Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/Gum0-ybT6aoZemudCmaifFQGsX0.roa
File: Gum0-ybT6aoZemudCmaifFQGsX0.roa (raw, json)
Hash identifier: tO7PeSt79NFtj/4Lv+NwzjV3s5CAU+KQ/tU9PE+OMpQ=
Subject key identifier: 1A:E9:B4:FB:26:D3:E9:AA:19:7A:6B:9D:0A:66:A2:7C:54:06:B1:7D
Certificate issuer: /CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
Certificate serial: 019425218622046630DEE5EF808F7B1A3C87
Authority key identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/Gum0-ybT6aoZemudCmaifFQGsX0.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202213
IP address blocks: 185.112.228.0/22 maxlen: 22
185.112.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:86:22:04:66:30:de:e5:ef:80:8f:7b:1a:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ae9b4fb26d3e9aa197a6b9d0a66a27c5406b17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:13:72:59:1f:a8:9c:1a:be:e1:5e:94:7b:
82:be:5a:cb:37:3d:23:d9:ae:4b:ed:81:e1:a4:e2:
ff:53:6a:b6:ff:54:e3:ad:08:a8:a7:5c:fc:02:c5:
b5:5a:b2:cb:13:63:38:e1:f2:83:fc:1e:dc:5d:7f:
03:60:50:de:00:ea:03:d5:13:6a:5b:e7:95:53:08:
1b:f9:14:33:16:b5:f9:30:b5:91:3c:e3:d8:45:6f:
49:32:2b:41:7d:9d:a9:a9:72:13:a4:8a:c4:25:60:
18:ce:00:2e:79:bd:49:ac:a7:95:ef:bf:0f:ac:67:
e5:19:ce:8c:d9:45:19:53:cd:65:0c:ea:4e:ee:a9:
4b:f8:a1:01:95:68:9a:c7:06:e6:18:b5:6c:00:2f:
fc:c0:c0:1f:cc:11:15:48:94:f8:93:0b:05:fa:10:
fa:02:18:5f:37:20:4a:c6:dd:4b:21:d9:40:71:38:
84:74:ff:9f:7d:ef:a8:81:1f:7c:dc:fc:89:90:75:
6d:b5:c8:a7:0b:75:12:da:ec:82:4f:ae:96:f8:ac:
b9:e8:4e:bd:22:0d:fe:78:e0:38:85:eb:a9:92:5d:
35:be:df:a5:8b:4f:1a:2b:61:b9:4d:f3:2b:3e:cf:
0b:f8:76:3b:2b:33:32:3a:33:65:32:0b:f2:f3:a2:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:B4:FB:26:D3:E9:AA:19:7A:6B:9D:0A:66:A2:7C:54:06:B1:7D
X509v3 Authority Key Identifier:
keyid:98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/Gum0-ybT6aoZemudCmaifFQGsX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.228.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:7a:4d:f2:4e:5e:f2:9b:ff:56:1f:ca:d0:ff:c9:94:da:66:
12:3e:87:93:41:40:69:93:a1:62:cb:2b:50:4a:ff:34:3a:95:
a8:b0:8d:0d:30:bd:7d:48:11:a1:10:18:21:79:84:ec:00:21:
09:60:0e:7f:8d:b0:ad:29:98:55:ef:34:b3:a7:e3:73:6e:f2:
4b:ca:f2:01:9c:52:fb:5a:fa:b3:35:34:cc:01:37:2c:ff:43:
9e:66:05:86:a4:55:71:9c:59:6a:e4:bd:8d:d2:8c:e5:fc:59:
09:df:7b:e8:2f:81:ad:85:49:24:8f:87:cf:76:c4:94:d9:68:
84:45:8b:0e:2a:d6:1a:70:cc:92:86:1c:be:88:2c:a5:44:35:
92:e6:be:8c:cf:a6:a4:f2:57:32:ee:63:32:56:f6:a8:4a:0f:
e7:eb:d6:18:b9:89:a3:56:4c:02:6e:17:57:f2:b0:87:de:e4:
cf:97:e3:18:0c:41:d6:11:ce:f9:4a:bd:df:d7:9c:cf:1a:e9:
8c:d8:ee:d1:df:0d:1a:d6:39:ca:c6:0b:0d:86:cd:fe:4f:cc:
d3:d6:0f:45:cc:86:41:ec:53:83:b7:72:d9:2e:42:c2:a1:58:
b5:6e:01:b9:f0:c4:56:a1:fd:ef:3b:64:8f:54:ec:c6:82:ef:
9d:40:c6:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYYiBGYw3uXvgI97GjyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI3ZjA4Zjk1NmQzYWY5NTcxOWM1MzdmYjNmOWI3ZTMz
MDA2YjMwHhcNMjUwMTAyMDM0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWU5YjRmYjI2ZDNlOWFhMTk3YTZiOWQwYTY2YTI3YzU0MDZiMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjcTclkfqJwavuFelHuCvlrLNz0j
2a5L7YHhpOL/U2q2/1TjrQiop1z8AsW1WrLLE2M44fKD/B7cXX8DYFDeAOoD1RNq
W+eVUwgb+RQzFrX5MLWRPOPYRW9JMitBfZ2pqXITpIrEJWAYzgAueb1JrKeV778P
rGflGc6M2UUZU81lDOpO7qlL+KEBlWiaxwbmGLVsAC/8wMAfzBEVSJT4kwsF+hD6
AhhfNyBKxt1LIdlAcTiEdP+ffe+ogR983PyJkHVttcinC3US2uyCT66W+Ky56E69
Ig3+eOA4heupkl01vt+li08aK2G5TfMrPs8L+HY7KzMyOjNlMgvy86JznwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBrptPsm0+mqGXprnQpmonxUBrF9MB8GA1UdIwQY
MBaAFJj7fwj5VtOvlXGcU3+z+bfjMAazMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0X0NQbFcwNi1WY1p4VGY3UDV0LU13QnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWZiMzUtOTc4Ny00NmYwLWI3OTkt
ZDVjMjExZWIzOTU2LzEvR3VtMC15YlQ2YW9aZW11ZENtYWlmRlFHc1gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZWZiMzUtOTc4Ny00NmYwLWI3OTktZDVjMjExZWIzOTU2
LzEvbVB0X0NQbFcwNi1WY1p4VGY3UDV0LU13QnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXDkMA0G
CSqGSIb3DQEBCwUAA4IBAQC9ek3yTl7ym/9WH8rQ/8mU2mYSPoeTQUBpk6FiyytQ
Sv80OpWosI0NML19SBGhEBgheYTsACEJYA5/jbCtKZhV7zSzp+NzbvJLyvIBnFL7
WvqzNTTMATcs/0OeZgWGpFVxnFlq5L2N0ozl/FkJ33voL4GthUkkj4fPdsSU2WiE
RYsOKtYacMyShhy+iCylRDWS5r6Mz6ak8lcy7mMyVvaoSg/n69YYuYmjVkwCbhdX
8rCH3uTPl+MYDEHWEc75Sr3f15zPGumM2O7R3w0a1jnKxgsNhs3+T8zT1g9FzIZB
7FODt3LZLkLCoVi1bgG58MRWof3vO2SPVOzGgu+dQMbK
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:15 2025 by rpki-client