Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GcHslNVvtLMqacjR3pPEHzo6qdY.roa
File: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (raw, json)
Hash identifier: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=
Subject key identifier: 19:C1:EC:94:D5:6F:B4:B3:2A:69:C8:D1:DE:93:C4:1F:3A:3A:A9:D6
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 0194221FE99AA671B88DC6749FE9703AA678
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GcHslNVvtLMqacjR3pPEHzo6qdY.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15935
IP address blocks: 31.130.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e9:9a:a6:71:b8:8d:c6:74:9f:e9:70:3a:a6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19c1ec94d56fb4b32a69c8d1de93c41f3a3aa9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:2f:ac:bb:33:f1:b2:51:dc:78:7d:41:1d:
6b:c5:29:a2:3b:d9:d8:b0:cc:be:34:6a:fe:d6:c2:
89:18:08:49:1e:1e:ff:90:2c:b7:6d:44:83:b6:d0:
17:37:54:d8:16:e9:be:b3:a8:88:1a:14:1d:01:82:
f0:7d:97:b2:ed:e5:f7:31:be:cf:ad:f6:5d:26:b5:
32:6b:52:70:b3:9d:dd:17:21:b9:63:1b:e4:53:ff:
fc:a9:f1:50:13:16:80:34:e8:fb:51:4d:99:b3:f4:
ea:33:a3:85:54:1b:1a:2e:8b:5a:89:8b:c7:17:e7:
59:6d:91:80:4b:c9:9c:35:31:8a:68:b7:c1:3e:e0:
b7:d9:99:5f:69:da:4d:90:3a:8d:47:a5:3e:8b:02:
5f:bb:f3:82:16:0b:72:0a:5b:89:8d:84:95:81:bd:
aa:b0:5d:33:00:2f:23:12:9d:3f:1b:3c:36:a9:3a:
a3:f5:93:ec:15:cb:ea:26:56:d4:c9:e8:26:35:04:
9a:a4:e7:f6:84:c3:40:a5:23:7c:fe:95:7b:d4:cf:
0a:c0:ba:64:d9:7c:26:90:8a:ac:43:de:93:60:c9:
e0:0e:2b:10:c8:e7:4e:f7:c4:39:dc:e9:8f:d0:32:
c0:a7:a1:e5:eb:5a:41:9f:a7:5c:88:8b:b5:d9:f8:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:EC:94:D5:6F:B4:B3:2A:69:C8:D1:DE:93:C4:1F:3A:3A:A9:D6
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GcHslNVvtLMqacjR3pPEHzo6qdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.168.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:a2:46:bd:bf:b3:b8:09:e6:9d:84:77:3d:b3:d1:aa:d4:a7:
42:fd:ea:d9:b9:60:0b:13:87:aa:f7:76:77:a6:9b:35:4f:69:
58:c5:7f:2a:ad:2b:19:c7:30:0d:1a:b0:5b:98:23:fb:e3:f7:
cb:ab:41:a9:2f:24:10:81:be:6a:23:50:3d:1c:c8:9e:ee:82:
26:89:78:35:e8:45:0a:ea:69:ee:89:f8:15:0c:3c:cb:91:a7:
dc:15:49:52:2d:dc:3d:f0:75:bb:58:74:00:a5:da:b8:1c:15:
bd:00:db:78:41:dd:ad:2f:99:fc:3c:e2:88:ad:17:e7:8d:47:
ac:42:82:ff:1a:11:51:6d:ee:8f:0b:c8:4b:06:f2:05:26:32:
3e:3d:73:64:fb:d3:a6:44:a4:c1:a7:56:13:59:a5:67:c9:ec:
ff:8c:74:00:37:ec:1b:bf:eb:3a:b3:08:d1:5b:2d:88:99:7d:
5e:8f:a3:5f:8c:7e:a7:fd:61:ce:34:ae:e6:12:92:4c:53:11:
4b:5e:2c:20:85:0e:f0:1c:ff:19:61:f8:71:e8:3f:66:95:1b:
33:6a:08:1c:a0:5e:07:66:57:77:37:61:ec:5b:57:e9:54:99:
06:13:84:b5:ab:10:68:af:9c:95:b9:4d:bc:99:1c:bf:b2:d0:
8e:a6:cd:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH+mapnG4jcZ0n+lwOqZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI4MTdhMjk4ODJkNDMzYmYxYmI4ZWJjNTliMmZmMjU2
ZTgwM2YwHhcNMjUwMTAxMTM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWMxZWM5NGQ1NmZiNGIzMmE2OWM4ZDFkZTkzYzQxZjNhM2FhOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEkvrLsz8bJR3Hh9QR1rxSmiO9nY
sMy+NGr+1sKJGAhJHh7/kCy3bUSDttAXN1TYFum+s6iIGhQdAYLwfZey7eX3Mb7P
rfZdJrUya1Jws53dFyG5YxvkU//8qfFQExaANOj7UU2Zs/TqM6OFVBsaLotaiYvH
F+dZbZGAS8mcNTGKaLfBPuC32ZlfadpNkDqNR6U+iwJfu/OCFgtyCluJjYSVgb2q
sF0zAC8jEp0/Gzw2qTqj9ZPsFcvqJlbUyegmNQSapOf2hMNApSN8/pV71M8KwLpk
2XwmkIqsQ96TYMngDisQyOdO98Q53OmP0DLAp6Hl61pBn6dciIu12fiCvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnB7JTVb7SzKmnI0d6TxB86OqnWMB8GA1UdIwQY
MBaAFBlCgXopiC1DO/G7jrxZsv8lboA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUt
ZmRkZTU4YWIyOWY5LzEvR2NIc2xOVnZ0TE1xYWNqUjNwUEVIem82cWRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUtZmRkZTU4YWIyOWY5
LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4KoMA0G
CSqGSIb3DQEBCwUAA4IBAQCuoka9v7O4CeadhHc9s9Gq1KdC/erZuWALE4eq93Z3
pps1T2lYxX8qrSsZxzANGrBbmCP74/fLq0GpLyQQgb5qI1A9HMie7oImiXg16EUK
6mnuifgVDDzLkafcFUlSLdw98HW7WHQApdq4HBW9ANt4Qd2tL5n8POKIrRfnjUes
QoL/GhFRbe6PC8hLBvIFJjI+PXNk+9OmRKTBp1YTWaVnyez/jHQAN+wbv+s6swjR
Wy2ImX1ej6NfjH6n/WHONK7mEpJMUxFLXiwghQ7wHP8ZYfhx6D9mlRszaggcoF4H
Zld3N2HsW1fpVJkGE4S1qxBor5yVuU28mRy/stCOps0z
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:53 2025 by rpki-client