Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/gr8V9GG2sn3v6HXV22VsNMEvx-4.roa
File: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (raw, json)
Hash identifier: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=
Subject key identifier: 82:BF:15:F4:61:B6:B2:7D:EF:E8:75:D5:DB:65:6C:34:C1:2F:C7:EE
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 019424458F7E165EC680C9B3C585B63A2FED
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/gr8V9GG2sn3v6HXV22VsNMEvx-4.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200960
IP address blocks: 31.14.103.0/24 maxlen: 24
31.14.255.0/24 maxlen: 24
185.18.196.0/24 maxlen: 24
185.18.197.0/24 maxlen: 24
185.45.72.0/24 maxlen: 24
217.148.136.0/24 maxlen: 24
217.148.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8f:7e:16:5e:c6:80:c9:b3:c5:85:b6:3a:2f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82bf15f461b6b27defe875d5db656c34c12fc7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:36:ab:b5:3d:f0:42:95:4d:be:71:43:91:
bd:0a:ec:0e:b6:43:4e:b6:c8:d1:19:4f:dc:9f:d0:
2c:ab:79:2e:2e:ac:c7:f3:7d:19:a1:1a:bc:a2:36:
bf:c4:fb:b2:12:25:80:57:ff:3b:1f:3f:35:3d:0e:
4e:ad:14:6f:39:af:b8:92:8f:aa:f7:a2:77:86:37:
8c:2d:14:b2:b1:fa:67:2b:43:9e:20:9f:9a:d7:fe:
e4:79:7f:43:6f:d4:53:b2:5e:36:b6:a2:f2:65:0f:
b6:60:b5:e2:1a:98:48:99:42:3a:50:0c:23:d6:80:
bc:6b:cc:0c:7f:ad:17:cf:17:90:cd:5b:cf:c3:93:
b5:c7:08:5f:90:ba:ea:20:ed:97:e0:67:6e:26:38:
6c:97:75:81:4a:8a:7d:1b:94:2d:e0:d1:17:13:8f:
03:f0:35:69:a5:6a:a5:bb:3c:47:bb:01:2c:b9:0f:
90:5a:51:43:4d:dc:48:4c:d5:61:28:1a:04:9a:17:
78:b9:04:4d:03:e0:d2:5d:4e:b1:c6:9d:ac:19:af:
4a:c4:0f:f6:75:04:54:12:fa:71:05:57:bd:37:30:
d3:39:44:a7:23:b8:6c:d3:20:fd:76:5a:dc:36:19:
1f:67:cf:69:52:bf:b9:72:01:29:60:a6:db:1f:72:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BF:15:F4:61:B6:B2:7D:EF:E8:75:D5:DB:65:6C:34:C1:2F:C7:EE
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/gr8V9GG2sn3v6HXV22VsNMEvx-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.103.0/24
31.14.255.0/24
185.18.196.0/23
185.45.72.0/24
217.148.136.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b3:af:9f:eb:2f:6b:bf:03:11:94:93:7e:ba:90:9b:76:5a:
fa:c9:af:64:c9:9d:9f:11:8a:7c:8d:59:54:23:08:02:12:6f:
52:52:78:c2:3c:54:40:e9:06:7f:0e:7e:33:4b:78:e0:1b:e9:
1f:cf:d6:c5:79:78:b4:cc:ff:dd:1e:d7:67:7d:af:fd:e2:9f:
9d:7c:ed:f5:8e:71:fe:cb:13:f1:16:56:58:45:d8:4c:99:b3:
b3:d5:7d:56:86:42:53:a9:bc:16:03:17:99:d7:a5:1e:50:d0:
00:38:8c:88:dd:84:d5:db:ee:c2:10:c9:bd:af:e5:e0:4d:d1:
43:1a:aa:11:24:bf:f7:f6:7e:3e:9f:39:e9:77:13:d9:64:8f:
50:47:03:85:18:a5:dc:f1:b2:3b:94:31:46:02:6b:f3:70:25:
5d:b7:6b:89:f4:d7:e9:62:02:bb:a5:47:a3:42:99:a6:8d:c5:
7c:12:59:5c:a9:e3:3d:97:ae:4c:24:df:44:93:be:a3:85:28:
20:a1:91:36:13:c2:fe:21:7b:36:ce:2c:ee:ed:af:78:a4:46:
47:86:32:b7:c3:8f:cb:14:c8:72:30:fa:3c:41:1c:fa:cd:10:
9a:29:08:12:c6:90:4c:97:9a:34:6c:ce:55:06:d9:00:08:7b:
65:3e:eb:69
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQkRY9+Fl7GgMmzxYW2Oi/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5
OTFjZWMwHhcNMjUwMTAxMjM0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmJmMTVmNDYxYjZiMjdkZWZlODc1ZDVkYjY1NmMzNGMxMmZjN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yg2q7U98EKVTb5xQ5G9CuwOtkNO
tsjRGU/cn9Asq3kuLqzH830ZoRq8oja/xPuyEiWAV/87Hz81PQ5OrRRvOa+4ko+q
96J3hjeMLRSysfpnK0OeIJ+a1/7keX9Db9RTsl42tqLyZQ+2YLXiGphImUI6UAwj
1oC8a8wMf60XzxeQzVvPw5O1xwhfkLrqIO2X4GduJjhsl3WBSop9G5Qt4NEXE48D
8DVppWqluzxHuwEsuQ+QWlFDTdxITNVhKBoEmhd4uQRNA+DSXU6xxp2sGa9KxA/2
dQRUEvpxBVe9NzDTOUSnI7hs0yD9dlrcNhkfZ89pUr+5cgEpYKbbH3LQewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIK/FfRhtrJ97+h11dtlbDTBL8fuMB8GA1UdIwQY
MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt
ODI2NjBlZTRlYWM0LzEvZ3I4VjlHRzJzbjN2NkhYVjIyVnNOTUV2eC00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0
LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHw5nAwQA
Hw7/AwQBuRLEAwQAuS1IAwQB2ZSIMA0GCSqGSIb3DQEBCwUAA4IBAQCFs6+f6y9r
vwMRlJN+upCbdlr6ya9kyZ2fEYp8jVlUIwgCEm9SUnjCPFRA6QZ/Dn4zS3jgG+kf
z9bFeXi0zP/dHtdnfa/94p+dfO31jnH+yxPxFlZYRdhMmbOz1X1WhkJTqbwWAxeZ
16UeUNAAOIyI3YTV2+7CEMm9r+XgTdFDGqoRJL/39n4+nznpdxPZZI9QRwOFGKXc
8bI7lDFGAmvzcCVdt2uJ9NfpYgK7pUejQpmmjcV8EllcqeM9l65MJN9Ek76jhSgg
oZE2E8L+IXs2zizu7a94pEZHhjK3w4/LFMhyMPo8QRz6zRCaKQgSxpBMl5o0bM5V
BtkACHtlPutp
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:52 2025 by rpki-client