Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa
File: GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa (raw, json)
Hash identifier: AENchPK3bfQJEdljclR0ie9L+vwumxV2eeigY07rGKw=
Subject key identifier: 18:9A:BA:8E:5B:B4:E1:19:BD:C1:AE:C2:82:9F:1C:4D:C3:34:9F:10
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 01956A650520E756F27D03F37C88A7874828
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa
Signing time: Thu 06 Mar 2025 07:39:19 +0000
ROA not before: Thu 06 Mar 2025 07:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.117.60.0/24 maxlen: 24
185.117.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:65:05:20:e7:56:f2:7d:03:f3:7c:88:a7:87:48:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Mar 6 07:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=189aba8e5bb4e119bdc1aec2829f1c4dc3349f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:7b:22:eb:c2:67:30:da:84:46:a6:bc:29:
51:f2:b8:11:be:fb:e9:c5:4d:03:b4:ff:cb:01:c1:
90:20:8f:5f:1f:74:4c:53:c9:a9:5e:a3:d6:01:f9:
54:fb:62:09:83:c6:65:0a:ea:13:9d:16:d5:77:55:
6e:a0:07:bb:e3:03:82:9c:56:3d:34:36:d9:61:29:
0f:44:9e:27:81:26:2f:36:27:d3:fe:7e:86:bb:57:
35:46:ad:e2:f3:80:dc:e8:4e:40:0c:67:d4:85:d9:
ad:b4:f9:f1:0c:95:06:25:3b:93:e4:82:d8:2c:ed:
4f:7a:b2:82:89:ec:11:76:45:66:db:a8:b3:98:e8:
ed:4d:07:35:ea:da:56:85:b2:9f:98:0e:19:32:bc:
20:bf:21:e3:d3:1c:8e:57:d7:e4:bd:f7:dc:42:39:
fb:26:d8:64:ba:64:47:a2:99:6f:92:c0:7d:7e:dc:
15:28:2f:ef:b5:3a:b3:21:83:17:55:71:8f:fd:a1:
95:51:13:e7:fc:9a:38:12:f8:ec:1e:1a:b6:7f:fc:
61:39:82:a7:cf:2e:e6:fc:10:83:ff:46:84:76:2c:
99:85:ed:a1:8a:c8:00:e1:4b:93:f3:d9:01:eb:a4:
94:28:70:00:55:fa:9d:18:0a:0f:7a:74:17:f0:1b:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:BA:8E:5B:B4:E1:19:BD:C1:AE:C2:82:9F:1C:4D:C3:34:9F:10
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.60.0/24
185.117.62.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a1:7f:ba:81:3a:4c:50:55:7b:e9:b0:f8:00:6d:af:48:95:
35:8d:8a:39:fd:f9:20:0c:ef:0f:49:d4:59:5d:0b:b5:d4:5b:
77:27:b5:15:4f:cc:d0:00:fb:8d:34:07:e9:3e:40:07:92:e7:
89:32:94:e1:2a:95:28:d4:4c:ae:e0:86:4c:37:41:50:ac:46:
6a:67:53:aa:5e:d9:ed:27:07:a9:4f:36:b7:b9:c7:79:91:6c:
4d:8f:80:8c:da:ed:e7:82:e0:00:a4:98:40:84:7b:0d:0e:5b:
f0:d0:e3:56:3b:30:72:ed:2b:e8:a0:e2:92:fa:36:1d:09:62:
01:d6:ae:c9:d0:39:93:98:2a:09:17:13:9f:d9:7e:25:17:e6:
f6:68:1b:50:aa:37:a3:e2:71:12:d9:bd:12:f3:2d:b8:d9:9b:
34:d0:f6:00:a7:f0:c0:a8:cb:b4:b8:52:9c:ad:c6:fe:94:31:
a5:32:00:79:93:4c:f4:fb:e7:57:d4:fa:fa:e7:78:cb:4d:59:
c9:bf:5e:c8:50:16:93:f3:0f:9e:66:9e:9a:ff:95:1d:97:cb:
c9:4d:80:95:05:bf:cd:78:7c:85:04:06:e5:96:cc:7e:47:9d:
86:b3:43:5e:51:5f:a7:48:f1:03:27:72:b9:d3:59:c8:17:70:
4d:b7:bd:0d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVqZQUg51byfQPzfIinh0goMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOGZlMjQ2NTg0MzAzMWI3NzhiYjhkOGI3YmQzNWEwOTRm
Y2NmNDgwHhcNMjUwMzA2MDczOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODlhYmE4ZTViYjRlMTE5YmRjMWFlYzI4MjlmMWM0ZGMzMzQ5ZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFJ7IuvCZzDahEamvClR8rgRvvvp
xU0DtP/LAcGQII9fH3RMU8mpXqPWAflU+2IJg8ZlCuoTnRbVd1VuoAe74wOCnFY9
NDbZYSkPRJ4ngSYvNifT/n6Gu1c1Rq3i84Dc6E5ADGfUhdmttPnxDJUGJTuT5ILY
LO1PerKCiewRdkVm26izmOjtTQc16tpWhbKfmA4ZMrwgvyHj0xyOV9fkvffcQjn7
JthkumRHoplvksB9ftwVKC/vtTqzIYMXVXGP/aGVURPn/Jo4EvjsHhq2f/xhOYKn
zy7m/BCD/0aEdiyZhe2hisgA4UuT89kB66SUKHAAVfqdGAoPenQX8Bv0zwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBiauo5btOEZvcGuwoKfHE3DNJ8QMB8GA1UdIwQY
MBaAFDuP4kZYQwMbd4u42Le9NaCU/M9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2Mt
N2MzNTAwNmUwN2ExLzEvR0pxNmpsdTA0Um05d2E3Q2dwOGNUY00wbnhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2MtN2MzNTAwNmUwN2Ex
LzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXU8AwQA
uXU+MA0GCSqGSIb3DQEBCwUAA4IBAQAZoX+6gTpMUFV76bD4AG2vSJU1jYo5/fkg
DO8PSdRZXQu11Ft3J7UVT8zQAPuNNAfpPkAHkueJMpThKpUo1Eyu4IZMN0FQrEZq
Z1OqXtntJwepTza3ucd5kWxNj4CM2u3nguAApJhAhHsNDlvw0ONWOzBy7SvooOKS
+jYdCWIB1q7J0DmTmCoJFxOf2X4lF+b2aBtQqjej4nES2b0S8y242Zs00PYAp/DA
qMu0uFKcrcb+lDGlMgB5k0z0++dX1Pr653jLTVnJv17IUBaT8w+eZp6a/5Udl8vJ
TYCVBb/NeHyFBAbllsx+R52Gs0NeUV+nSPEDJ3K501nIF3BNt70N
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:45 2025 by rpki-client