Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GnCgbGwZihZpGIVPxCiDb_TMokg.roa
File: GnCgbGwZihZpGIVPxCiDb_TMokg.roa (raw, json)
Hash identifier: gRm9xW8Dx1zKuERTWmbSYYCZ6i+lBsw6BX/V0Jw25/w=
Subject key identifier: 1A:70:A0:6C:6C:19:8A:16:69:18:85:4F:C4:28:83:6F:F4:CC:A2:48
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0731CC8A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GnCgbGwZihZpGIVPxCiDb_TMokg.roa
Signing time: Sat 01 Jan 2022 14:08:19 +0000
ROA not before: Sat 01 Jan 2022 14:08:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.147.46.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120704138 (0x731cc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 1 14:08:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a70a06c6c198a166918854fc428836ff4cca248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:0a:ae:5f:cc:95:ec:20:04:0d:bd:c4:82:
77:3c:bb:b4:a0:5d:2f:d8:a0:94:4a:60:5a:3e:be:
ba:a5:c5:31:27:f7:e6:25:47:3a:69:25:c1:d3:0e:
ab:d5:c1:bb:5f:9a:a3:51:d2:ab:b0:f2:62:66:79:
d4:52:88:5e:30:a0:58:48:e1:d2:2a:3d:5b:e1:67:
77:95:aa:7a:d4:8f:5d:09:db:50:16:e4:93:32:ef:
04:f6:3a:a0:63:e0:ab:8f:02:1b:e3:54:cb:b5:cf:
a4:46:6e:a8:9a:64:ea:dd:c5:aa:21:26:62:5c:51:
3b:23:aa:ce:84:ea:92:df:ad:b3:62:bd:a1:99:f8:
7d:75:5f:af:59:54:40:55:35:32:80:4b:d2:e7:63:
d7:c2:36:20:e7:6d:42:13:6d:94:63:bb:1a:0e:24:
a2:ac:d6:94:ee:e9:bd:b5:10:88:2c:06:22:b3:82:
96:82:69:0c:bc:43:f5:5a:09:31:fa:1f:16:7e:c4:
79:11:a4:2e:db:43:dc:77:28:75:98:fe:0a:68:d0:
bb:ec:be:3c:98:fe:b6:10:bd:77:bd:73:a5:06:6a:
7d:f5:87:d8:82:c1:96:d2:7a:b1:64:98:a2:e9:e1:
2d:9c:b9:d0:c9:05:32:23:f0:26:6e:25:74:2a:46:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:70:A0:6C:6C:19:8A:16:69:18:85:4F:C4:28:83:6F:F4:CC:A2:48
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GnCgbGwZihZpGIVPxCiDb_TMokg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.147.46.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c5:df:7f:8d:a5:11:de:94:86:02:e5:fd:98:9a:41:43:ff:
68:86:b4:33:23:bb:86:73:86:4b:be:b2:2c:c7:7e:3f:5a:a8:
4f:05:2b:09:9e:58:06:43:ce:f3:d2:f7:2b:df:ec:6b:12:4f:
85:cc:d9:a6:0c:a1:67:8d:3b:45:a6:60:c4:04:6a:a2:ec:cb:
e6:2f:5e:24:8f:20:83:a7:54:9d:52:33:60:03:58:48:d2:ab:
97:d1:99:55:25:7b:be:7f:08:77:ea:13:04:1f:ac:d4:7f:cd:
16:00:e8:57:25:0a:e4:96:7d:ae:af:9c:59:76:ec:4d:22:14:
e6:a7:89:2b:f8:02:b5:51:e1:cc:74:a5:3d:a0:47:5e:5f:f1:
44:82:4c:6f:bd:a7:1f:fe:ab:1b:35:07:11:25:a9:8b:64:79:
87:83:42:f5:65:01:c9:ba:78:e3:06:e1:dd:6c:18:7a:2b:8f:
0b:a1:80:ce:0e:1c:68:7b:db:4d:d5:91:11:7f:f4:3c:e2:f0:
91:8f:d4:27:af:ca:09:36:2f:70:da:57:71:ea:5f:bb:4d:4d:
ef:78:20:03:64:fd:a4:ec:56:16:e8:af:63:4f:ec:d1:bc:9e:
2d:9a:47:bc:88:aa:91:16:bd:c5:dc:40:a2:ef:9f:b1:c7:28:
1c:3f:29:75
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBzHMijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDEw
MTE0MDgxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWE3MGEwNmM2YzE5
OGExNjY5MTg4NTRmYzQyODgzNmZmNGNjYTI0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIV2Cq5fzJXsIAQNvcSCdzy7tKBdL9iglEpgWj6+uqXFMSf3
5iVHOmklwdMOq9XBu1+ao1HSq7DyYmZ51FKIXjCgWEjh0io9W+Fnd5WqetSPXQnb
UBbkkzLvBPY6oGPgq48CG+NUy7XPpEZuqJpk6t3FqiEmYlxROyOqzoTqkt+ts2K9
oZn4fXVfr1lUQFU1MoBL0udj18I2IOdtQhNtlGO7Gg4koqzWlO7pvbUQiCwGIrOC
loJpDLxD9VoJMfofFn7EeRGkLttD3HcodZj+CmjQu+y+PJj+thC9d71zpQZqffWH
2ILBltJ6sWSYounhLZy50MkFMiPwJm4ldCpGc+0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQacKBsbBmKFmkYhU/EKINv9MyiSDAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L0duQ2diR3daaWhacEdJVlB4Q2lEYl9UTW9rZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2DAwMEAC2TLjANBgkqhkiG9w0B
AQsFAAOCAQEAEMXff42lEd6UhgLl/ZiaQUP/aIa0MyO7hnOGS76yLMd+P1qoTwUr
CZ5YBkPO89L3K9/saxJPhczZpgyhZ407RaZgxARqouzL5i9eJI8gg6dUnVIzYANY
SNKrl9GZVSV7vn8Id+oTBB+s1H/NFgDoVyUK5JZ9rq+cWXbsTSIU5qeJK/gCtVHh
zHSlPaBHXl/xRIJMb72nH/6rGzUHESWpi2R5h4NC9WUBybp44wbh3WwYeiuPC6GA
zg4caHvbTdWREX/0POLwkY/UJ6/KCTYvcNpXcepfu01N73ggA2T9pOxWFuivY0/s
0byeLZpHvIiqkRa9xdxAou+fsccoHD8pdQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:01 2025 by rpki-client