Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa
File: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (raw, json)
Hash identifier: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=
Subject key identifier: 1A:E2:9E:B6:BE:18:E9:9C:EF:C8:D6:C1:85:E7:40:E2:6E:7F:A5:66
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019422FBED472A078FD073BB50A4C499ADFA
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.184.172.0/23 maxlen: 23
185.184.174.0/23 maxlen: 23
185.191.252.0/23 maxlen: 23
185.191.254.0/23 maxlen: 23
185.236.244.0/24 maxlen: 24
185.236.245.0/24 maxlen: 24
185.236.246.0/24 maxlen: 24
185.236.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ed:47:2a:07:8f:d0:73:bb:50:a4:c4:99:ad:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ae29eb6be18e99cefc8d6c185e740e26e7fa566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:3b:e5:73:70:6a:37:6f:d3:15:7b:70:c6:
ce:7b:41:19:b2:39:3e:7f:0c:c9:7d:a3:88:ac:a8:
e5:d8:6b:3c:7b:59:6a:69:92:aa:1a:52:2c:9d:76:
ea:9e:b3:d6:a8:c4:b4:7c:c4:9d:71:88:4f:6b:0a:
81:a0:72:8b:96:cf:fb:95:c3:34:65:fe:69:2e:40:
2f:26:74:fa:ec:fc:7f:87:90:7f:c4:48:eb:23:2b:
22:1e:01:95:a9:22:1e:b8:8b:8e:5e:21:b4:60:5a:
62:bc:24:3e:0f:83:f8:cd:33:47:e0:f8:ae:4b:12:
41:0b:61:d5:97:d3:36:85:1d:dd:ba:4a:fb:14:df:
c2:ac:2f:16:ec:68:6b:5e:e4:b7:77:f3:77:db:c2:
b1:6f:8b:28:6c:d6:85:3e:65:38:1c:4a:c4:8f:c2:
7e:aa:cb:27:83:a4:bd:08:3b:58:e3:be:2f:4c:14:
d5:81:1e:e9:ca:0e:d7:1c:b7:ef:fa:92:be:b3:a9:
a9:ba:f4:b4:97:c9:37:f3:cb:ca:9d:87:3e:2c:ba:
0e:c6:9e:e9:c4:a6:b8:32:bc:42:d9:cc:80:26:2b:
4a:ce:53:0f:6a:f0:de:a5:0a:de:97:dc:c1:6f:ea:
6a:e6:8d:09:f1:e9:4c:62:63:91:46:8e:ee:67:cb:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:9E:B6:BE:18:E9:9C:EF:C8:D6:C1:85:E7:40:E2:6E:7F:A5:66
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.172.0/22
185.191.252.0/22
185.236.244.0/22
Signature Algorithm: sha256WithRSAEncryption
af:07:a9:8a:67:eb:e6:90:5a:95:de:1c:47:ec:04:51:4e:a6:
e1:d5:53:2a:ca:ba:28:91:ed:dd:5a:81:fc:a4:47:c3:5e:fc:
dd:8f:56:09:9a:76:fc:c9:2f:88:7c:19:df:f1:55:cc:aa:15:
aa:16:62:f3:b2:4d:d6:7a:62:6a:43:a9:d5:0d:9d:4d:fe:67:
a9:5f:b4:e4:22:27:1e:65:95:2f:5e:9f:7d:a3:32:69:39:06:
9e:2a:c1:4c:4d:a4:e1:db:66:d1:e5:07:60:ab:56:b3:db:cd:
cd:d2:d6:8a:7a:79:0f:41:a3:2a:ab:7f:72:ad:47:46:69:d7:
d0:23:2b:01:28:85:8a:cd:54:4d:16:b3:9f:8a:e8:24:75:b4:
a3:36:ec:ab:66:44:ef:cd:3a:b2:f7:b1:b2:76:87:ad:d5:53:
ae:37:2b:b2:26:72:08:88:cd:ab:81:d1:03:6c:fc:89:ac:5f:
8a:d9:88:1d:94:b2:21:b4:61:c0:92:40:f3:5f:79:05:c7:9a:
a2:04:41:35:db:a8:7a:f2:a7:d6:b0:c7:0b:1e:99:4f:8d:1e:
4b:eb:c6:6c:ca:92:e8:b2:60:f6:47:71:57:5a:d0:7a:4f:40:
36:8f:a6:c4:f3:c7:5a:49:b8:ed:4d:99:f8:26:7c:98:1c:2d:
74:5b:5b:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi++1HKgeP0HO7UKTEma36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw
ZWQwZjAwHhcNMjUwMTAxMTc0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWUyOWViNmJlMThlOTljZWZjOGQ2YzE4NWU3NDBlMjZlN2ZhNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyQ75XNwajdv0xV7cMbOe0EZsjk+
fwzJfaOIrKjl2Gs8e1lqaZKqGlIsnXbqnrPWqMS0fMSdcYhPawqBoHKLls/7lcM0
Zf5pLkAvJnT67Px/h5B/xEjrIysiHgGVqSIeuIuOXiG0YFpivCQ+D4P4zTNH4Piu
SxJBC2HVl9M2hR3dukr7FN/CrC8W7GhrXuS3d/N328Kxb4sobNaFPmU4HErEj8J+
qssng6S9CDtY474vTBTVgR7pyg7XHLfv+pK+s6mpuvS0l8k388vKnYc+LLoOxp7p
xKa4MrxC2cyAJitKzlMPavDepQrel9zBb+pq5o0J8elMYmORRo7uZ8v/DwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBrinra+GOmc78jWwYXnQOJuf6VmMB8GA1UdIwQY
MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt
ODA1NWVjMTBmZjBhLzEvR3VLZXRyNFk2Wnp2eU5iQmhlZEE0bTVfcFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh
LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCubisAwQC
ub/8AwQCuez0MA0GCSqGSIb3DQEBCwUAA4IBAQCvB6mKZ+vmkFqV3hxH7ARRTqbh
1VMqyrooke3dWoH8pEfDXvzdj1YJmnb8yS+IfBnf8VXMqhWqFmLzsk3WemJqQ6nV
DZ1N/mepX7TkIiceZZUvXp99ozJpOQaeKsFMTaTh22bR5Qdgq1az283N0taKenkP
QaMqq39yrUdGadfQIysBKIWKzVRNFrOfiugkdbSjNuyrZkTvzTqy97Gydoet1VOu
NyuyJnIIiM2rgdEDbPyJrF+K2YgdlLIhtGHAkkDzX3kFx5qiBEE126h68qfWsMcL
HplPjR5L68ZsypLosmD2R3FXWtB6T0A2j6bE88daSbjtTZn4JnyYHC10W1s9
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:00:00 2025 by rpki-client