Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/GpgJajGCbSNl3e4aO7PdAchg1ng.roa
File: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (raw, json)
Hash identifier: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=
Subject key identifier: 1A:98:09:6A:31:82:6D:23:65:DD:EE:1A:3B:B3:DD:01:C8:60:D6:78
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 019424B28DE7B75DA9A08EED0C24DE7D8A1F
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/GpgJajGCbSNl3e4aO7PdAchg1ng.roa
Signing time: Thu 02 Jan 2025 01:47:48 +0000
ROA not before: Thu 02 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8d:e7:b7:5d:a9:a0:8e:ed:0c:24:de:7d:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Jan 2 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a98096a31826d2365ddee1a3bb3dd01c860d678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:a5:f7:93:59:f0:7f:34:bf:7b:76:d0:9e:
45:7f:cf:ec:09:e3:fe:5d:2e:fa:6d:28:54:6f:17:
96:00:f7:73:67:95:bd:ca:9e:76:d5:58:1d:70:21:
b7:fb:5a:5e:ed:40:e9:d0:ff:9a:6e:7f:aa:1f:31:
68:76:1d:58:35:62:09:76:d3:d7:54:de:e2:62:f7:
73:ba:00:1b:01:6b:57:99:d7:13:d8:53:0a:a9:74:
ca:7f:7f:c3:1b:b3:aa:93:5d:de:8d:5a:b8:f0:cd:
b3:60:12:da:d2:6e:2a:fc:35:85:ce:f8:02:90:3f:
4d:33:cc:f5:2a:b1:43:e2:d1:fd:41:37:a7:0f:86:
12:75:6d:9d:6e:00:8d:f1:13:e9:0e:18:f7:d0:46:
75:65:de:03:45:df:d9:9d:31:5a:1e:9a:b2:12:d0:
f0:8a:21:5d:c7:bc:fb:a0:13:b6:7b:6e:3c:f8:10:
a4:bb:88:3a:39:ac:df:34:72:86:1a:65:ef:21:b5:
7b:5c:c4:e6:87:d0:4f:fd:7d:89:6e:3c:49:28:5a:
aa:73:25:80:b3:10:62:1b:da:a1:1e:75:a2:90:fd:
9e:5b:64:f7:31:f4:63:aa:c1:3e:4c:48:19:43:d9:
07:11:78:76:37:6e:1c:8e:6f:f7:1d:f8:31:51:da:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:98:09:6A:31:82:6D:23:65:DD:EE:1A:3B:B3:DD:01:C8:60:D6:78
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/GpgJajGCbSNl3e4aO7PdAchg1ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:58:a5:dd:53:5c:0c:1f:50:76:43:90:02:28:05:5c:b8:09:
a4:80:2f:41:c6:66:1f:35:90:eb:3e:11:2d:81:3f:eb:d6:ec:
3a:e9:68:4a:93:ac:24:99:1e:d8:4e:b4:94:a1:a7:00:c0:de:
23:9d:61:9d:bb:6a:ad:42:db:c5:f5:33:10:0a:c3:ed:9b:08:
da:71:c8:15:3c:7e:f2:35:59:e3:75:ff:e5:af:4f:38:9e:59:
6e:f1:03:44:f5:dd:24:89:89:d2:2e:2d:fd:07:15:35:bd:e0:
79:da:35:18:d4:26:cb:37:89:0c:6c:40:62:4f:a4:85:1f:da:
59:e3:63:f6:e6:37:48:89:8d:fc:dd:f6:84:02:60:db:e6:60:
b3:8f:1b:a8:13:d2:06:22:b8:b8:ca:42:9b:1f:46:07:a5:80:
e6:36:b1:93:6b:41:05:46:31:8a:67:52:69:6a:55:4b:99:b0:
f5:b2:48:1d:41:6c:16:b7:7f:44:ea:fa:fe:32:82:11:12:6a:
4c:56:3f:bb:21:b4:99:79:08:c8:b5:09:4d:65:7f:8b:4d:d8:
0b:2a:71:0a:f5:52:d3:15:62:2e:a3:c2:b9:0f:f3:a0:3b:89:
d2:e0:d5:2f:ce:85:03:a0:50:c2:35:3c:37:81:62:a9:1d:72:
dc:35:16:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkso3nt12poI7tDCTefYofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMjQ4YjVlMDg4NTg5NjRiYTJiNTQ3MzE1MjAxNWZkNTk5
MWZkZjgwHhcNMjUwMTAyMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTk4MDk2YTMxODI2ZDIzNjVkZGVlMWEzYmIzZGQwMWM4NjBkNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF6l95NZ8H80v3t20J5Ff8/sCeP+
XS76bShUbxeWAPdzZ5W9yp521VgdcCG3+1pe7UDp0P+abn+qHzFodh1YNWIJdtPX
VN7iYvdzugAbAWtXmdcT2FMKqXTKf3/DG7Oqk13ejVq48M2zYBLa0m4q/DWFzvgC
kD9NM8z1KrFD4tH9QTenD4YSdW2dbgCN8RPpDhj30EZ1Zd4DRd/ZnTFaHpqyEtDw
iiFdx7z7oBO2e248+BCku4g6OazfNHKGGmXvIbV7XMTmh9BP/X2JbjxJKFqqcyWA
sxBiG9qhHnWikP2eW2T3MfRjqsE+TEgZQ9kHEXh2N24cjm/3HfgxUdp1BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqYCWoxgm0jZd3uGjuz3QHIYNZ4MB8GA1UdIwQY
MBaAFIIki14IhYlkuitUcxUgFf1Zkf34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYt
YWU2NDY5YWIzZjQwLzEvR3BnSmFqR0NiU05sM2U0YU83UGRBY2hnMW5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYtYWU2NDY5YWIzZjQw
LzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFyZMA0G
CSqGSIb3DQEBCwUAA4IBAQAbWKXdU1wMH1B2Q5ACKAVcuAmkgC9BxmYfNZDrPhEt
gT/r1uw66WhKk6wkmR7YTrSUoacAwN4jnWGdu2qtQtvF9TMQCsPtmwjaccgVPH7y
NVnjdf/lr084nllu8QNE9d0kiYnSLi39BxU1veB52jUY1CbLN4kMbEBiT6SFH9pZ
42P25jdIiY383faEAmDb5mCzjxuoE9IGIri4ykKbH0YHpYDmNrGTa0EFRjGKZ1Jp
alVLmbD1skgdQWwWt39E6vr+MoIREmpMVj+7IbSZeQjItQlNZX+LTdgLKnEK9VLT
FWIuo8K5D/OgO4nS4NUvzoUDoFDCNTw3gWKpHXLcNRYP
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:15 2025 by rpki-client