Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/_GSW-DelEaPKU0jnYZYgZjzHWbE.roa
File: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (raw, json)
Hash identifier: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=
Subject key identifier: FC:64:96:F8:37:A5:11:A3:CA:53:48:E7:61:96:20:66:3C:C7:59:B1
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 0194252233F3983BCF71E993EB1EFD5E51D3
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/_GSW-DelEaPKU0jnYZYgZjzHWbE.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209795
IP address blocks: 194.93.12.0/23 maxlen: 23
194.93.14.0/23 maxlen: 23
2a09:2080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:33:f3:98:3b:cf:71:e9:93:eb:1e:fd:5e:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc6496f837a511a3ca5348e7619620663cc759b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:6e:b5:d3:c8:d4:53:93:59:c2:37:70:9a:
a7:54:49:7e:87:a0:d4:0d:2a:61:94:23:77:c6:15:
e2:7b:68:25:3c:b2:28:37:ab:40:f2:91:57:bb:bf:
9e:f5:95:35:e1:53:f9:e8:ed:4c:0e:64:2e:60:1b:
04:12:14:90:9c:91:82:29:20:75:ad:31:a7:b9:cc:
e2:52:7d:6b:d2:33:99:7c:9b:eb:19:27:c1:27:7e:
fe:99:c4:d4:f0:2b:3e:d6:df:9a:d9:1f:0c:6c:b3:
4c:67:7b:59:c7:11:9d:35:45:ef:b8:14:77:32:80:
17:02:11:55:22:b4:4d:38:8a:73:9d:59:52:97:cd:
86:03:4e:2f:6a:aa:a2:97:01:b8:ca:65:a4:64:f8:
db:1d:1b:ce:1e:a2:ea:16:22:c2:ae:d6:53:ad:86:
87:72:5e:30:49:f8:c5:c2:e5:96:c1:79:27:d4:62:
f7:43:37:1e:10:90:9a:ea:0a:75:e0:91:a2:0c:54:
0e:be:b8:cd:83:41:0b:be:a7:de:23:52:5c:69:84:
8c:ea:96:40:1d:ea:a9:c8:ba:ab:60:59:81:b4:02:
a8:a8:1d:3c:24:7d:aa:f5:2e:00:e9:ed:bc:33:90:
94:ab:92:e8:43:f5:15:72:bb:88:48:45:11:75:a5:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:96:F8:37:A5:11:A3:CA:53:48:E7:61:96:20:66:3C:C7:59:B1
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/_GSW-DelEaPKU0jnYZYgZjzHWbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.12.0/22
IPv6:
2a09:2080::/29
Signature Algorithm: sha256WithRSAEncryption
8b:7b:9e:9f:4d:85:92:03:c5:6e:2b:e5:16:34:b4:7a:57:bd:
34:74:66:84:35:13:31:2f:df:c1:e2:3e:9f:7b:47:7d:36:7b:
05:e9:e4:21:67:55:1c:c2:4e:ee:64:3a:97:6f:93:c3:1e:da:
5c:c4:de:66:de:c7:13:5f:ad:b6:0d:54:c1:ac:83:3e:39:88:
c2:2f:25:f6:79:98:5a:39:1f:57:27:f9:a4:eb:6f:77:5a:c2:
8e:ef:3c:97:42:f7:05:fa:28:2b:55:77:31:1c:0f:4a:95:71:
35:56:9c:c9:dc:bd:72:e0:65:00:06:d2:23:e3:3c:57:84:0e:
ed:fd:b8:59:1f:a3:6c:be:01:43:f4:4b:23:c5:f5:a0:6d:28:
29:7c:29:bf:55:56:a9:b7:7c:68:6f:98:06:93:0d:48:b4:23:
e5:dc:11:6c:33:ee:b4:6b:85:3c:f4:99:de:57:45:2d:31:2c:
24:48:61:52:ed:4f:b8:dc:4a:17:13:8a:4b:7e:19:db:98:1c:
85:c3:53:50:1e:13:98:8d:2c:c3:c6:bc:42:3c:be:66:fe:23:
44:15:1f:4f:6c:7a:91:61:51:20:db:0d:ac:96:ca:db:e7:51:
db:63:94:d5:8d:e5:92:8e:8a:95:e9:f9:16:6f:0f:f1:2a:d5:
ae:5a:ef:b3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlIjPzmDvPcemT6x79XlHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjA1NzQ4NTJjNmJiOTIzZmNiMzgwNDI1YzRmZDNlZDVj
MGJhOTMwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzY0OTZmODM3YTUxMWEzY2E1MzQ4ZTc2MTk2MjA2NjNjYzc1OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaZutdPI1FOTWcI3cJqnVEl+h6DU
DSphlCN3xhXie2glPLIoN6tA8pFXu7+e9ZU14VP56O1MDmQuYBsEEhSQnJGCKSB1
rTGnucziUn1r0jOZfJvrGSfBJ37+mcTU8Cs+1t+a2R8MbLNMZ3tZxxGdNUXvuBR3
MoAXAhFVIrRNOIpznVlSl82GA04vaqqilwG4ymWkZPjbHRvOHqLqFiLCrtZTrYaH
cl4wSfjFwuWWwXkn1GL3QzceEJCa6gp14JGiDFQOvrjNg0ELvqfeI1JcaYSM6pZA
HeqpyLqrYFmBtAKoqB08JH2q9S4A6e28M5CUq5LoQ/UVcruISEURdaXGAQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPxklvg3pRGjylNI52GWIGY8x1mxMB8GA1UdIwQY
MBaAFAEgV0hSxruSP8s4BCXE/T7VwLqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2Qt
ZDViMWRiZGQxYjVmLzEvX0dTVy1EZWxFYVBLVTBqbllaWWdaanpIV2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2QtZDViMWRiZGQxYjVm
LzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwl0MMA0E
AgACMAcDBQMqCSCAMA0GCSqGSIb3DQEBCwUAA4IBAQCLe56fTYWSA8VuK+UWNLR6
V700dGaENRMxL9/B4j6fe0d9NnsF6eQhZ1Ucwk7uZDqXb5PDHtpcxN5m3scTX622
DVTBrIM+OYjCLyX2eZhaOR9XJ/mk6293WsKO7zyXQvcF+igrVXcxHA9KlXE1VpzJ
3L1y4GUABtIj4zxXhA7t/bhZH6NsvgFD9EsjxfWgbSgpfCm/VVapt3xob5gGkw1I
tCPl3BFsM+60a4U89JneV0UtMSwkSGFS7U+43EoXE4pLfhnbmByFw1NQHhOYjSzD
xrxCPL5m/iNEFR9PbHqRYVEg2w2slsrb51HbY5TVjeWSjoqV6fkWbw/xKtWuWu+z
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:07 2025 by rpki-client