Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gVIKUKh5FTPvl7YcTRH8-i5f90c.roa
File: gVIKUKh5FTPvl7YcTRH8-i5f90c.roa (raw, json)
Hash identifier: M0Uf39wK2ZPJ2yDjcwegAqCEYqDiJQxDn2t0akKG0Bs=
Subject key identifier: 81:52:0A:50:A8:79:15:33:EF:97:B6:1C:4D:11:FC:FA:2E:5F:F7:47
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019524D12B6C208EC8A84CCC06DBCFCA8337
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gVIKUKh5FTPvl7YcTRH8-i5f90c.roa
Signing time: Thu 20 Feb 2025 19:24:02 +0000
ROA not before: Thu 20 Feb 2025 19:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57758
IP address blocks: 185.142.141.0/24 maxlen: 32
194.145.143.0/24 maxlen: 32
2a06:7a04::/43 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:d1:2b:6c:20:8e:c8:a8:4c:cc:06:db:cf:ca:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 20 19:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81520a50a8791533ef97b61c4d11fcfa2e5ff747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:a5:c7:a6:6c:ac:a9:fc:20:87:3c:76:53:
33:3f:5c:c2:d4:0d:f2:1a:21:1d:58:a0:ef:b1:0c:
da:a8:48:7a:a1:94:62:90:b4:83:67:a8:31:16:b3:
45:bf:60:a4:40:29:71:31:4b:14:e6:d1:5a:07:3d:
4a:87:8b:23:bd:d5:36:65:53:2c:fc:ca:16:21:90:
2e:e5:9a:49:3c:43:8d:35:89:7e:76:91:94:1e:29:
4e:b4:8f:f7:50:cc:42:1d:35:53:c1:a2:c1:1a:99:
3f:87:cd:8d:c6:b1:2c:53:2b:47:90:46:aa:9c:aa:
4e:07:32:a0:5c:71:51:48:a0:5e:cc:53:3c:e0:64:
51:94:9f:9c:00:73:ae:d8:d3:27:80:bf:b1:e6:f0:
e4:2e:b7:28:fe:83:37:c4:bd:f5:0b:a4:43:bc:73:
b1:f7:87:29:1b:00:ce:33:d1:17:8e:30:c3:ac:5c:
93:c1:34:44:17:48:ff:a5:90:d2:85:b1:a0:a6:2f:
46:e1:f5:3a:e5:a1:75:87:06:b4:5a:e3:23:92:79:
7d:4d:5e:55:e7:c7:3c:03:00:a6:b6:54:a6:b0:fe:
1c:c2:a9:b4:d7:d2:ad:4f:58:9e:c7:2f:ee:ac:b5:
59:4a:73:de:50:bf:b7:56:ad:98:6d:81:da:75:cb:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:52:0A:50:A8:79:15:33:EF:97:B6:1C:4D:11:FC:FA:2E:5F:F7:47
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gVIKUKh5FTPvl7YcTRH8-i5f90c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.141.0/24
194.145.143.0/24
IPv6:
2a06:7a04::/43
Signature Algorithm: sha256WithRSAEncryption
a2:7c:f8:2b:24:94:68:e2:f3:56:bf:e7:1c:a1:9a:6f:8c:14:
53:c7:4e:81:10:92:83:b9:d3:08:e1:36:8b:8e:d6:a4:9e:11:
e7:55:a2:12:1c:a5:be:5d:cc:3f:31:2b:88:0f:ae:bb:9b:9e:
db:75:13:3e:74:67:65:83:74:c1:06:6b:90:c7:16:c3:bb:38:
23:76:c3:0a:44:c3:b4:40:fd:cb:57:fb:ad:a7:ae:6b:b1:96:
d0:dc:00:8d:39:e0:52:1a:6d:38:83:1e:af:4d:a1:18:17:a0:
c8:3d:b6:4b:16:d9:d6:67:21:01:c7:b3:41:41:d2:59:d6:7e:
40:38:bb:00:5a:99:1f:af:86:b5:11:d2:15:77:df:59:1e:b1:
22:54:98:03:7f:f4:80:49:60:7a:1b:06:40:9a:64:66:ee:50:
16:0a:b9:f3:2e:95:ca:07:bf:19:80:99:e1:2e:fa:71:3e:8d:
35:8a:4c:e9:2b:15:29:61:33:e0:d5:8e:7c:4d:34:54:ba:17:
43:61:cd:d9:3a:8d:1f:76:4f:0b:e0:81:cf:fa:8b:20:06:fb:
a6:75:6f:37:a9:4f:5d:4f:31:80:bd:1a:a9:96:2c:c2:d2:43:
53:d7:9a:78:26:c6:a8:99:98:7f:95:36:4e:24:d3:45:25:a2:
c7:7d:8b:61
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZUk0StsII7IqEzMBtvPyoM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMjIwMTkyNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTUyMGE1MGE4NzkxNTMzZWY5N2I2MWM0ZDExZmNmYTJlNWZmNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu26lx6ZsrKn8IIc8dlMzP1zC1A3y
GiEdWKDvsQzaqEh6oZRikLSDZ6gxFrNFv2CkQClxMUsU5tFaBz1Kh4sjvdU2ZVMs
/MoWIZAu5ZpJPEONNYl+dpGUHilOtI/3UMxCHTVTwaLBGpk/h82NxrEsUytHkEaq
nKpOBzKgXHFRSKBezFM84GRRlJ+cAHOu2NMngL+x5vDkLrco/oM3xL31C6RDvHOx
94cpGwDOM9EXjjDDrFyTwTREF0j/pZDShbGgpi9G4fU65aF1hwa0WuMjknl9TV5V
58c8AwCmtlSmsP4cwqm019KtT1iexy/urLVZSnPeUL+3Vq2YbYHadcuaQQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIFSClCoeRUz75e2HE0R/PouX/dHMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvZ1ZJS1VLaDVGVFB2bDdZY1RSSDgtaTVmOTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuY6NAwQA
wpGPMA8EAgACMAkDBwUqBnoEAAAwDQYJKoZIhvcNAQELBQADggEBAKJ8+CsklGji
81a/5xyhmm+MFFPHToEQkoO50wjhNouO1qSeEedVohIcpb5dzD8xK4gPrrubntt1
Ez50Z2WDdMEGa5DHFsO7OCN2wwpEw7RA/ctX+62nrmuxltDcAI054FIabTiDHq9N
oRgXoMg9tksW2dZnIQHHs0FB0lnWfkA4uwBamR+vhrUR0hV331kesSJUmAN/9IBJ
YHobBkCaZGbuUBYKufMulcoHvxmAmeEu+nE+jTWKTOkrFSlhM+DVjnxNNFS6F0Nh
zdk6jR92Twvggc/6iyAG+6Z1bzepT11PMYC9GqmWLMLSQ1PXmngmxqiZmH+VNk4k
00Ulosd9i2E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:12 2025 by rpki-client