Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/pGobZxfVckmElKS1agtCdkk-iuI.roa
File: pGobZxfVckmElKS1agtCdkk-iuI.roa (raw, json)
Hash identifier: /4iYw400jqlI7AIlwvyC8BJgM3crxUYrdqDZhKEwtL4=
Subject key identifier: A4:6A:1B:67:17:D5:72:49:84:94:A4:B5:6A:0B:42:76:49:3E:8A:E2
Certificate issuer: /CN=dc62c84850750e2aa68930f164b0c522073aead8
Certificate serial: 01856F9DE44057D7ABAFD69740C30837E4D7
Authority key identifier: DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/pGobZxfVckmElKS1agtCdkk-iuI.roa
Signing time: Sun 01 Jan 2023 23:14:56 +0000
ROA not before: Sun 01 Jan 2023 23:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3170
IP address blocks: 194.69.165.0/24 maxlen: 24
2a11:2640::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e4:40:57:d7:ab:af:d6:97:40:c3:08:37:e4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc62c84850750e2aa68930f164b0c522073aead8
Validity
Not Before: Jan 1 23:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a46a1b6717d572498494a4b56a0b4276493e8ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:c6:29:08:9b:59:d2:ed:24:d9:42:9f:48:
e3:6e:6b:65:4b:a3:8b:ef:c5:6d:a7:d9:55:c3:b6:
a0:d1:60:59:f8:00:10:5e:42:f0:67:70:77:83:cc:
d6:60:ac:03:01:36:21:ee:27:ba:3e:ee:56:72:ab:
f9:d5:8e:fe:10:39:f9:2b:e2:79:ef:88:77:53:be:
f6:4c:8d:05:0d:b0:b3:4f:02:a7:4d:f8:c1:ee:97:
a1:bd:00:fd:f8:d0:cb:34:ce:00:78:ea:1d:28:fb:
f1:bb:ee:21:47:88:64:fb:12:c0:f4:9c:a4:18:18:
a9:9d:0f:21:60:98:f5:49:14:2f:d3:ed:b9:45:f4:
ce:6e:fd:9f:25:06:d7:31:2e:88:23:64:b6:ae:39:
6f:f7:b0:24:31:96:73:5c:51:be:34:cb:30:76:7c:
b7:a1:8e:11:04:c1:a8:5f:8f:4f:13:1f:5e:c5:b9:
7b:49:d0:e7:43:c7:f1:a8:14:e7:5d:98:93:6a:65:
e9:cb:d5:02:4f:4a:49:93:3e:e6:6b:f8:cd:ae:39:
a5:40:cf:2d:15:d9:98:79:8d:48:fc:38:d4:ab:28:
33:8f:f4:6b:e0:6e:eb:15:4a:7b:86:bc:f4:65:b3:
22:6e:5f:de:b4:3a:eb:d1:9f:75:f3:64:83:53:de:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:1B:67:17:D5:72:49:84:94:A4:B5:6A:0B:42:76:49:3E:8A:E2
X509v3 Authority Key Identifier:
keyid:DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/pGobZxfVckmElKS1agtCdkk-iuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/3GLISFB1DiqmiTDxZLDFIgc66tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.165.0/24
IPv6:
2a11:2640::/29
Signature Algorithm: sha256WithRSAEncryption
49:09:1e:85:96:d8:3a:a4:f5:2d:ed:1d:f0:ed:1f:cb:c2:63:
2c:23:61:38:10:b0:6d:c8:43:e0:94:78:c1:7d:af:58:29:6b:
a9:39:e9:2f:c3:e5:31:ce:54:d9:f4:56:8b:9b:ab:9d:ff:4c:
ba:d2:e0:ab:44:6b:4d:e8:d5:f4:19:bf:6c:b7:c7:44:7b:b8:
fe:d4:b9:fc:60:ee:46:8c:f2:aa:cb:21:4d:79:cc:e7:20:19:
1b:cb:f3:6f:95:37:71:9e:65:38:a4:a3:82:9a:ba:ea:b6:21:
91:20:29:99:5d:92:27:8c:9a:59:57:20:fe:11:72:af:e1:b3:
16:ce:dd:d9:c3:66:65:09:20:4f:ee:b3:08:7a:5f:32:24:86:
dc:62:2c:d5:57:12:c2:72:7c:20:3d:67:ef:df:c4:a1:42:70:
39:af:75:c4:56:4f:88:ab:1b:5f:e7:cb:97:24:b7:8b:b2:57:
d2:6a:b0:bb:58:3e:28:98:49:0c:5c:76:11:00:52:24:6d:f8:
9e:89:c2:1c:91:a2:49:2d:d7:d1:9d:91:89:da:70:d9:73:a2:
f0:c1:73:83:0a:b4:7b:36:a1:9e:0c:5a:60:f1:82:3c:0f:80:
dc:a7:8c:05:2d:04:4b:3d:2d:51:bc:bf:9d:4c:e2:a6:1f:66:
45:00:da:ea
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvneRAV9err9aXQMMIN+TXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjJjODQ4NTA3NTBlMmFhNjg5MzBmMTY0YjBjNTIyMDcz
YWVhZDgwHhcNMjMwMTAxMjMxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDZhMWI2NzE3ZDU3MjQ5ODQ5NGE0YjU2YTBiNDI3NjQ5M2U4YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDbGKQibWdLtJNlCn0jjbmtlS6OL
78Vtp9lVw7ag0WBZ+AAQXkLwZ3B3g8zWYKwDATYh7ie6Pu5Wcqv51Y7+EDn5K+J5
74h3U772TI0FDbCzTwKnTfjB7pehvQD9+NDLNM4AeOodKPvxu+4hR4hk+xLA9Jyk
GBipnQ8hYJj1SRQv0+25RfTObv2fJQbXMS6II2S2rjlv97AkMZZzXFG+NMswdny3
oY4RBMGoX49PEx9exbl7SdDnQ8fxqBTnXZiTamXpy9UCT0pJkz7ma/jNrjmlQM8t
FdmYeY1I/DjUqygzj/Rr4G7rFUp7hrz0ZbMibl/etDrr0Z9182SDU97dcQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKRqG2cX1XJJhJSktWoLQnZJPoriMB8GA1UdIwQY
MBaAFNxiyEhQdQ4qpokw8WSwxSIHOurYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dMSVNGQjFEaXFtaVREeFpMREZJZ2M2NnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iMzRiYjktYWRiYi00MWU0LWEwNDEt
NTIzMGI0MDAyYzI3LzEvcEdvYlp4ZlZja21FbEtTMWFndENka2staXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iMzRiYjktYWRiYi00MWU0LWEwNDEtNTIzMGI0MDAyYzI3
LzEvM0dMSVNGQjFEaXFtaVREeFpMREZJZ2M2NnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwkWlMA0E
AgACMAcDBQMqESZAMA0GCSqGSIb3DQEBCwUAA4IBAQBJCR6Fltg6pPUt7R3w7R/L
wmMsI2E4ELBtyEPglHjBfa9YKWupOekvw+UxzlTZ9FaLm6ud/0y60uCrRGtN6NX0
Gb9st8dEe7j+1Ln8YO5GjPKqyyFNecznIBkby/NvlTdxnmU4pKOCmrrqtiGRICmZ
XZInjJpZVyD+EXKv4bMWzt3Zw2ZlCSBP7rMIel8yJIbcYizVVxLCcnwgPWfv38Sh
QnA5r3XEVk+Iqxtf58uXJLeLslfSarC7WD4omEkMXHYRAFIkbfieicIckaJJLdfR
nZGJ2nDZc6LwwXODCrR7NqGeDFpg8YI8D4Dcp4wFLQRLPS1RvL+dTOKmH2ZFANrq
-----END CERTIFICATE-----
Generated at Mon May 12 11:49:13 2025 by rpki-client