Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gSKjb6ZsWX6oJvNUFO662M2bj1s.roa
File: gSKjb6ZsWX6oJvNUFO662M2bj1s.roa (raw, json)
Hash identifier: xaYktXp81KOsM8JA136hr8PHKB4dkzYA9zcI6gRRYto=
Subject key identifier: 81:22:A3:6F:A6:6C:59:7E:A8:26:F3:54:14:EE:BA:D8:CD:9B:8F:5B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222062BC821FA5DA6A129D842C6A5324
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gSKjb6ZsWX6oJvNUFO662M2bj1s.roa
Signing time: Wed 01 Jan 2025 13:48:55 +0000
ROA not before: Wed 01 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400039
IP address blocks: 185.214.109.0/24 maxlen: 24
185.234.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:62:bc:82:1f:a5:da:6a:12:9d:84:2c:6a:53:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8122a36fa66c597ea826f35414eebad8cd9b8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7e:19:6f:91:db:11:0b:1b:a5:0b:df:fe:c6:
4a:12:e4:34:33:f0:bb:bf:c0:a8:40:fb:94:cb:5e:
1f:6c:2f:a5:de:53:88:2f:44:09:1a:cb:b8:07:65:
8c:59:81:db:72:74:97:33:1e:80:4d:4e:3b:be:a4:
ad:c3:9e:6b:d8:db:af:99:8f:8f:b2:d0:e0:12:dc:
cc:a0:6c:54:df:d3:88:4c:dc:35:7d:d3:7f:db:ea:
5a:cc:2b:1d:b1:10:cf:48:60:0a:0c:27:96:03:eb:
b3:fa:47:3b:c4:ee:36:cf:59:a6:11:6e:9f:65:42:
fe:b5:76:62:14:69:85:bd:f9:5d:e3:cf:53:3d:0b:
e5:e5:93:07:22:f6:14:50:0f:d1:77:33:12:e6:62:
3d:10:da:d9:32:28:e6:a7:7c:1b:4b:87:8b:73:fc:
0d:0d:db:18:70:04:38:21:dd:44:e9:2f:a2:19:80:
bd:c6:8a:cc:7e:94:fa:5c:de:a3:c6:4e:3f:d9:a5:
26:a5:f4:3d:b6:e8:22:75:9d:ea:e9:a4:00:4a:1b:
dc:5e:29:b6:42:f4:f5:4a:97:a8:f1:c1:6f:b3:f3:
66:97:13:32:31:24:af:09:29:f6:1c:47:0d:a1:2d:
2e:4b:1d:0a:a6:ae:72:da:69:3f:91:77:ee:26:95:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:A3:6F:A6:6C:59:7E:A8:26:F3:54:14:EE:BA:D8:CD:9B:8F:5B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gSKjb6ZsWX6oJvNUFO662M2bj1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.109.0/24
185.234.23.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:9e:7c:7a:af:ac:43:b1:e2:34:90:d9:72:bb:6f:c0:fb:3a:
84:25:74:b1:6e:5f:df:82:62:74:ac:03:29:01:8d:9a:a0:26:
e5:0e:7c:2a:8a:70:2c:c0:4c:50:36:47:c4:5e:80:94:67:74:
84:1e:9d:ae:48:e1:e4:16:35:01:eb:0b:89:3e:6d:4f:b2:3b:
d2:b2:43:b1:47:59:6e:24:20:2a:71:81:e9:f9:a2:2a:00:cb:
d3:8e:a4:d4:ac:41:00:de:9f:2e:2a:df:cf:94:63:76:0c:60:
9a:0a:44:18:45:b6:aa:a6:a6:9b:70:51:b0:9f:14:6d:b8:f1:
ac:f7:a6:0e:5a:0b:84:68:fc:70:fc:f6:06:2f:d2:7a:85:28:
b9:55:5e:44:24:bd:53:a7:cb:b2:9c:0d:fa:66:ad:55:f3:20:
f3:48:56:fb:eb:fd:6e:0a:41:67:6d:3f:b7:f7:ea:b4:ba:ae:
0a:f4:b5:a2:57:37:53:21:52:34:8e:5a:3b:28:61:72:30:c0:
57:f8:76:08:1c:09:6f:bb:5b:17:d7:f3:ae:04:21:6c:47:4d:
8d:44:78:5d:11:8d:43:36:6d:eb:57:59:f0:4f:4d:80:ee:43:
3f:41:4f:f0:aa:ad:0c:76:75:13:29:10:85:56:2f:74:2b:98:
71:59:25:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIGK8gh+l2moSnYQsalMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTIyYTM2ZmE2NmM1OTdlYTgyNmYzNTQxNGVlYmFkOGNkOWI4ZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+H4Zb5HbEQsbpQvf/sZKEuQ0M/C7
v8CoQPuUy14fbC+l3lOIL0QJGsu4B2WMWYHbcnSXMx6ATU47vqStw55r2NuvmY+P
stDgEtzMoGxU39OITNw1fdN/2+pazCsdsRDPSGAKDCeWA+uz+kc7xO42z1mmEW6f
ZUL+tXZiFGmFvfld489TPQvl5ZMHIvYUUA/RdzMS5mI9ENrZMijmp3wbS4eLc/wN
DdsYcAQ4Id1E6S+iGYC9xorMfpT6XN6jxk4/2aUmpfQ9tugidZ3q6aQAShvcXim2
QvT1Speo8cFvs/NmlxMyMSSvCSn2HEcNoS0uSx0Kpq5y2mk/kXfuJpXnvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIEio2+mbFl+qCbzVBTuutjNm49bMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZ1NLamI2WnNXWDZvSnZOVUZPNjYyTTJiajFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudZtAwQA
ueoXMA0GCSqGSIb3DQEBCwUAA4IBAQC5nnx6r6xDseI0kNlyu2/A+zqEJXSxbl/f
gmJ0rAMpAY2aoCblDnwqinAswExQNkfEXoCUZ3SEHp2uSOHkFjUB6wuJPm1PsjvS
skOxR1luJCAqcYHp+aIqAMvTjqTUrEEA3p8uKt/PlGN2DGCaCkQYRbaqpqabcFGw
nxRtuPGs96YOWguEaPxw/PYGL9J6hSi5VV5EJL1Tp8uynA36Zq1V8yDzSFb76/1u
CkFnbT+39+q0uq4K9LWiVzdTIVI0jlo7KGFyMMBX+HYIHAlvu1sX1/OuBCFsR02N
RHhdEY1DNm3rV1nwT02A7kM/QU/wqq0MdnUTKRCFVi90K5hxWSVD
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:57 2025 by rpki-client