Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/goHkMT0UZjAn0-oG9vnwxIPy3B8.roa
File: goHkMT0UZjAn0-oG9vnwxIPy3B8.roa (raw, json)
Hash identifier: oOZSw2jleYYt4PyokB/Y56hj/CGhsBwU1Pm5JWkidxc=
Subject key identifier: 82:81:E4:31:3D:14:66:30:27:D3:EA:06:F6:F9:F0:C4:83:F2:DC:1F
Certificate issuer: /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial: 019423D732B2161410E40B0C3B7A173B5D17
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/goHkMT0UZjAn0-oG9vnwxIPy3B8.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20571
IP address blocks: 217.169.64.0/20 maxlen: 24
2a0a:b7c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:32:b2:16:14:10:e4:0b:0c:3b:7a:17:3b:5d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8281e4313d14663027d3ea06f6f9f0c483f2dc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:f7:eb:e3:ce:b7:26:9a:2a:6a:c4:7f:1c:
b2:ad:f6:84:45:a4:61:fb:10:cd:8f:f9:d7:ab:a3:
d5:85:3b:bb:f7:e6:07:6d:0b:33:37:fb:ae:36:c5:
69:1c:15:04:4b:87:69:ab:c2:84:a0:02:7f:51:46:
65:54:ab:68:72:03:7b:d6:76:fc:5b:97:ba:2f:53:
e2:69:7b:2e:7d:c2:5e:5c:d5:13:90:6b:b6:42:e2:
48:95:ac:88:8c:4c:a2:af:68:27:68:44:2f:ec:48:
96:d9:0e:14:87:6c:b9:34:b2:06:7d:94:37:66:eb:
e2:5f:42:fb:5c:71:a3:32:0c:26:39:9f:54:d3:7a:
da:1c:e3:d9:0b:d5:4e:51:f5:e0:18:3e:d6:7c:b0:
0e:5e:80:dc:6f:23:5f:df:11:25:70:98:41:fc:c5:
9c:70:d5:a1:96:27:fd:cc:70:8e:4d:df:d5:30:32:
c7:02:70:02:95:33:2f:c1:03:d3:dc:c2:1f:9c:ef:
18:26:70:24:13:5b:3d:07:7b:a5:76:93:1b:2e:68:
d8:e9:19:52:09:7c:19:c8:a8:f2:18:19:46:70:ce:
fa:be:8a:28:5c:fc:96:ea:06:f7:97:8b:6c:f9:2b:
0f:e0:99:25:88:7e:68:cd:bd:a7:ed:0e:0b:a3:4a:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:81:E4:31:3D:14:66:30:27:D3:EA:06:F6:F9:F0:C4:83:F2:DC:1F
X509v3 Authority Key Identifier:
keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/goHkMT0UZjAn0-oG9vnwxIPy3B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.64.0/20
IPv6:
2a0a:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:6a:58:bb:73:e0:26:33:21:c4:17:51:74:7a:8c:0d:80:94:
2b:55:d9:ff:cf:29:37:2f:a7:4e:ba:db:88:bc:f8:bb:02:7f:
d9:67:d7:25:fd:69:a3:3a:ac:62:c0:8d:cd:96:43:f8:76:ea:
41:69:f7:bb:db:e5:08:e9:f4:2c:18:5e:9c:36:a9:3e:90:34:
d9:4e:e0:f6:4d:0a:87:13:fb:df:ae:30:34:6c:43:21:7f:d1:
9e:e6:e8:33:78:f4:d2:90:e6:eb:1e:b1:d8:f2:58:3d:76:7e:
88:8d:d7:c0:43:4a:bb:6a:cc:56:01:3a:61:91:28:3a:e1:d1:
c6:02:1a:ef:7a:4a:a0:08:28:00:8d:55:a7:a1:0b:79:e2:76:
d7:3e:c5:bc:a7:2f:9f:7a:ee:e2:b2:ee:f4:31:4c:4b:51:98:
1c:f7:c4:51:b9:6e:97:19:66:39:f9:ff:0e:22:d2:9b:e1:43:
7a:f1:f5:7e:78:e4:03:80:32:e1:80:1c:5c:69:48:8c:72:d8:
f4:f5:64:9b:56:10:94:a6:26:46:99:eb:b6:99:96:ac:51:19:
c3:ff:95:88:c8:cb:9d:28:8b:34:68:47:dc:f9:51:d8:89:a2:
c1:1d:8d:85:ac:7c:9d:34:5d:eb:6c:a4:e9:66:1c:ab:de:46:
ad:19:5e:07
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQj1zKyFhQQ5AsMO3oXO10XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmJkYmIyMGMyZDk3MDczYzBkZThiN2NhYTc1ZWMxZWVi
MTkxYjgwHhcNMjUwMTAxMjE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjgxZTQzMTNkMTQ2NjMwMjdkM2VhMDZmNmY5ZjBjNDgzZjJkYzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUf36+POtyaaKmrEfxyyrfaERaRh
+xDNj/nXq6PVhTu79+YHbQszN/uuNsVpHBUES4dpq8KEoAJ/UUZlVKtocgN71nb8
W5e6L1PiaXsufcJeXNUTkGu2QuJIlayIjEyir2gnaEQv7EiW2Q4Uh2y5NLIGfZQ3
ZuviX0L7XHGjMgwmOZ9U03raHOPZC9VOUfXgGD7WfLAOXoDcbyNf3xElcJhB/MWc
cNWhlif9zHCOTd/VMDLHAnAClTMvwQPT3MIfnO8YJnAkE1s9B3uldpMbLmjY6RlS
CXwZyKjyGBlGcM76voooXPyW6gb3l4ts+SsP4JkliH5ozb2n7Q4Lo0rk+QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIKB5DE9FGYwJ9PqBvb58MSD8twfMB8GA1UdIwQY
MBaAFDP727IMLZcHPA3ot8qnXsHusZG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV92YnNnd3Rsd2M4RGVpM3lxZGV3ZTZ4a2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zYTM2MmQtNDE5OC00YjA4LWJiMGEt
ZGJlNDFmYzgzOTllLzEvZ29Ia01UMFVaakFuMC1vRzl2bnd4SVB5M0I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zYTM2MmQtNDE5OC00YjA4LWJiMGEtZGJlNDFmYzgzOTll
LzEvTV92YnNnd3Rsd2M4RGVpM3lxZGV3ZTZ4a2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2alAMA0E
AgACMAcDBQAqCrfAMA0GCSqGSIb3DQEBCwUAA4IBAQBnali7c+AmMyHEF1F0eowN
gJQrVdn/zyk3L6dOutuIvPi7An/ZZ9cl/WmjOqxiwI3NlkP4dupBafe72+UI6fQs
GF6cNqk+kDTZTuD2TQqHE/vfrjA0bEMhf9Ge5ugzePTSkObrHrHY8lg9dn6IjdfA
Q0q7asxWATphkSg64dHGAhrvekqgCCgAjVWnoQt54nbXPsW8py+feu7isu70MUxL
UZgc98RRuW6XGWY5+f8OItKb4UN68fV+eOQDgDLhgBxcaUiMctj09WSbVhCUpiZG
meu2mZasURnD/5WIyMudKIs0aEfc+VHYiaLBHY2FrHydNF3rbKTpZhyr3katGV4H
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:10 2025 by rpki-client