Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/1-gBlmRElwFozsXlk-zODgtGpAuA.roa
File: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (raw, json)
Hash identifier: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=
Subject key identifier: FA:00:65:99:11:25:C0:5A:33:B1:79:64:FB:33:83:82:D1:A9:02:E0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 0194221F5D1E4AE01BC03B02F8CAFC94C37F
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/1-gBlmRElwFozsXlk-zODgtGpAuA.roa
Signing time: Wed 01 Jan 2025 13:47:48 +0000
ROA not before: Wed 01 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200640
IP address blocks: 37.34.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5d:1e:4a:e0:1b:c0:3b:02:f8:ca:fc:94:c3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa0065991125c05a33b17964fb338382d1a902e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:8e:01:e4:b2:6f:98:e6:20:10:ac:be:61:
86:d3:ca:93:4e:e8:f8:ce:e6:e8:8e:72:52:a4:e2:
b4:10:7e:0c:4b:23:3c:d6:d2:d1:0c:6f:43:9d:8c:
b4:69:e0:b2:28:56:ac:e3:f6:06:13:96:53:72:3a:
b2:5d:36:b5:3f:5e:f0:78:43:a0:12:32:05:ce:e4:
4f:76:02:0e:15:a2:e5:d5:da:7f:29:fd:62:5d:cf:
39:84:30:f2:9b:18:11:d3:fb:90:4c:dc:9e:7e:e5:
e9:47:82:14:63:39:65:21:5c:c9:ee:91:ae:ad:29:
f3:6d:d2:73:f2:17:11:59:69:69:a2:04:9d:60:8b:
eb:12:38:b3:91:ef:aa:83:41:7e:04:a1:86:09:07:
00:bf:58:9e:7f:21:db:31:7c:7a:48:78:b0:84:8b:
0d:af:26:56:32:2c:e9:31:e8:4a:ea:dc:c7:6d:1f:
15:ff:4f:91:32:4c:83:92:26:68:99:15:0b:5c:3e:
6f:c8:67:67:7a:14:0c:cf:ba:70:b2:57:57:37:dc:
1b:52:1d:4a:62:b1:78:f5:27:93:78:37:56:cb:b7:
b8:f8:19:dd:83:e5:85:4e:1c:c8:5e:80:42:b8:97:
fd:5c:17:bd:ae:3d:ee:f5:36:8a:76:9a:cd:c7:3a:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:00:65:99:11:25:C0:5A:33:B1:79:64:FB:33:83:82:D1:A9:02:E0
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/1-gBlmRElwFozsXlk-zODgtGpAuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.100.0/22
Signature Algorithm: sha256WithRSAEncryption
31:db:c5:39:29:32:75:a9:01:2f:f0:06:26:a8:46:cf:be:43:
3a:b4:71:ff:41:2c:57:8b:d4:86:ff:32:a4:70:55:d7:ca:f3:
b9:ee:fe:df:08:64:24:f8:d9:aa:7a:8c:51:23:71:70:9e:d3:
45:07:d2:eb:8f:d7:6b:b5:b8:cc:38:bb:db:4a:28:43:50:15:
4e:d8:f0:45:63:98:7e:3a:5e:86:65:1a:c5:81:70:79:e9:21:
5a:2e:63:b2:4e:38:ce:fc:f6:56:d6:d9:74:be:3c:c1:e6:6e:
b5:ca:1e:e5:50:36:be:80:1a:b8:f2:3c:c4:ae:8e:a9:4e:f4:
b3:5e:e8:60:4f:3c:de:4c:90:2b:95:74:76:30:1e:73:fd:01:
92:f1:ed:18:53:10:63:4c:a1:5e:ea:c0:64:0f:97:75:af:8e:
cf:7b:96:be:1f:a1:cd:05:19:4c:b0:48:29:82:b0:70:c7:68:
60:e4:66:11:42:5e:8c:ca:73:ac:f3:9e:5f:54:d5:58:b0:fb:
0e:41:3f:d7:eb:2b:7b:e8:22:a9:b0:12:54:09:84:79:07:25:
63:f5:02:91:88:5e:2c:ea:2d:30:5b:4c:71:59:56:31:98:69:
4d:65:b8:20:26:82:a4:c5:bb:92:a6:3b:2b:ae:a2:ec:aa:60:
ec:c5:41:0e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQiH10eSuAbwDsC+Mr8lMN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4
NmU5YTAwHhcNMjUwMTAxMTM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTAwNjU5OTExMjVjMDVhMzNiMTc5NjRmYjMzODM4MmQxYTkwMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZWOAeSyb5jmIBCsvmGG08qTTuj4
zubojnJSpOK0EH4MSyM81tLRDG9DnYy0aeCyKFas4/YGE5ZTcjqyXTa1P17weEOg
EjIFzuRPdgIOFaLl1dp/Kf1iXc85hDDymxgR0/uQTNyefuXpR4IUYzllIVzJ7pGu
rSnzbdJz8hcRWWlpogSdYIvrEjizke+qg0F+BKGGCQcAv1iefyHbMXx6SHiwhIsN
ryZWMizpMehK6tzHbR8V/0+RMkyDkiZomRULXD5vyGdnehQMz7pwsldXN9wbUh1K
YrF49SeTeDdWy7e4+Bndg+WFThzIXoBCuJf9XBe9rj3u9TaKdprNxzpFrQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPoAZZkRJcBaM7F5ZPszg4LRqQLgMB8GA1UdIwQY
MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt
MTE5ZDhiZjcxN2JiLzEvMS1nQmxtUkVsd0ZvenNYbGstek9EZ3RHcEF1QS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDcvYzY4NmIzLWU3YTktNGY5Yy04NDJjLTExOWQ4YmY3MTdi
Yi8xL1Blc1FSR1BwSUxSVlFyYXZHaWZWbFE2RzZhQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiUiZDAN
BgkqhkiG9w0BAQsFAAOCAQEAMdvFOSkydakBL/AGJqhGz75DOrRx/0EsV4vUhv8y
pHBV18rzue7+3whkJPjZqnqMUSNxcJ7TRQfS64/Xa7W4zDi720ooQ1AVTtjwRWOY
fjpehmUaxYFweekhWi5jsk44zvz2VtbZdL48weZutcoe5VA2voAauPI8xK6OqU70
s17oYE883kyQK5V0djAec/0BkvHtGFMQY0yhXurAZA+Xda+Oz3uWvh+hzQUZTLBI
KYKwcMdoYORmEUJejMpzrPOeX1TVWLD7DkE/1+sre+giqbASVAmEeQclY/UCkYhe
LOotMFtMcVlWMZhpTWW4ICaCpMW7kqY7K66i7Kpg7MVBDg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:35 2025 by rpki-client