Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/G0WvFuc_CxaN6eARB2yClzaX2KQ.roa
File: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (raw, json)
Hash identifier: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=
Subject key identifier: 1B:45:AF:16:E7:3F:0B:16:8D:E9:E0:11:07:6C:82:97:36:97:D8:A4
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019423D6DF62AC6CA26153E58202620D78D0
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/G0WvFuc_CxaN6eARB2yClzaX2KQ.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204781
IP address blocks: 185.229.0.0/23 maxlen: 23
185.229.0.0/24 maxlen: 24
185.229.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:df:62:ac:6c:a2:61:53:e5:82:02:62:0d:78:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b45af16e73f0b168de9e011076c82973697d8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:1f:7a:d2:0b:52:32:08:49:a4:6b:ec:1f:
ce:8b:3e:2f:6d:7f:df:d3:bd:1a:db:7e:77:a1:97:
55:fd:f1:9d:d6:4b:30:01:3f:20:20:3d:bb:76:2b:
32:f2:6a:96:62:bc:11:db:d6:ae:d2:0e:f9:d3:d3:
73:ac:e8:30:f8:58:0a:81:94:6b:f4:36:01:d6:1a:
1e:59:02:16:f2:a7:07:35:74:cd:82:76:65:66:e8:
21:cb:03:6c:2b:69:12:27:4b:08:7d:c3:0f:5a:91:
33:12:ff:5f:e1:1a:bc:f9:ad:26:0e:04:13:bc:17:
c4:69:01:11:22:99:73:36:e4:f0:d4:8d:f2:d6:fd:
e7:da:31:0a:f9:e2:e1:45:25:ca:d4:ee:ab:d4:32:
26:11:dc:29:12:40:14:24:bb:c1:70:25:2c:de:9c:
09:ef:06:3e:8c:f7:b1:eb:76:e1:43:9e:6a:f4:09:
4a:27:b9:e1:fd:58:94:95:b2:1f:ef:f5:96:57:55:
68:24:cc:ab:c3:e6:6f:7e:8e:e9:a3:4c:fc:a8:40:
63:ef:dc:d9:a7:23:44:f9:6c:5c:63:b4:77:34:c2:
aa:29:c9:ed:2e:09:4d:7e:ca:a3:0a:a6:dc:8d:7e:
b5:97:e7:30:64:b3:4f:ea:d8:b3:27:c5:a6:41:b6:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:AF:16:E7:3F:0B:16:8D:E9:E0:11:07:6C:82:97:36:97:D8:A4
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/G0WvFuc_CxaN6eARB2yClzaX2KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:c2:74:f2:ed:21:a3:c4:a0:bf:08:d5:92:3f:de:39:1d:12:
d1:23:40:c9:98:68:a0:65:2d:11:a3:81:56:99:b4:56:cb:5e:
a1:d9:ae:9e:74:ba:9a:5d:fc:e0:1d:1b:3a:7d:e5:44:42:8c:
59:24:58:96:12:9e:3e:30:cc:7f:18:f8:6d:57:44:ab:52:0c:
3c:ec:0c:65:32:ec:c6:25:d3:0f:b5:23:1f:d8:f7:0a:64:6d:
56:bc:4d:a9:54:5d:64:c0:76:1d:33:f2:a4:b1:e1:92:cb:ff:
18:96:2c:37:15:b6:ae:a2:a6:1a:ec:03:a8:48:da:29:ec:bd:
36:45:63:64:42:13:75:95:95:27:51:85:df:ba:e1:9d:fe:79:
a7:47:e0:90:de:c5:72:4f:21:39:23:63:3e:3c:eb:36:3e:3b:
dc:37:13:64:1f:0f:97:1d:f6:3c:7a:db:eb:45:fb:b6:80:8c:
b5:64:29:2a:81:08:a7:be:af:60:36:fa:9d:66:41:53:2f:f5:
3d:2e:c6:25:39:58:d6:b4:12:ce:35:d7:41:a8:0d:f5:bc:c1:
3d:b9:6f:dc:a1:97:79:27:7e:33:11:7b:47:cf:bd:9c:df:f8:
01:0f:ce:91:96:86:fa:d8:dd:fb:e1:c7:08:17:b3:ac:ad:70:
41:e4:0c:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1t9irGyiYVPlggJiDXjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0
YmI2Y2MwHhcNMjUwMTAxMjE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjQ1YWYxNmU3M2YwYjE2OGRlOWUwMTEwNzZjODI5NzM2OTdkOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XkfetILUjIISaRr7B/Oiz4vbX/f
070a2353oZdV/fGd1kswAT8gID27disy8mqWYrwR29au0g7509NzrOgw+FgKgZRr
9DYB1hoeWQIW8qcHNXTNgnZlZughywNsK2kSJ0sIfcMPWpEzEv9f4Rq8+a0mDgQT
vBfEaQERIplzNuTw1I3y1v3n2jEK+eLhRSXK1O6r1DImEdwpEkAUJLvBcCUs3pwJ
7wY+jPex63bhQ55q9AlKJ7nh/ViUlbIf7/WWV1VoJMyrw+Zvfo7po0z8qEBj79zZ
pyNE+WxcY7R3NMKqKcntLglNfsqjCqbcjX61l+cwZLNP6tizJ8WmQbbw9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtFrxbnPwsWjengEQdsgpc2l9ikMB8GA1UdIwQY
MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt
MWQ1NWQ1OTI5Y2VjLzEvRzBXdkZ1Y19DeGFONmVBUkIyeUNsemFYMktRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj
LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueUAMA0G
CSqGSIb3DQEBCwUAA4IBAQA7wnTy7SGjxKC/CNWSP945HRLRI0DJmGigZS0Ro4FW
mbRWy16h2a6edLqaXfzgHRs6feVEQoxZJFiWEp4+MMx/GPhtV0SrUgw87AxlMuzG
JdMPtSMf2PcKZG1WvE2pVF1kwHYdM/KkseGSy/8Yliw3FbauoqYa7AOoSNop7L02
RWNkQhN1lZUnUYXfuuGd/nmnR+CQ3sVyTyE5I2M+POs2PjvcNxNkHw+XHfY8etvr
Rfu2gIy1ZCkqgQinvq9gNvqdZkFTL/U9LsYlOVjWtBLONddBqA31vME9uW/coZd5
J34zEXtHz72c3/gBD86Rlob62N374ccIF7OsrXBB5Ay9
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:23 2025 by rpki-client