Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/GQnwoz9GTo0_6aViyidBMz0OXtQ.roa
File: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (raw, json)
Hash identifier: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=
Subject key identifier: 19:09:F0:A3:3F:46:4E:8D:3F:E9:A5:62:CA:27:41:33:3D:0E:5E:D4
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 01941F8C31DD3EB015CEE869F4176FD2BA63
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/GQnwoz9GTo0_6aViyidBMz0OXtQ.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16228
IP address blocks: 80.246.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:31:dd:3e:b0:15:ce:e8:69:f4:17:6f:d2:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1909f0a33f464e8d3fe9a562ca2741333d0e5ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:7d:1f:ca:aa:de:0c:7d:76:66:d2:8c:35:
08:98:45:2d:e1:e9:5e:3c:bc:51:f8:7a:17:1b:ec:
f9:31:fb:0f:ec:0f:f7:5d:5d:51:69:34:e3:d4:3a:
49:bd:bb:a9:64:a0:28:7e:01:50:01:29:ad:92:37:
70:a7:9f:a0:dc:30:f5:bb:43:3e:2c:49:2a:42:e4:
7d:05:f7:31:38:50:bb:08:c2:85:c3:7a:7e:31:0e:
b3:e1:d3:0c:0d:7d:ee:a1:68:f0:05:67:f2:89:ed:
bf:c0:3d:6a:62:ef:93:2f:fe:b7:3c:46:23:1c:9a:
8e:87:0c:bb:97:52:95:07:bf:7a:4c:38:9f:dc:2d:
0a:ad:e1:f3:f8:ae:f5:50:ae:dc:90:01:65:7b:fe:
b9:ef:bc:79:be:d0:d0:c7:04:44:4f:64:f8:55:30:
de:e5:dc:4b:1a:9e:4c:db:94:ad:73:bf:8f:e7:63:
e6:3e:af:2d:5b:e2:0c:3a:cf:5c:68:04:c5:26:03:
75:74:6e:c2:bc:5f:fd:ef:a9:24:fc:08:5b:04:98:
e0:0c:e4:4e:f0:dd:c2:27:8f:da:09:61:b6:c7:4e:
31:b6:42:f1:16:f6:91:20:b5:3e:e2:ac:6c:78:fd:
63:6d:3e:31:f9:e3:56:68:cc:91:cb:51:5e:1d:6d:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:F0:A3:3F:46:4E:8D:3F:E9:A5:62:CA:27:41:33:3D:0E:5E:D4
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/GQnwoz9GTo0_6aViyidBMz0OXtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.160.0/20
Signature Algorithm: sha256WithRSAEncryption
15:a6:e6:e1:ee:ed:7d:3a:6b:57:0c:00:25:49:af:99:96:f6:
e3:3f:ca:53:67:ab:de:c1:8d:1b:61:fa:89:43:50:3f:94:17:
b1:26:f6:2f:f2:52:75:5a:33:b3:98:77:65:03:0e:38:1d:87:
e5:47:12:82:f8:be:4b:ce:be:61:b7:b4:8a:ec:5f:b4:6b:73:
28:38:c0:05:1f:d2:7f:5c:80:ab:cb:fa:ef:5d:c9:a4:f7:fc:
0c:b9:fd:e0:7e:43:d6:89:93:f1:8d:a8:8b:9d:46:de:4e:78:
c4:9b:ec:fc:8f:9c:90:95:0a:21:ac:b2:f0:c4:56:f8:0d:c2:
c8:36:b1:a9:59:ca:31:e5:88:a4:6b:f2:35:34:03:bf:04:63:
2d:2f:e4:5b:63:fa:04:d4:50:a7:14:c6:ac:8b:17:c9:06:56:
73:32:3e:cf:d2:a7:88:b2:3f:f6:93:08:34:c4:91:5b:60:75:
80:bb:e9:96:32:02:9f:e3:d3:43:d9:7c:45:13:58:7c:5d:65:
cc:7b:d6:c5:e4:cb:11:e8:09:c7:c5:e1:d8:68:fb:5d:98:bf:
0c:5b:50:8f:cb:7d:2d:42:d8:29:8a:2b:03:64:2f:d9:4e:1f:
e1:44:3f:15:88:87:6b:39:f9:bf:ae:96:03:73:ee:c4:e1:90:
3f:f6:cc:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDHdPrAVzuhp9Bdv0rpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGYyMDZmZGNjYWI4M2RkZmUxOWU4OTZlOTE2M2Q3YTlh
ZDQ3NzkwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTA5ZjBhMzNmNDY0ZThkM2ZlOWE1NjJjYTI3NDEzMzNkMGU1ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7l9H8qq3gx9dmbSjDUImEUt4ele
PLxR+HoXG+z5MfsP7A/3XV1RaTTj1DpJvbupZKAofgFQASmtkjdwp5+g3DD1u0M+
LEkqQuR9BfcxOFC7CMKFw3p+MQ6z4dMMDX3uoWjwBWfyie2/wD1qYu+TL/63PEYj
HJqOhwy7l1KVB796TDif3C0KreHz+K71UK7ckAFle/6577x5vtDQxwRET2T4VTDe
5dxLGp5M25Stc7+P52PmPq8tW+IMOs9caATFJgN1dG7CvF/976kk/AhbBJjgDORO
8N3CJ4/aCWG2x04xtkLxFvaRILU+4qxseP1jbT4x+eNWaMyRy1FeHW2uSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkJ8KM/Rk6NP+mlYsonQTM9Dl7UMB8GA1UdIwQY
MBaAFExPIG/cyrg93+GeiW6RY9eprUd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTIt
YWQ1NDkzMWMyNGIzLzEvR1Fud296OUdUbzBfNmFWaXlpZEJNejBPWHRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTItYWQ1NDkzMWMyNGIz
LzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPagMA0G
CSqGSIb3DQEBCwUAA4IBAQAVpubh7u19OmtXDAAlSa+ZlvbjP8pTZ6vewY0bYfqJ
Q1A/lBexJvYv8lJ1WjOzmHdlAw44HYflRxKC+L5Lzr5ht7SK7F+0a3MoOMAFH9J/
XICry/rvXcmk9/wMuf3gfkPWiZPxjaiLnUbeTnjEm+z8j5yQlQohrLLwxFb4DcLI
NrGpWcox5Yika/I1NAO/BGMtL+RbY/oE1FCnFMasixfJBlZzMj7P0qeIsj/2kwg0
xJFbYHWAu+mWMgKf49ND2XxFE1h8XWXMe9bF5MsR6AnHxeHYaPtdmL8MW1CPy30t
QtgpiisDZC/ZTh/hRD8ViIdrOfm/rpYDc+7E4ZA/9syc
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:46 2025 by rpki-client