Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/gJhRP993vA2Sp0o4Dg4qL2tfBcg.roa
File: gJhRP993vA2Sp0o4Dg4qL2tfBcg.roa (raw, json)
Hash identifier: XddsBmTvT7ew4EphkpQIc8aDEqjL+V8Jd1KR6KWc3o0=
Subject key identifier: 80:98:51:3F:DF:77:BC:0D:92:A7:4A:38:0E:0E:2A:2F:6B:5F:05:C8
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA76AC4E54BFA17B960FE58DCA48F3
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/gJhRP993vA2Sp0o4Dg4qL2tfBcg.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199980
IP address blocks: 82.160.168.0/23 maxlen: 23
82.160.170.0/24 maxlen: 24
82.160.180.0/24 maxlen: 24
88.199.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:ac:4e:54:bf:a1:7b:96:0f:e5:8d:ca:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8098513fdf77bc0d92a74a380e0e2a2f6b5f05c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:4e:06:ca:76:c7:75:72:6e:d8:86:f3:eb:
5f:d2:e9:41:49:b9:02:a3:d7:b4:3c:47:f2:72:ab:
65:32:83:fc:bd:f5:3e:8a:02:c1:59:fc:85:07:ae:
31:f7:29:51:a7:64:3d:e6:66:9e:65:ed:46:95:6a:
f1:7a:db:7d:d0:cf:14:14:2f:fe:74:24:a9:19:bd:
76:e4:b9:fd:6e:60:e5:6c:57:92:d8:aa:d4:e0:9f:
48:33:f8:c4:08:b9:d9:e2:b1:c7:94:d7:a9:89:52:
59:a3:21:b1:97:96:f1:e2:79:37:ac:63:3a:a9:10:
73:28:ad:e0:14:d5:96:f5:07:7e:44:f5:2d:3d:52:
f1:2a:07:6f:0c:3f:c3:55:52:62:e0:1c:0b:25:c8:
df:80:2f:78:3b:2a:45:ea:bf:93:a4:ff:af:16:0a:
cf:7e:0f:ad:dc:06:da:8e:fe:24:58:14:af:86:97:
b8:51:d5:8b:de:c6:dc:53:4a:1a:8e:0e:2d:0b:a2:
d6:35:19:e8:53:c8:23:90:8a:20:d7:f4:db:76:fb:
e1:50:4c:74:42:ce:f5:f8:fd:a5:52:51:8a:89:35:
3a:1f:36:67:6c:31:f6:d6:38:78:43:99:61:13:10:
25:5f:b2:97:fe:49:ad:35:d2:c4:89:78:7e:77:9b:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:51:3F:DF:77:BC:0D:92:A7:4A:38:0E:0E:2A:2F:6B:5F:05:C8
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/gJhRP993vA2Sp0o4Dg4qL2tfBcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.168.0-82.160.170.255
82.160.180.0/24
88.199.116.0/22
Signature Algorithm: sha256WithRSAEncryption
14:b7:03:ae:ea:e8:d6:8b:76:00:26:22:7f:3b:24:45:66:dc:
c5:17:86:fe:c0:28:cc:a5:34:31:2f:d9:68:d5:aa:80:30:b4:
d9:7a:13:44:7c:9e:cb:6d:29:fc:91:b9:7d:e2:b2:a0:c3:a9:
1e:c7:7f:53:c8:ec:69:58:25:1d:9a:36:bb:07:70:f1:5f:42:
6e:bb:3e:a3:21:a1:12:06:31:98:df:65:75:d4:45:02:94:4e:
c0:3a:50:a7:ec:21:36:8c:b7:89:7e:f7:ff:82:f4:db:c3:71:
f0:89:96:59:77:bb:57:ba:72:1e:56:72:bb:54:52:a2:f8:23:
74:82:ed:a3:0d:da:f0:e2:57:7e:e0:2b:84:10:6f:8b:8d:df:
cc:bd:99:32:c5:de:41:21:d5:1a:a8:fd:6f:5f:ea:d6:ba:ae:
f1:44:6c:9e:b0:e2:44:2a:bb:74:6a:c0:0c:07:5d:23:69:6a:
5a:8d:57:e6:a3:e2:b9:3e:eb:f6:ef:fc:68:09:af:8f:c4:34:
29:8e:3e:49:47:41:ce:d5:8c:39:15:bd:d8:fc:78:7a:c2:90:
14:69:ca:3e:a0:57:0d:8a:f2:34:c4:0f:55:bf:d3:71:ca:ed:
f5:b4:f6:d9:7f:41:c9:14:75:8d:a6:8d:22:e7:55:bd:e4:ef:
cc:22:2e:fb
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQf+nasTlS/oXuWD+WNykjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz
NmFiZmYwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDk4NTEzZmRmNzdiYzBkOTJhNzRhMzgwZTBlMmEyZjZiNWYwNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8dOBsp2x3VybtiG8+tf0ulBSbkC
o9e0PEfycqtlMoP8vfU+igLBWfyFB64x9ylRp2Q95maeZe1GlWrxett90M8UFC/+
dCSpGb125Ln9bmDlbFeS2KrU4J9IM/jECLnZ4rHHlNepiVJZoyGxl5bx4nk3rGM6
qRBzKK3gFNWW9Qd+RPUtPVLxKgdvDD/DVVJi4BwLJcjfgC94OypF6r+TpP+vFgrP
fg+t3Abajv4kWBSvhpe4UdWL3sbcU0oajg4tC6LWNRnoU8gjkIog1/TbdvvhUEx0
Qs71+P2lUlGKiTU6HzZnbDH21jh4Q5lhExAlX7KX/kmtNdLEiXh+d5vUeQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFICYUT/fd7wNkqdKOA4OKi9rXwXIMB8GA1UdIwQY
MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt
YWZmOTJjMTZkOGUzLzEvZ0poUlA5OTN2QTJTcDBvNERnNHFMMnRmQmNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz
LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBANSoKgD
BABSoKoDBABSoLQDBAJYx3QwDQYJKoZIhvcNAQELBQADggEBABS3A67q6NaLdgAm
In87JEVm3MUXhv7AKMylNDEv2WjVqoAwtNl6E0R8nsttKfyRuX3isqDDqR7Hf1PI
7GlYJR2aNrsHcPFfQm67PqMhoRIGMZjfZXXURQKUTsA6UKfsITaMt4l+9/+C9NvD
cfCJlll3u1e6ch5WcrtUUqL4I3SC7aMN2vDiV37gK4QQb4uN38y9mTLF3kEh1Rqo
/W9f6ta6rvFEbJ6w4kQqu3RqwAwHXSNpalqNV+aj4rk+6/bv/GgJr4/ENCmOPklH
Qc7VjDkVvdj8eHrCkBRpyj6gVw2K8jTED1W/03HK7fW09tl/QckUdY2mjSLnVb3k
78wiLvs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:12 2025 by rpki-client