Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa
File: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (raw, json)
Hash identifier: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=
Subject key identifier: 81:CA:70:24:6B:31:91:3B:AA:9B:99:64:A7:AB:9D:A9:0D:04:4A:26
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 019422FBA87A741370376E6957FE7F27EB75
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62077
IP address blocks: 83.229.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a8:7a:74:13:70:37:6e:69:57:fe:7f:27:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ca70246b31913baa9b9964a7ab9da90d044a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:22:07:f4:3e:67:e2:30:d5:53:06:23:53:
a5:fd:db:37:00:c1:c6:5e:03:3d:e6:cc:fa:18:ba:
e4:c5:13:ae:bd:06:8c:aa:e2:a6:c1:bf:e6:9c:74:
61:2d:c7:28:96:07:d3:92:a9:f8:96:63:e2:3b:63:
df:18:78:b1:97:28:3d:40:71:c4:cd:2a:34:be:86:
00:c6:bb:cd:7b:2c:80:eb:7c:25:38:e3:2c:93:5e:
f5:ce:1f:ae:da:8e:b1:c9:04:f3:3d:a6:b0:a5:cc:
1a:1b:a8:d9:45:ca:ea:8f:aa:f2:9e:e0:e6:bd:f6:
03:aa:92:2e:b2:34:db:c4:dc:d6:63:8d:c5:23:b3:
fe:d0:7c:46:d6:89:38:89:e8:c5:89:a5:7a:64:47:
1b:e4:54:7d:5c:be:6e:46:bf:81:0a:ca:b1:f3:33:
30:75:6d:63:b3:03:17:59:6b:8b:5e:83:23:2b:82:
9c:c9:0a:47:92:76:79:a7:f0:18:59:e0:05:99:cc:
d1:12:f9:eb:54:3f:05:ec:30:f1:32:23:a0:43:e6:
87:59:b0:48:00:42:45:6b:46:20:70:d4:9e:c7:20:
6c:67:1b:26:46:0b:b5:c2:1a:8c:3c:e5:97:79:bf:
61:07:98:ab:6f:67:2d:35:75:9a:fe:1a:e1:93:45:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:70:24:6B:31:91:3B:AA:9B:99:64:A7:AB:9D:A9:0D:04:4A:26
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cc:1c:5e:ef:89:34:9b:d8:ba:de:cc:ca:2a:58:70:9a:64:
44:3c:23:5b:32:ed:68:2c:c6:fc:f0:e8:ac:d5:51:13:e4:af:
8f:cb:55:09:ee:6d:19:f6:98:71:92:67:f3:f5:b1:87:51:55:
bc:a6:98:ef:17:30:f3:ec:f0:15:66:0f:4f:43:2c:2f:d2:d7:
be:02:b2:20:93:a8:6b:0d:be:15:c4:22:63:88:43:23:05:d7:
9d:42:98:96:5f:39:1e:65:7c:e9:a1:43:22:be:f3:a3:b1:1d:
de:cf:df:cb:23:56:58:a4:ca:96:3a:a0:39:1c:e8:f7:ac:1d:
fc:92:ec:47:b9:3a:b4:de:0a:47:e0:a6:dc:4b:53:4b:67:4c:
27:3c:83:3a:6f:32:68:6f:fc:b4:3d:2c:7a:51:0c:7a:b9:b2:
35:34:47:dd:bd:0d:eb:db:a7:5d:88:34:18:14:5f:c6:aa:eb:
7c:10:fd:59:84:6c:c1:ed:8c:01:a9:f4:1e:ed:91:2c:c6:6d:
17:17:f5:9a:70:91:ea:a3:5f:1a:07:2e:11:74:fa:69:86:ae:
78:a8:41:ae:e2:85:08:3e:a7:78:4c:5c:42:d4:a3:c5:63:d4:
4c:30:fb:eb:d4:84:6a:2d:fd:00:66:67:76:55:de:2e:cc:3f:
f5:4f:c6:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+6h6dBNwN25pV/5/J+t1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjUwMTAxMTc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWNhNzAyNDZiMzE5MTNiYWE5Yjk5NjRhN2FiOWRhOTBkMDQ0YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFEiB/Q+Z+Iw1VMGI1Ol/ds3AMHG
XgM95sz6GLrkxROuvQaMquKmwb/mnHRhLccolgfTkqn4lmPiO2PfGHixlyg9QHHE
zSo0voYAxrvNeyyA63wlOOMsk171zh+u2o6xyQTzPaawpcwaG6jZRcrqj6rynuDm
vfYDqpIusjTbxNzWY43FI7P+0HxG1ok4iejFiaV6ZEcb5FR9XL5uRr+BCsqx8zMw
dW1jswMXWWuLXoMjK4KcyQpHknZ5p/AYWeAFmczREvnrVD8F7DDxMiOgQ+aHWbBI
AEJFa0YgcNSexyBsZxsmRgu1whqMPOWXeb9hB5irb2ctNXWa/hrhk0VX/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHKcCRrMZE7qpuZZKernakNBEomMB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvZ2Nwd0pHc3hrVHVxbTVsa3A2dWRxUTBFU2lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+U+MA0G
CSqGSIb3DQEBCwUAA4IBAQAgzBxe74k0m9i63szKKlhwmmREPCNbMu1oLMb88Ois
1VET5K+Py1UJ7m0Z9phxkmfz9bGHUVW8ppjvFzDz7PAVZg9PQywv0te+ArIgk6hr
Db4VxCJjiEMjBdedQpiWXzkeZXzpoUMivvOjsR3ez9/LI1ZYpMqWOqA5HOj3rB38
kuxHuTq03gpH4KbcS1NLZ0wnPIM6bzJob/y0PSx6UQx6ubI1NEfdvQ3r26ddiDQY
FF/Gqut8EP1ZhGzB7YwBqfQe7ZEsxm0XF/WacJHqo18aBy4RdPpphq54qEGu4oUI
Pqd4TFxC1KPFY9RMMPvr1IRqLf0AZmd2Vd4uzD/1T8Y5
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:22 2025 by rpki-client