Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/GSq3J2YJnNyhzth3hnZMQLtfyVg.roa
File: GSq3J2YJnNyhzth3hnZMQLtfyVg.roa (raw, json)
Hash identifier: YjJTMfChs1ee9zRQg+5qYR9IzIwhQNNIZQcGrlL7UTQ=
Subject key identifier: 19:2A:B7:27:66:09:9C:DC:A1:CE:D8:77:86:76:4C:40:BB:5F:C9:58
Certificate issuer: /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial: 0194221F433A0DB0EBBE2324DD6CA7B286E3
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/GSq3J2YJnNyhzth3hnZMQLtfyVg.roa
Signing time: Wed 01 Jan 2025 13:47:41 +0000
ROA not before: Wed 01 Jan 2025 13:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200970
IP address blocks: 185.89.160.0/22 maxlen: 22
185.89.160.0/24 maxlen: 24
185.89.161.0/24 maxlen: 24
185.89.162.0/24 maxlen: 24
185.89.163.0/24 maxlen: 24
185.145.16.0/22 maxlen: 22
185.145.16.0/24 maxlen: 24
185.145.17.0/24 maxlen: 24
185.145.18.0/24 maxlen: 24
185.145.19.0/24 maxlen: 24
2a05:d9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:43:3a:0d:b0:eb:be:23:24:dd:6c:a7:b2:86:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=192ab72766099cdca1ced87786764c40bb5fc958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:c7:0f:80:da:95:d1:eb:ab:85:d1:61:0a:
b0:62:40:9a:77:83:8f:a6:2e:73:a4:98:bf:aa:db:
5e:25:a0:8f:71:b0:fd:da:8e:1b:a9:9a:e3:3e:bc:
57:6d:fc:82:40:49:0d:6b:1d:49:cb:d9:34:45:cb:
c9:b2:8a:73:14:4a:4e:34:cd:1e:fe:09:dd:2a:7c:
94:12:43:46:e0:e8:2f:fd:b5:dc:ec:69:af:9f:7f:
a4:0d:5c:6a:d3:96:60:9c:eb:64:5c:3e:45:26:0b:
56:9c:21:cb:b1:33:78:53:15:b6:79:3c:5b:82:d1:
b0:0d:64:f3:6e:32:73:81:39:16:49:82:37:76:43:
65:96:99:ca:84:12:e3:9a:bc:28:82:84:b5:87:14:
48:81:1d:36:87:33:d5:4b:7f:84:e0:e7:92:44:63:
2c:5b:62:bf:e1:65:ea:78:d7:e2:07:8d:ae:36:b4:
f2:f2:7b:c9:53:a3:b7:2b:98:04:b7:14:63:85:73:
07:90:a4:01:4e:c5:ee:ee:e6:8f:1d:5b:d4:7b:3d:
62:0f:69:ee:9b:d0:fb:ce:a2:c2:c7:73:c0:0d:26:
0d:16:b2:f3:de:a1:75:74:b2:b1:1f:9d:dc:30:c3:
76:05:05:ab:c8:bd:05:3e:9c:c5:05:7e:64:ff:1f:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:B7:27:66:09:9C:DC:A1:CE:D8:77:86:76:4C:40:BB:5F:C9:58
X509v3 Authority Key Identifier:
keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/GSq3J2YJnNyhzth3hnZMQLtfyVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.160.0/22
185.145.16.0/22
IPv6:
2a05:d9c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:19:16:82:a1:2b:df:0b:e1:eb:31:cb:e7:74:2e:7c:52:49:
a6:e1:01:ac:5e:ed:e6:25:2a:51:d8:ef:2e:62:3b:74:6b:f2:
58:89:50:b9:ee:72:60:7a:05:56:4b:4e:85:84:9e:87:9f:ba:
96:f1:bd:0d:43:0e:6f:c0:4f:bd:77:45:13:d0:b0:fa:18:4f:
ef:6d:ec:a7:6d:46:da:cc:46:fd:9b:98:76:4c:7f:47:45:86:
15:3b:74:b6:7a:d5:2f:5d:1d:08:fe:8b:34:57:9d:28:de:ac:
e8:05:e6:10:7d:58:a7:c5:2a:43:35:83:1d:66:46:fd:25:40:
72:c0:9a:c3:c2:1c:f1:be:52:d1:63:b2:e6:5e:52:6f:bf:dd:
7f:b8:0e:d0:b5:3e:8e:5c:30:01:32:55:e9:e6:cd:0d:e4:28:
57:04:a1:ab:22:e1:0a:2e:b3:a2:c0:c3:9e:e1:a0:22:01:78:
8a:7b:a3:33:c3:1a:ec:8a:04:4d:96:89:16:39:fd:fd:30:f1:
6b:a7:03:92:1d:df:f8:3b:20:c4:65:5b:90:fe:6b:49:a3:13:
90:af:6a:23:b5:79:df:fc:c7:3e:b2:53:b0:8c:27:22:e3:58:
18:3b:29:15:43:42:c8:ea:ab:27:4d:bd:96:24:72:84:38:91:
1f:e2:90:4e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQiH0M6DbDrviMk3WynsobjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmU4ZmM3OWM5MzUwNGZjMjFmZjcwZmJhNDY5YTRjYmJl
MmYwMjkwHhcNMjUwMTAxMTM0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTJhYjcyNzY2MDk5Y2RjYTFjZWQ4Nzc4Njc2NGM0MGJiNWZjOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcPHD4DaldHrq4XRYQqwYkCad4OP
pi5zpJi/qtteJaCPcbD92o4bqZrjPrxXbfyCQEkNax1Jy9k0RcvJsopzFEpONM0e
/gndKnyUEkNG4Ogv/bXc7Gmvn3+kDVxq05ZgnOtkXD5FJgtWnCHLsTN4UxW2eTxb
gtGwDWTzbjJzgTkWSYI3dkNllpnKhBLjmrwogoS1hxRIgR02hzPVS3+E4OeSRGMs
W2K/4WXqeNfiB42uNrTy8nvJU6O3K5gEtxRjhXMHkKQBTsXu7uaPHVvUez1iD2nu
m9D7zqLCx3PADSYNFrLz3qF1dLKxH53cMMN2BQWryL0FPpzFBX5k/x9kAQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBkqtydmCZzcoc7Yd4Z2TEC7X8lYMB8GA1UdIwQY
MBaAFFe+j8eck1BPwh/3D7pGmky74vApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEt
NTNjNjljMWNlNTBjLzEvR1NxM0oyWUpuTnloenRoM2huWk1RTHRmeVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEtNTNjNjljMWNlNTBj
LzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVmgAwQC
uZEQMA0EAgACMAcDBQMqBdnAMA0GCSqGSIb3DQEBCwUAA4IBAQCNGRaCoSvfC+Hr
McvndC58Ukmm4QGsXu3mJSpR2O8uYjt0a/JYiVC57nJgegVWS06FhJ6Hn7qW8b0N
Qw5vwE+9d0UT0LD6GE/vbeynbUbazEb9m5h2TH9HRYYVO3S2etUvXR0I/os0V50o
3qzoBeYQfVinxSpDNYMdZkb9JUBywJrDwhzxvlLRY7LmXlJvv91/uA7QtT6OXDAB
MlXp5s0N5ChXBKGrIuEKLrOiwMOe4aAiAXiKe6MzwxrsigRNlokWOf39MPFrpwOS
Hd/4OyDEZVuQ/mtJoxOQr2ojtXnf/Mc+slOwjCci41gYOykVQ0LI6qsnTb2WJHKE
OJEf4pBO
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:41 2025 by rpki-client