Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa
File: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (raw, json)
Hash identifier: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=
Subject key identifier: 83:16:37:72:A4:3D:02:D6:C3:8E:B0:7F:FA:8B:69:1D:BE:88:AD:BD
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019424B260AB3611B1B23D42E295A0DAEDF3
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215806
IP address blocks: 195.47.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:60:ab:36:11:b1:b2:3d:42:e2:95:a0:da:ed:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83163772a43d02d6c38eb07ffa8b691dbe88adbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:9a:84:89:21:b7:79:0b:b1:ed:5c:4e:71:
6e:57:81:f4:f9:bc:4d:b6:d7:07:21:1e:9b:f5:1f:
4e:ea:62:7c:57:67:f3:7d:a7:e7:ed:d6:7c:6a:65:
cf:55:e1:7a:6f:29:ca:0e:ea:a1:bb:f9:77:3a:9f:
ac:76:04:c2:ae:40:4e:42:a8:72:ad:49:fd:9b:fd:
b4:40:3b:a2:f2:6d:39:21:54:1b:04:dc:49:b4:17:
67:f5:e4:cd:b2:be:34:ea:93:cf:22:02:3d:b4:5e:
c6:b0:e0:0b:13:de:34:c5:21:7d:19:13:44:5e:7d:
8f:dc:e4:c1:d5:6e:fa:c6:5b:06:3b:a5:7b:66:ef:
05:5e:e9:94:e4:e5:6c:c2:87:e1:38:8d:ae:97:8d:
6b:2a:bb:23:de:56:1b:b7:77:04:c6:1d:2d:c0:46:
7b:99:71:67:d9:33:ca:d5:3f:db:19:83:c0:a3:6b:
72:c3:c8:99:92:8a:67:d2:0a:4b:45:f0:25:89:9b:
66:25:63:f5:b2:c4:94:b5:1a:b6:02:7a:3e:b2:38:
b4:c1:a5:ee:58:f6:49:06:b8:56:02:4b:48:16:4f:
db:4f:72:3b:0b:ae:99:d7:0f:88:fe:f9:c7:74:2c:
0e:0b:04:61:86:b5:84:c4:10:d1:20:85:2c:6f:cb:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:16:37:72:A4:3D:02:D6:C3:8E:B0:7F:FA:8B:69:1D:BE:88:AD:BD
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d1:bb:e6:73:ba:6d:c7:87:3f:fd:ac:49:00:dd:12:cc:26:
0f:4f:78:7f:25:c0:c3:7b:76:dc:be:fd:cc:a7:a1:ff:bb:cf:
8d:80:5a:2e:7c:8c:05:57:e3:eb:8e:7f:41:4e:b9:ea:64:0d:
05:2b:6e:cc:32:7c:a1:4d:1b:22:23:9b:c7:84:4d:11:ed:7d:
41:f8:19:97:62:d6:f4:a2:51:74:0d:8c:2b:b8:8c:05:31:ba:
00:bd:8c:45:bb:a7:b2:ff:d8:bd:c3:c0:7f:c8:a8:3e:6c:40:
16:21:a1:54:28:b9:d3:58:1d:8c:dc:f9:6f:0d:37:1a:1a:a9:
5d:e6:5b:d9:15:66:ec:f4:5a:7a:25:6c:66:f7:62:2a:46:d3:
88:02:fe:79:1c:78:57:90:0a:f8:dd:0f:86:90:2b:df:04:69:
cc:d5:fa:f5:60:1f:53:41:36:34:fa:b3:9b:47:cd:7b:d0:4f:
28:53:c9:e1:59:28:0a:3b:c0:7c:94:6a:bf:a7:51:c3:80:dd:
ce:c2:90:e8:c1:cf:50:b5:0b:68:b5:bc:3b:ae:80:20:df:11:
eb:d4:1c:6d:4e:1a:62:ba:26:40:8c:3c:f9:91:9f:c8:06:09:
fb:2b:51:55:48:90:f8:5a:df:55:9f:f8:cb:e8:54:6d:d8:08:
c8:b5:23:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksmCrNhGxsj1C4pWg2u3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjUwMTAyMDE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzE2Mzc3MmE0M2QwMmQ2YzM4ZWIwN2ZmYThiNjkxZGJlODhhZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh6ahIkht3kLse1cTnFuV4H0+bxN
ttcHIR6b9R9O6mJ8V2fzfafn7dZ8amXPVeF6bynKDuqhu/l3Op+sdgTCrkBOQqhy
rUn9m/20QDui8m05IVQbBNxJtBdn9eTNsr406pPPIgI9tF7GsOALE940xSF9GRNE
Xn2P3OTB1W76xlsGO6V7Zu8FXumU5OVswofhOI2ul41rKrsj3lYbt3cExh0twEZ7
mXFn2TPK1T/bGYPAo2tyw8iZkopn0gpLRfAliZtmJWP1ssSUtRq2Ano+sji0waXu
WPZJBrhWAktIFk/bT3I7C66Z1w+I/vnHdCwOCwRhhrWExBDRIIUsb8tH9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMWN3KkPQLWw46wf/qLaR2+iK29MB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvZ3hZM2NxUTlBdGJEanJCXy1vdHBIYjZJcmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/8MA0G
CSqGSIb3DQEBCwUAA4IBAQAp0bvmc7ptx4c//axJAN0SzCYPT3h/JcDDe3bcvv3M
p6H/u8+NgFoufIwFV+Prjn9BTrnqZA0FK27MMnyhTRsiI5vHhE0R7X1B+BmXYtb0
olF0DYwruIwFMboAvYxFu6ey/9i9w8B/yKg+bEAWIaFUKLnTWB2M3PlvDTcaGqld
5lvZFWbs9Fp6JWxm92IqRtOIAv55HHhXkAr43Q+GkCvfBGnM1fr1YB9TQTY0+rOb
R8170E8oU8nhWSgKO8B8lGq/p1HDgN3OwpDowc9QtQtotbw7roAg3xHr1BxtThpi
uiZAjDz5kZ/IBgn7K1FVSJD4Wt9Vn/jL6FRt2AjItSPi
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:57 2025 by rpki-client