Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa
File: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (raw, json)
Hash identifier: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=
Subject key identifier: 83:03:5F:EE:14:54:71:49:5C:FD:63:F4:A1:B6:39:AB:67:41:6E:74
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 0194228D80DAD969F6F778F54FE6DCD4191A
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa
Signing time: Wed 01 Jan 2025 15:48:06 +0000
ROA not before: Wed 01 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39159
IP address blocks: 81.5.20.0/24 maxlen: 24
212.199.62.0/24 maxlen: 24
213.8.65.0/24 maxlen: 24
213.8.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:80:da:d9:69:f6:f7:78:f5:4f:e6:dc:d4:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83035fee145471495cfd63f4a1b639ab67416e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:c5:26:45:ef:00:2d:15:b0:04:b3:41:df:
11:0f:fb:17:05:d8:a1:ab:8f:65:c1:7e:4f:40:6c:
c6:a6:b1:ac:b1:0c:31:f4:1a:c8:2c:af:1c:a7:d9:
b0:d1:04:76:75:6c:a3:01:31:d6:bd:02:e3:35:9c:
08:79:e5:b3:cf:76:a2:91:91:17:7c:d3:88:36:d6:
a9:22:36:ce:2f:40:df:4b:0b:b1:88:e5:39:4b:c8:
4e:7a:b8:b1:94:16:c9:af:50:3b:45:6b:fc:f4:24:
c8:80:5d:48:64:e0:4a:2e:64:0a:f9:ad:7c:20:2a:
8a:c2:76:42:17:0d:4b:34:90:a7:8a:2d:eb:20:0b:
eb:43:0c:ad:8b:f2:85:8a:4f:73:6b:5e:af:a4:6f:
a8:34:1e:ea:b8:c7:8b:7d:7d:b4:af:4e:30:ef:ef:
a8:ff:64:11:41:35:0f:3a:11:ef:e6:73:4c:e2:20:
95:17:55:43:8e:10:ab:e1:46:cb:7b:42:9d:2a:83:
52:10:f2:34:6a:fc:a0:3c:ed:c8:80:81:28:69:f1:
0c:b0:57:0e:cb:47:79:11:5b:54:6e:dd:a4:9c:d6:
c2:d8:1c:3d:1b:7e:ca:df:c7:9a:66:ce:b3:1d:46:
13:13:a0:36:f6:f3:ed:5a:0c:63:51:ee:bb:c5:b2:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:5F:EE:14:54:71:49:5C:FD:63:F4:A1:B6:39:AB:67:41:6E:74
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.20.0/24
212.199.62.0/24
213.8.65.0/24
213.8.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5e:f4:5a:28:8f:61:60:80:a8:28:e4:2d:eb:04:63:15:f9:
ea:c2:27:68:f4:14:2d:d7:b2:da:6e:3d:1e:e1:f2:4e:48:b2:
c1:2a:5d:42:64:b6:3a:89:cb:9e:de:b5:92:d8:2f:31:34:52:
8b:26:bb:c4:bc:b5:b0:6c:60:4a:22:d4:db:32:b5:0d:63:0f:
39:c6:26:ef:c3:bc:9e:f1:83:d1:35:86:10:7b:8f:5a:da:cf:
75:76:3d:b7:fd:57:88:44:0e:0b:59:94:27:c8:40:17:7d:6a:
08:cf:1e:72:3d:44:5a:76:99:2c:85:8b:66:e8:4c:8f:f7:3f:
ca:b3:21:b5:a3:e4:90:39:9a:c1:3a:97:60:8a:93:aa:37:33:
89:44:0b:46:4f:2e:f0:a7:95:64:17:f7:13:d3:31:3a:ab:9f:
52:a5:52:d6:95:c1:8b:ae:91:90:ce:cb:eb:c3:06:9c:f2:22:
8b:70:31:9a:f4:36:19:2d:19:cd:68:09:a4:bd:0d:3b:e1:8b:
68:cc:16:c3:b5:f2:cc:53:6c:da:82:e3:5e:e6:c7:a0:b5:37:
52:cb:ee:c3:57:c5:6b:39:4e:63:b8:93:97:79:98:67:74:30:
c3:19:82:f7:37:52:55:fd:c9:8e:02:30:4b:33:0b:bb:b8:eb:
71:a2:3c:d4
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQijYDa2Wn293j1T+bc1BkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk
NzY0NzMwHhcNMjUwMTAxMTU0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzAzNWZlZTE0NTQ3MTQ5NWNmZDYzZjRhMWI2MzlhYjY3NDE2ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rjFJkXvAC0VsASzQd8RD/sXBdih
q49lwX5PQGzGprGssQwx9BrILK8cp9mw0QR2dWyjATHWvQLjNZwIeeWzz3aikZEX
fNOINtapIjbOL0DfSwuxiOU5S8hOerixlBbJr1A7RWv89CTIgF1IZOBKLmQK+a18
ICqKwnZCFw1LNJCnii3rIAvrQwyti/KFik9za16vpG+oNB7quMeLfX20r04w7++o
/2QRQTUPOhHv5nNM4iCVF1VDjhCr4UbLe0KdKoNSEPI0avygPO3IgIEoafEMsFcO
y0d5EVtUbt2knNbC2Bw9G37K38eaZs6zHUYTE6A29vPtWgxjUe67xbKvoQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIMDX+4UVHFJXP1j9KG2OatnQW50MB8GA1UdIwQY
MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm
LWVmZDE0ZGI5NTdmYi8xL2d3TmY3aFJVY1VsY19XUDBvYlk1cTJkQmJuUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRmLWVmZDE0ZGI5NTdm
Yi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABRBRQD
BADUxz4DBADVCEEDBADVCJcwDQYJKoZIhvcNAQELBQADggEBAE5e9Fooj2FggKgo
5C3rBGMV+erCJ2j0FC3XstpuPR7h8k5IssEqXUJktjqJy57etZLYLzE0Uosmu8S8
tbBsYEoi1NsytQ1jDznGJu/DvJ7xg9E1hhB7j1raz3V2Pbf9V4hEDgtZlCfIQBd9
agjPHnI9RFp2mSyFi2boTI/3P8qzIbWj5JA5msE6l2CKk6o3M4lEC0ZPLvCnlWQX
9xPTMTqrn1KlUtaVwYuukZDOy+vDBpzyIotwMZr0NhktGc1oCaS9DTvhi2jMFsO1
8sxTbNqC417mx6C1N1LL7sNXxWs5TmO4k5d5mGd0MMMZgvc3UlX9yY4CMEszC7u4
63GiPNQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:31 2025 by rpki-client