Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa
File: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (raw, json)
Hash identifier: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=
Subject key identifier: 80:81:AA:88:22:B4:6C:2D:69:19:C2:39:62:47:10:3F:78:01:63:58
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 019425FCECA5D47634CC7DE3EA520ADB7E6D
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa
Signing time: Thu 02 Jan 2025 07:48:40 +0000
ROA not before: Thu 02 Jan 2025 07:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9167
IP address blocks: 85.235.224.0/19 maxlen: 19
195.184.96.0/19 maxlen: 19
213.150.32.0/19 maxlen: 19
213.173.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ec:a5:d4:76:34:cc:7d:e3:ea:52:0a:db:7e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jan 2 07:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8081aa8822b46c2d6919c2396247103f78016358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:e3:ec:cd:76:16:25:13:82:cd:c1:4a:a2:
fb:bc:c6:ec:67:02:ce:3d:b0:c3:bb:7b:aa:9c:a5:
5e:6b:7d:44:8c:99:89:38:78:11:bc:6b:0b:85:4e:
b8:6d:45:b7:c4:ff:0c:20:d8:3d:8f:f5:c9:bd:e4:
99:e5:30:b6:57:05:5a:90:70:c4:e2:9b:4d:5d:c8:
82:80:7c:11:a7:fd:75:92:30:f0:dc:e8:4f:8e:4b:
1a:62:51:02:b8:26:be:b7:34:d6:03:c6:93:67:9e:
49:33:0a:dc:b2:f4:74:97:35:d2:b1:97:08:53:96:
86:75:8d:d0:a9:a1:34:74:b9:ee:3c:95:3a:e7:3f:
e9:76:e6:fa:07:6b:84:4e:a7:88:ba:00:30:aa:fd:
85:db:5a:93:2a:df:b4:aa:a0:11:35:76:3b:97:6e:
cf:98:6b:62:71:9b:a4:bf:3c:37:cd:45:6f:75:37:
0a:9c:7e:b5:78:f7:63:a5:35:66:62:eb:bb:68:a7:
f6:15:e9:63:4e:d7:a8:ec:ab:b4:af:32:1e:70:9c:
99:fe:fd:13:42:47:dc:cd:27:d5:32:23:3e:6e:87:
29:5e:96:69:21:fc:32:1d:24:34:99:e8:9e:ec:6a:
f9:59:0c:5c:b0:86:f8:fe:41:07:a7:55:07:98:bb:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:81:AA:88:22:B4:6C:2D:69:19:C2:39:62:47:10:3F:78:01:63:58
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.224.0/19
195.184.96.0/19
213.150.32.0/19
213.173.224.0/19
Signature Algorithm: sha256WithRSAEncryption
63:23:61:bf:da:f3:4e:fe:58:99:a8:cc:63:b2:de:84:28:40:
8e:31:a4:cb:8d:d9:f3:b9:84:31:9d:4e:44:80:f0:6d:78:e4:
ef:8a:1f:2d:c9:75:a5:38:cd:57:5a:03:e2:a9:1c:f5:af:3d:
17:33:4b:f4:9a:20:96:c3:22:8d:bb:69:0a:ad:6b:33:6b:21:
c3:55:a2:7b:01:ee:e3:65:92:bf:d8:b3:fa:8f:67:87:c1:24:
71:86:93:dc:bd:87:a5:d7:4e:85:b5:86:ff:17:fc:8a:8a:98:
6e:16:36:2d:41:51:2b:9e:e2:b4:36:c5:4c:cb:fb:ca:7f:01:
5b:df:cc:8f:fd:c9:4e:d1:55:d6:05:6a:8f:fa:5a:37:77:9b:
6a:fb:b3:e7:04:a3:6d:a3:1b:b3:d2:f2:cd:49:df:00:cc:16:
74:48:69:64:3a:ad:d1:f9:7f:e6:b3:19:01:12:96:ea:2c:c9:
d2:d1:d3:6d:d3:db:06:90:a1:86:17:36:4a:d4:fa:ef:11:d6:
22:85:9d:a5:a7:71:fa:8d:8a:4f:c4:7d:d6:66:48:e7:25:c5:
76:4b:5a:d8:c4:7c:b5:03:39:09:68:dc:b5:7a:a7:6c:41:fa:
c8:36:18:e6:e5:cb:f7:1a:3c:e7:ad:dc:98:24:c5:c8:60:77:
b8:f6:cb:fa
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQl/Oyl1HY0zH3j6lIK235tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm
MmE1NmEwHhcNMjUwMTAyMDc0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDgxYWE4ODIyYjQ2YzJkNjkxOWMyMzk2MjQ3MTAzZjc4MDE2MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4jj7M12FiUTgs3BSqL7vMbsZwLO
PbDDu3uqnKVea31EjJmJOHgRvGsLhU64bUW3xP8MINg9j/XJveSZ5TC2VwVakHDE
4ptNXciCgHwRp/11kjDw3OhPjksaYlECuCa+tzTWA8aTZ55JMwrcsvR0lzXSsZcI
U5aGdY3QqaE0dLnuPJU65z/pdub6B2uETqeIugAwqv2F21qTKt+0qqARNXY7l27P
mGticZukvzw3zUVvdTcKnH61ePdjpTVmYuu7aKf2FeljTteo7Ku0rzIecJyZ/v0T
QkfczSfVMiM+bocpXpZpIfwyHSQ0meie7Gr5WQxcsIb4/kEHp1UHmLta6wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFICBqogitGwtaRnCOWJHED94AWNYMB8GA1UdIwQY
MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt
NjNjZDNjODYxZDhlLzEvZ0lHcWlDSzBiQzFwR2NJNVlrY1FQM2dCWTFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl
LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFVevgAwQF
w7hgAwQF1ZYgAwQF1a3gMA0GCSqGSIb3DQEBCwUAA4IBAQBjI2G/2vNO/liZqMxj
st6EKECOMaTLjdnzuYQxnU5EgPBteOTvih8tyXWlOM1XWgPiqRz1rz0XM0v0miCW
wyKNu2kKrWszayHDVaJ7Ae7jZZK/2LP6j2eHwSRxhpPcvYel106FtYb/F/yKiphu
FjYtQVErnuK0NsVMy/vKfwFb38yP/clO0VXWBWqP+lo3d5tq+7PnBKNtoxuz0vLN
Sd8AzBZ0SGlkOq3R+X/msxkBEpbqLMnS0dNt09sGkKGGFzZK1PrvEdYihZ2lp3H6
jYpPxH3WZkjnJcV2S1rYxHy1AzkJaNy1eqdsQfrINhjm5cv3GjznrdyYJMXIYHe4
9sv6
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:02 2025 by rpki-client