:b1:a1:bd:22:97:62:6a:2f:18:99:d2:d2:9c:81:f2:67:c4:
bc:ff:2e:d4:dd:1b:c3:2d:94:47:a6:16:78:df:09:65:52:ec:
0d:12:42:82:01:d4:89:54:7b:6b:f3:16:ad:ec:81:b1:68:15:
95:7f:54:4c
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAYoYHxVkw1+8XYrtRpv1c3+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjMwODIxMTI0MzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODZiOTc2NzNkNzI3MzVjNmUxNTFkYjc0ZGRlZTI5ZDg3YTdkOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse4o8naW+ZM2TNzme0XbiIU9Y6iW
wZKk2fb0G69+ThtjmdXNLjTtckTYZ8/TSzAvyEA1IxEvdJa1NAQ69/PuY7xQxdBH
kAXKDNLQqnP8RAb9YtW7M018PObZT05rINVgsjUnEK7KJaG+GTxIKSIUWTI5w0rb
0cThfOvdYpIMwEoppWE/rcPUKkG9M8/4GXj67kGdpad8dTcuO9Qi86hshKGgF71b
ELNCRq9fAHGapoex1Q6SJxLtz05jsbKOSThWM9OLUG8md0q55A8skGclxjb2xLsk
3Gx+6Bhy6DBFhhsi4gDPTEUHAcpHXRpe28bDp2Tcr8Vu8534jJC1VUfaRQIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFBhrl2c9cnNcbhUdt03e4p2Hp9i+MB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvR0d1WFp6MXljMXh1RlIyM1RkN2luWWVuMkw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAIr
8IwDBAItjlwDBABOiigwDAMEAE6KLwMEAE6KMAMEAE6KMgMEAlPlTAMEAlPlaAME
A1Qn4AMEAVkTKgMEAVkiTgMEAVkmhAMEAFn5MwMEAluEuAMEAlwrVAMEA11yCAME
AV1zDAMEBF20wAMEBF204AMEBF6wcAMEAl/XJAMEAmfMfAMEBXcNwAMEA3lbUAME
ApaBXAMEALkmZgMEALla8wMEArl9wAMEALmD3AMEALnl+gMEArx3dAMEAsttPDAM
AwQCy6aUAwQCy6aYAwQD0RSwMA0GCSqGSIb3DQEBCwUAA4IBAQCm5E9N9nTOU3V6
YkqZSmRD0S/K9j18GdVkJ6uFylH+CCjBSrgbLq1D7ARPTc28XehiC4QuN5b64YdQ
EGBjj0n8rQIRcTwLEWa3WEV2Z2xYpQP3GHQRUlGhvaqzVsbH+TjgBAn7OHHEizRl
8m30i6fWYT6EFI239ARgQM/GIU4H1QbjvDC8XazFoxHG+5q+I7fv1lNrV3F/8V66
hvFeBNZIXcyopCWykYxisdRb4ipwD5dfjjDXs6H69iZJeIoSYmoEVnAOyxSJsaG9
Ipdiai8YmdLSnIHyZ8S8/y7U3RvDLZRHphZ43wllUuwNEkKCAdSJVHtr8xat7IGx
aBWVf1RM
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:07 2025 by rpki-client