Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/GXJ3Jv70PYrpynFmfWJG-1U0AXA.roa
File: GXJ3Jv70PYrpynFmfWJG-1U0AXA.roa (raw, json)
Hash identifier: gN7zf0hrnbDTgmLIPxtKMfQ1p2xryjgx0dj4x/WcdJI=
Subject key identifier: 19:72:77:26:FE:F4:3D:8A:E9:CA:71:66:7D:62:46:FB:55:34:01:70
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0194D5F1D3FB2D42DB9CA09DA366F2870A72
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/GXJ3Jv70PYrpynFmfWJG-1U0AXA.roa
Signing time: Wed 05 Feb 2025 11:49:42 +0000
ROA not before: Wed 05 Feb 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 178.17.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:f1:d3:fb:2d:42:db:9c:a0:9d:a3:66:f2:87:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Feb 5 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19727726fef43d8ae9ca71667d6246fb55340170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:a2:77:ee:0c:d6:a5:6e:8b:53:ae:70:fa:
92:24:85:50:0b:24:e3:4f:02:63:64:75:ee:0a:8a:
f4:5d:7e:db:2e:f8:4b:22:4d:19:29:6a:7b:21:00:
a8:b6:b0:57:c7:a8:eb:a3:bc:e5:44:4c:c9:28:31:
97:90:26:c7:84:5b:a0:89:23:03:29:35:25:87:bb:
49:67:2e:9e:c2:1d:a3:97:c2:b1:95:0a:0f:dd:27:
97:3d:b8:1b:8b:f3:34:6a:bd:fb:91:b0:9d:ad:11:
8f:fd:44:98:55:1f:cc:d8:22:ad:e5:64:07:50:8a:
8c:37:02:97:8c:2c:1a:3d:b9:40:e9:df:63:e1:67:
21:81:74:a2:d8:90:e3:6c:61:1b:80:87:c3:14:d6:
c2:21:b6:0e:4c:dd:a7:31:87:1a:10:23:fd:9b:68:
c4:78:a0:25:3e:58:79:28:2a:d7:2e:b8:a5:6a:20:
4b:db:3d:45:62:8f:d8:bd:4b:4a:38:b9:93:3a:11:
b6:4d:cc:96:15:86:04:00:a9:cd:8f:b6:b2:d9:ba:
6e:32:8e:17:dd:6b:6a:8a:3a:17:b1:47:51:63:60:
be:24:92:88:02:62:2a:84:01:53:63:f4:de:27:98:
ea:63:f8:0c:d8:35:52:6d:8b:ce:fc:ca:04:8a:7a:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:77:26:FE:F4:3D:8A:E9:CA:71:66:7D:62:46:FB:55:34:01:70
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/GXJ3Jv70PYrpynFmfWJG-1U0AXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.50.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d8:ff:80:75:dd:b6:0c:54:8a:cd:d5:3d:c0:42:ce:90:00:
6b:69:84:a1:05:b5:37:2e:4d:b5:25:ce:11:79:cc:7f:51:e1:
82:2c:29:67:b4:a4:9a:f3:68:38:67:5d:78:01:ae:56:48:8e:
c7:01:aa:2d:c4:b0:fb:8e:e8:30:9b:ca:45:1b:84:77:e4:8a:
61:65:88:48:42:d9:d3:e7:d4:1e:d8:25:08:db:91:22:30:d2:
6b:20:20:cf:41:f8:8c:97:51:4a:84:39:1d:fc:1c:93:d1:12:
cd:44:b1:4c:1f:c3:80:d5:70:72:dc:25:93:cd:bd:ee:4f:e9:
07:3d:06:08:7c:5d:5a:a2:47:05:29:e6:2d:c6:72:b8:5e:1c:
50:1c:2c:ee:1a:1d:a1:81:25:0c:00:75:ff:25:5b:41:03:b8:
b7:5b:db:fd:fa:f6:7e:f8:53:c4:a5:2b:3e:b0:0f:db:53:89:
a4:ea:4c:a9:49:6d:35:07:31:24:2e:92:e6:7e:4f:02:71:f6:
5b:05:7d:53:97:28:41:fc:96:cc:3d:c4:d5:ef:aa:cd:f6:c7:
39:8d:d0:ea:69:a3:c9:ef:b2:ea:a3:84:72:6f:32:68:d8:e1:
cd:46:f7:ef:4d:4c:15:48:a9:0e:dd:1a:37:85:9c:73:fa:27:
df:b5:b6:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTV8dP7LULbnKCdo2byhwpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjUwMjA1MTE0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTcyNzcyNmZlZjQzZDhhZTljYTcxNjY3ZDYyNDZmYjU1MzQwMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCOid+4M1qVui1OucPqSJIVQCyTj
TwJjZHXuCor0XX7bLvhLIk0ZKWp7IQCotrBXx6jro7zlREzJKDGXkCbHhFugiSMD
KTUlh7tJZy6ewh2jl8KxlQoP3SeXPbgbi/M0ar37kbCdrRGP/USYVR/M2CKt5WQH
UIqMNwKXjCwaPblA6d9j4WchgXSi2JDjbGEbgIfDFNbCIbYOTN2nMYcaECP9m2jE
eKAlPlh5KCrXLrilaiBL2z1FYo/YvUtKOLmTOhG2TcyWFYYEAKnNj7ay2bpuMo4X
3WtqijoXsUdRY2C+JJKIAmIqhAFTY/TeJ5jqY/gM2DVSbYvO/MoEinplPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlydyb+9D2K6cpxZn1iRvtVNAFwMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvR1hKM0p2NzBQWXJweW5GbWZXSkctMVUwQVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshEyMA0G
CSqGSIb3DQEBCwUAA4IBAQCY2P+Add22DFSKzdU9wELOkABraYShBbU3Lk21Jc4R
ecx/UeGCLClntKSa82g4Z114Aa5WSI7HAaotxLD7jugwm8pFG4R35IphZYhIQtnT
59Qe2CUI25EiMNJrICDPQfiMl1FKhDkd/ByT0RLNRLFMH8OA1XBy3CWTzb3uT+kH
PQYIfF1aokcFKeYtxnK4XhxQHCzuGh2hgSUMAHX/JVtBA7i3W9v9+vZ++FPEpSs+
sA/bU4mk6kypSW01BzEkLpLmfk8CcfZbBX1TlyhB/JbMPcTV76rN9sc5jdDqaaPJ
77Lqo4RybzJo2OHNRvfvTUwVSKkO3Ro3hZxz+ifftbYs
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:18 2025 by rpki-client