Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/Gqups1KNVUc4ws9ExVwx8y5Ygao.roa
File: Gqups1KNVUc4ws9ExVwx8y5Ygao.roa (raw, json)
Hash identifier: Hs6v2P28KItaSTDbjRMxijnj6+2W8ob5GucGO4K8F2E=
Subject key identifier: 1A:AB:A9:B3:52:8D:55:47:38:C2:CF:44:C5:5C:31:F3:2E:58:81:AA
Certificate issuer: /CN=6b954c9af26ec66a21bd85056c0427cfe5056525
Certificate serial: 018964753D52B03588FA7BF8A434A423B457
Authority key identifier: 6B:95:4C:9A:F2:6E:C6:6A:21:BD:85:05:6C:04:27:CF:E5:05:65:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5VMmvJuxmohvYUFbAQnz-UFZSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/Gqups1KNVUc4ws9ExVwx8y5Ygao.roa
Signing time: Mon 17 Jul 2023 15:25:52 +0000
ROA not before: Mon 17 Jul 2023 15:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 87.236.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:75:3d:52:b0:35:88:fa:7b:f8:a4:34:a4:23:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b954c9af26ec66a21bd85056c0427cfe5056525
Validity
Not Before: Jul 17 15:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aaba9b3528d554738c2cf44c55c31f32e5881aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:1e:82:c7:db:78:11:07:96:a9:fd:4b:f7:
c0:64:7d:ba:62:5f:0e:07:2d:2a:94:22:bc:5b:c7:
5d:4b:91:9a:ac:7f:7e:26:6f:c4:99:fa:68:4c:12:
86:f6:91:68:74:8d:ee:45:da:fe:17:99:2b:de:50:
30:fb:aa:18:30:d3:cc:d8:06:1e:16:5a:cd:1c:ba:
f3:47:a4:27:3b:53:42:1a:a5:b2:92:dd:29:e7:88:
76:11:8a:7f:f9:38:54:91:7e:87:d8:79:52:a0:a0:
3b:e1:93:64:fc:a7:05:de:1c:e4:a3:1a:fa:01:bc:
80:ae:2b:2e:68:fa:9a:08:7e:32:02:28:7e:73:cf:
53:32:9b:f1:45:06:23:a8:a8:88:8c:0a:33:85:56:
77:d6:95:0e:b8:43:d4:a8:54:46:1b:eb:c8:40:13:
6d:87:9e:68:fe:6a:c5:d2:53:fd:f0:06:f8:42:d9:
fb:a8:90:70:f8:c5:4d:73:d2:f8:d8:a2:ed:be:d2:
f7:0f:7f:ff:8c:cd:db:31:6b:61:cd:4d:d1:18:21:
08:0c:36:67:72:71:3e:df:84:8c:7b:59:42:db:28:
b4:5f:2f:9e:9f:30:da:56:10:ff:cf:7b:e8:54:5b:
cf:8b:f4:f4:60:dd:f4:9d:98:72:5d:e4:c6:1e:61:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:A9:B3:52:8D:55:47:38:C2:CF:44:C5:5C:31:F3:2E:58:81:AA
X509v3 Authority Key Identifier:
keyid:6B:95:4C:9A:F2:6E:C6:6A:21:BD:85:05:6C:04:27:CF:E5:05:65:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5VMmvJuxmohvYUFbAQnz-UFZSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/Gqups1KNVUc4ws9ExVwx8y5Ygao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/a5VMmvJuxmohvYUFbAQnz-UFZSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.150.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e1:3a:f3:05:b5:71:40:31:dd:f9:51:2e:c7:b4:c9:d7:c0:
d2:b2:f8:ec:05:12:ad:77:f6:74:70:7e:4b:6d:01:85:88:ad:
f9:43:90:95:8d:07:1e:d3:69:2a:86:e5:f6:03:e0:a4:24:5d:
38:a5:db:91:5c:eb:f3:07:74:3b:de:fe:1c:58:a6:b5:5f:be:
24:59:e9:00:a2:14:2d:d6:a0:37:cc:59:01:01:12:0e:7a:62:
17:3e:41:d2:24:4b:80:76:46:03:18:99:4b:1f:fc:30:15:24:
28:c1:84:c1:4f:17:3e:39:93:ce:55:88:e2:a6:50:a5:e6:0b:
ee:76:5b:78:99:ee:e6:95:1e:b1:50:70:3c:66:dc:a4:30:84:
a5:cd:59:89:ca:ea:71:09:fc:e2:ce:6d:45:55:f6:3f:3d:a5:
23:e8:e0:31:43:e1:9d:f0:65:e4:33:a8:fe:60:97:93:17:ae:
e3:96:0c:fd:f0:8f:87:0d:80:4b:fa:2f:34:ad:91:88:50:36:
24:fe:05:b8:2e:ba:0c:34:40:ca:87:c4:a8:b4:68:84:6c:58:
5f:10:2d:25:84:53:a1:92:27:eb:9e:84:88:8e:69:a6:0c:15:
eb:09:e8:c3:f4:44:b2:88:55:f7:e9:fc:45:95:f4:81:86:d6:
0c:55:47:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkdT1SsDWI+nv4pDSkI7RXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTU0YzlhZjI2ZWM2NmEyMWJkODUwNTZjMDQyN2NmZTUw
NTY1MjUwHhcNMjMwNzE3MTUyNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWFiYTliMzUyOGQ1NTQ3MzhjMmNmNDRjNTVjMzFmMzJlNTg4MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho4egsfbeBEHlqn9S/fAZH26Yl8O
By0qlCK8W8ddS5GarH9+Jm/EmfpoTBKG9pFodI3uRdr+F5kr3lAw+6oYMNPM2AYe
FlrNHLrzR6QnO1NCGqWykt0p54h2EYp/+ThUkX6H2HlSoKA74ZNk/KcF3hzkoxr6
AbyArisuaPqaCH4yAih+c89TMpvxRQYjqKiIjAozhVZ31pUOuEPUqFRGG+vIQBNt
h55o/mrF0lP98Ab4Qtn7qJBw+MVNc9L42KLtvtL3D3//jM3bMWthzU3RGCEIDDZn
cnE+34SMe1lC2yi0Xy+enzDaVhD/z3voVFvPi/T0YN30nZhyXeTGHmGfewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqrqbNSjVVHOMLPRMVcMfMuWIGqMB8GA1UdIwQY
MBaAFGuVTJrybsZqIb2FBWwEJ8/lBWUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVWTW12SnV4bW9odllVRmJBUW56LVVGWlNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xNWFiNjgtNmRlMy00OWNjLWE5OWQt
NDJhODZkNTQxODcwLzEvR3F1cHMxS05WVWM0d3M5RXhWd3g4eTVZZ2FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xNWFiNjgtNmRlMy00OWNjLWE5OWQtNDJhODZkNTQxODcw
LzEvYTVWTW12SnV4bW9odllVRmJBUW56LVVGWlNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+yWMA0G
CSqGSIb3DQEBCwUAA4IBAQBp4TrzBbVxQDHd+VEux7TJ18DSsvjsBRKtd/Z0cH5L
bQGFiK35Q5CVjQce02kqhuX2A+CkJF04pduRXOvzB3Q73v4cWKa1X74kWekAohQt
1qA3zFkBARIOemIXPkHSJEuAdkYDGJlLH/wwFSQowYTBTxc+OZPOVYjiplCl5gvu
dlt4me7mlR6xUHA8ZtykMISlzVmJyupxCfzizm1FVfY/PaUj6OAxQ+Gd8GXkM6j+
YJeTF67jlgz98I+HDYBL+i80rZGIUDYk/gW4LroMNEDKh8SotGiEbFhfEC0lhFOh
kifrnoSIjmmmDBXrCejD9ESyiFX36fxFlfSBhtYMVUfe
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:42 2025 by rpki-client