Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/GuRsW05KP8iWPMSp7vb_kToeinc.roa
File: GuRsW05KP8iWPMSp7vb_kToeinc.roa (raw, json)
Hash identifier: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=
Subject key identifier: 1A:E4:6C:5B:4E:4A:3F:C8:96:3C:C4:A9:EE:F6:FF:91:3A:1E:8A:77
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 0194221F4EF7DC11DBB7DA36D15DE323407A
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/GuRsW05KP8iWPMSp7vb_kToeinc.roa
Signing time: Wed 01 Jan 2025 13:47:44 +0000
ROA not before: Wed 01 Jan 2025 13:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 45.88.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4e:f7:dc:11:db:b7:da:36:d1:5d:e3:23:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Jan 1 13:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ae46c5b4e4a3fc8963cc4a9eef6ff913a1e8a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:1a:5b:1a:05:f3:bd:be:84:e5:66:93:12:
15:5a:2d:ae:86:24:96:e7:98:d1:f2:99:b7:8f:e8:
7c:4b:d3:cb:b8:d7:41:79:5b:a7:51:28:d1:72:b3:
52:44:16:ef:eb:b7:65:77:ad:db:90:cf:0e:fe:94:
12:a7:56:9e:64:15:7e:62:d3:9d:5b:48:a1:24:0b:
6d:1d:df:1e:06:59:56:1a:4c:99:a0:c1:4a:ab:02:
94:88:db:cc:ea:17:ee:dd:61:89:40:46:0f:6d:59:
37:8b:20:5f:9e:9c:fb:e9:fa:0f:34:40:cb:a3:b0:
5a:0f:67:27:01:77:0f:03:21:f2:a5:59:2e:45:19:
cf:bf:28:7d:cb:8d:2c:3d:fa:42:84:ea:53:cd:dc:
a1:35:7d:d3:f8:d8:49:e7:d2:08:f2:1d:22:14:35:
98:93:a2:9c:7f:32:79:0b:37:28:97:f1:00:60:28:
f0:dc:30:cb:fd:9e:ef:ad:68:ee:4b:2c:88:e1:87:
36:ad:1d:49:dd:9b:7a:04:95:aa:0d:c3:a0:2e:1c:
da:94:0f:d7:df:a1:e5:18:ea:aa:61:62:2f:66:2a:
9d:f9:9a:57:b7:b2:f9:72:04:87:a7:1b:d6:16:b7:
c4:cf:cf:33:b5:8f:7c:71:01:ca:b0:59:b5:11:bc:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E4:6C:5B:4E:4A:3F:C8:96:3C:C4:A9:EE:F6:FF:91:3A:1E:8A:77
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/GuRsW05KP8iWPMSp7vb_kToeinc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:be:c2:95:3d:16:9d:11:f3:9b:8d:4e:8a:00:37:48:94:86:
43:bb:6f:71:04:22:f9:1f:3a:13:23:dc:fe:31:a6:10:15:39:
bd:07:15:d6:59:cb:2e:26:40:c5:66:56:c9:03:7b:cb:24:4c:
56:9b:d2:74:d1:d5:d1:db:6d:f7:bd:71:24:a4:fa:9e:5e:a0:
8e:26:f9:a8:80:c7:73:9f:67:b8:81:69:dc:e2:05:dd:95:e4:
eb:be:be:ff:dc:86:49:1d:7c:e0:85:c7:05:61:4a:4b:06:43:
af:18:af:15:ff:ea:0b:f8:f8:0d:81:e2:4a:88:52:75:c4:bf:
3d:f7:57:6c:c8:4f:60:6b:f2:c1:73:8b:5b:9c:80:4d:98:86:
b6:e0:37:e0:51:2e:f5:3d:6f:8b:46:4d:22:91:20:ba:98:ab:
48:99:5b:f4:ea:8d:a5:9f:3e:77:cf:18:09:21:0b:79:88:25:
46:43:fb:79:1e:8f:68:ea:2e:36:0f:7a:fc:88:8d:a9:c7:aa:
72:3d:55:47:bf:4a:e5:9a:cd:fc:61:b4:ca:69:5a:da:3a:8c:
c2:89:76:bb:64:17:f3:f1:ca:68:e3:14:54:96:5d:5a:94:1f:
fa:95:0c:05:69:d6:6b:f1:3f:fd:cf:7f:a8:aa:2b:3c:9b:9f:
f2:ba:67:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH0733BHbt9o20V3jI0B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWRjNjgyYTk0NDAwNTExN2I4ZmViZWQ2ZGM4YmFjMDYw
ZjMyOWEwHhcNMjUwMTAxMTM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWU0NmM1YjRlNGEzZmM4OTYzY2M0YTllZWY2ZmY5MTNhMWU4YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJcaWxoF872+hOVmkxIVWi2uhiSW
55jR8pm3j+h8S9PLuNdBeVunUSjRcrNSRBbv67dld63bkM8O/pQSp1aeZBV+YtOd
W0ihJAttHd8eBllWGkyZoMFKqwKUiNvM6hfu3WGJQEYPbVk3iyBfnpz76foPNEDL
o7BaD2cnAXcPAyHypVkuRRnPvyh9y40sPfpChOpTzdyhNX3T+NhJ59II8h0iFDWY
k6KcfzJ5Czcol/EAYCjw3DDL/Z7vrWjuSyyI4Yc2rR1J3Zt6BJWqDcOgLhzalA/X
36HlGOqqYWIvZiqd+ZpXt7L5cgSHpxvWFrfEz88ztY98cQHKsFm1Ebz5vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBrkbFtOSj/IljzEqe72/5E6Hop3MB8GA1UdIwQY
MBaAFJbtxoKpRABRF7j+vtbci6wGDzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQt
N2Y4YTY3NTBiOGQ3LzEvR3VSc1cwNUtQOGlXUE1TcDd2Yl9rVG9laW5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQtN2Y4YTY3NTBiOGQ3
LzEvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVjgMA0G
CSqGSIb3DQEBCwUAA4IBAQB6vsKVPRadEfObjU6KADdIlIZDu29xBCL5HzoTI9z+
MaYQFTm9BxXWWcsuJkDFZlbJA3vLJExWm9J00dXR2233vXEkpPqeXqCOJvmogMdz
n2e4gWnc4gXdleTrvr7/3IZJHXzghccFYUpLBkOvGK8V/+oL+PgNgeJKiFJ1xL89
91dsyE9ga/LBc4tbnIBNmIa24DfgUS71PW+LRk0ikSC6mKtImVv06o2lnz53zxgJ
IQt5iCVGQ/t5Ho9o6i42D3r8iI2px6pyPVVHv0rlms38YbTKaVraOozCiXa7ZBfz
8cpo4xRUll1alB/6lQwFadZr8T/9z3+oqis8m5/yumf3
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:36 2025 by rpki-client