Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/GzE_PF4lRurN113fXZhaZRzDRYM.roa
File: GzE_PF4lRurN113fXZhaZRzDRYM.roa (raw, json)
Hash identifier: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=
Subject key identifier: 1B:31:3F:3C:5E:25:46:EA:CD:D7:5D:DF:5D:98:5A:65:1C:C3:45:83
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0194258FCC211756CB35106C1B362DCFC14A
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/GzE_PF4lRurN113fXZhaZRzDRYM.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207910
IP address blocks: 45.67.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cc:21:17:56:cb:35:10:6c:1b:36:2d:cf:c1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b313f3c5e2546eacdd75ddf5d985a651cc34583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:dc:cb:e0:40:83:b5:b0:75:a5:8b:40:2b:
70:96:66:94:43:9f:4c:ce:cb:63:5e:94:fe:fa:62:
28:a5:ac:74:22:72:cf:d0:76:4a:ce:f2:83:07:1e:
fe:44:e5:ee:5f:03:e8:b6:70:cf:57:4e:c7:61:52:
13:19:26:3d:1e:2d:be:30:5c:ed:86:99:35:47:56:
36:d7:37:6a:62:33:7e:cf:6c:c4:50:f0:7b:de:a9:
7d:5b:11:a2:42:af:4f:a2:b6:cf:85:2c:a8:a2:fa:
44:3f:14:f5:8d:90:20:38:ab:f9:c7:f8:b7:8b:f1:
dd:89:c6:2d:d2:71:ed:33:87:ac:e7:96:c2:c5:44:
3e:7d:04:62:48:2b:0a:c2:51:05:57:5e:4b:62:5d:
c5:a6:55:65:d5:54:3b:68:8b:2a:d8:dc:81:5a:b8:
a7:02:c7:00:cc:cf:a1:9c:12:e4:42:8e:e5:47:9b:
77:1b:46:c2:72:aa:a5:e8:7b:c4:ed:59:31:32:57:
57:bc:d8:20:48:98:a6:0a:f5:99:0f:f6:bc:d2:44:
39:a2:ff:c5:d2:42:f1:99:a5:07:87:7a:fb:18:11:
8a:c3:3e:e7:14:86:91:6c:38:ac:6f:07:8d:a6:57:
8e:72:99:dd:65:26:4e:a7:e2:58:1e:79:fc:93:25:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:3F:3C:5E:25:46:EA:CD:D7:5D:DF:5D:98:5A:65:1C:C3:45:83
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/GzE_PF4lRurN113fXZhaZRzDRYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f0:0d:60:17:e5:44:dd:b8:ae:aa:56:a1:0d:3f:c5:fa:b3:
df:5b:c1:5b:11:63:e1:35:f6:7f:f5:c9:03:2e:c6:64:82:33:
a0:c9:41:41:90:77:61:a1:94:11:f2:71:16:72:4f:3c:b7:d6:
5d:a0:8b:02:a4:3b:1d:16:95:95:20:32:f1:f4:d8:03:6e:21:
b6:db:94:a6:c1:3e:b4:bb:c3:d3:f5:b1:b5:d6:ed:4a:19:17:
c7:4a:65:81:c2:9b:c8:30:f1:70:42:4c:41:5d:e4:6a:af:3d:
74:89:b9:c6:f7:47:3e:1e:7c:b5:86:0b:bc:eb:97:93:43:8f:
2d:ba:2d:c4:2c:7a:bd:e0:a4:7f:86:02:78:ee:9d:d5:7b:28:
84:58:e8:af:c5:e6:42:1d:30:9c:ff:5a:9f:55:aa:e5:90:ed:
e3:31:b6:51:11:d6:b6:1c:90:e9:72:ac:49:48:c0:89:e1:d8:
3d:19:d7:66:2b:39:a3:a8:98:a9:ce:b7:47:29:7f:32:3b:7d:
90:2a:83:82:3f:45:8b:5c:8f:8a:20:c6:d3:39:02:48:b3:57:
a5:9e:31:aa:3c:07:fa:6d:47:cd:ee:05:0b:82:e8:be:6b:44:
1b:2e:e0:77:38:8d:d0:0e:74:f2:6c:80:5d:29:08:6f:92:86:
97:00:0f:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj8whF1bLNRBsGzYtz8FKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm
ZDk0NjEwHhcNMjUwMTAyMDU0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjMxM2YzYzVlMjU0NmVhY2RkNzVkZGY1ZDk4NWE2NTFjYzM0NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug3cy+BAg7WwdaWLQCtwlmaUQ59M
zstjXpT++mIopax0InLP0HZKzvKDBx7+ROXuXwPotnDPV07HYVITGSY9Hi2+MFzt
hpk1R1Y21zdqYjN+z2zEUPB73ql9WxGiQq9PorbPhSyoovpEPxT1jZAgOKv5x/i3
i/HdicYt0nHtM4es55bCxUQ+fQRiSCsKwlEFV15LYl3FplVl1VQ7aIsq2NyBWrin
AscAzM+hnBLkQo7lR5t3G0bCcqql6HvE7VkxMldXvNggSJimCvWZD/a80kQ5ov/F
0kLxmaUHh3r7GBGKwz7nFIaRbDisbweNpleOcpndZSZOp+JYHnn8kyXsvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBsxPzxeJUbqzddd312YWmUcw0WDMB8GA1UdIwQY
MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt
Zjk4OGQ0OGU1MWU4LzEvR3pFX1BGNGxSdXJOMTEzZlhaaGFaUnpEUllNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4
LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUNTMA0G
CSqGSIb3DQEBCwUAA4IBAQCP8A1gF+VE3biuqlahDT/F+rPfW8FbEWPhNfZ/9ckD
LsZkgjOgyUFBkHdhoZQR8nEWck88t9ZdoIsCpDsdFpWVIDLx9NgDbiG225SmwT60
u8PT9bG11u1KGRfHSmWBwpvIMPFwQkxBXeRqrz10ibnG90c+Hny1hgu865eTQ48t
ui3ELHq94KR/hgJ47p3VeyiEWOivxeZCHTCc/1qfVarlkO3jMbZREda2HJDpcqxJ
SMCJ4dg9GddmKzmjqJipzrdHKX8yO32QKoOCP0WLXI+KIMbTOQJIs1elnjGqPAf6
bUfN7gULgui+a0QbLuB3OI3QDnTybIBdKQhvkoaXAA9n
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:12:01 2025 by rpki-client