Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/GtwJZcMJzJfVot1AbvXcNrWZuUA.roa
File: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (raw, json)
Hash identifier: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=
Subject key identifier: 1A:DC:09:65:C3:09:CC:97:D5:A2:DD:40:6E:F5:DC:36:B5:99:B9:40
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 0194258EFD96E09CAF227FDCA2D1D2095A29
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/GtwJZcMJzJfVot1AbvXcNrWZuUA.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206791
IP address blocks: 178.159.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fd:96:e0:9c:af:22:7f:dc:a2:d1:d2:09:5a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1adc0965c309cc97d5a2dd406ef5dc36b599b940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:03:9d:9a:d3:87:b1:be:99:33:63:19:63:
7a:a0:20:5e:3b:1a:3d:e9:a1:35:fe:58:cc:31:2d:
23:17:5a:fd:2d:81:d3:bc:fe:17:e8:eb:d8:6b:32:
78:8e:7d:f7:3a:26:47:72:97:5f:67:20:a6:a7:fe:
3e:bd:21:67:33:75:3a:8d:ec:39:95:eb:eb:38:dc:
43:b9:59:07:c8:22:ef:5f:f1:d0:5a:60:68:86:a5:
c3:bd:4a:f1:33:40:91:8e:40:37:12:39:19:10:65:
cb:2a:b8:9e:73:18:35:cf:c5:2b:06:23:0c:b3:05:
18:64:a6:a1:0b:55:2f:74:60:70:68:c9:3d:88:f1:
dd:77:62:73:cf:b4:11:7a:af:d6:1f:f3:b9:31:1e:
69:ad:65:79:ab:31:a5:75:b7:67:f3:dd:e0:30:b3:
e7:95:68:71:3b:71:ef:ef:cc:ab:52:fe:b1:4a:e9:
2c:d7:bf:8e:d8:25:45:a9:f3:3d:4a:98:11:e7:39:
ea:db:e8:c0:1b:7c:fa:c1:27:6b:f4:29:7c:6a:16:
7f:81:68:b3:f0:67:4b:40:fd:1d:d9:28:85:fc:81:
8f:ab:1a:c6:22:b7:a2:26:5d:9c:5c:1c:b4:81:eb:
fb:13:dc:3d:95:0d:8f:92:44:20:ce:04:ae:3e:fb:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:09:65:C3:09:CC:97:D5:A2:DD:40:6E:F5:DC:36:B5:99:B9:40
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/GtwJZcMJzJfVot1AbvXcNrWZuUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:68:ea:24:29:23:b3:85:f8:19:ba:44:ea:6e:90:77:21:ad:
79:91:89:a2:82:e0:cb:ff:f8:21:b9:d5:5e:98:2d:42:c7:e9:
b7:09:53:b0:21:7d:cc:7b:b4:10:de:46:17:e7:d9:5d:d7:69:
87:c5:83:64:0c:41:d2:65:eb:ab:e3:66:93:f6:76:5c:da:89:
be:c6:e8:b7:52:3f:fa:54:ea:5f:ad:c3:36:b1:4e:43:20:7b:
90:ec:f4:89:b1:e3:97:c3:50:18:cd:6f:8a:6e:d5:c5:48:f1:
6b:b5:f3:51:73:1d:cf:a5:46:3d:09:26:c7:f4:95:0e:85:df:
4a:1c:3c:8d:7e:1d:36:b7:ae:7b:a8:22:c9:11:63:73:c1:a9:
ac:d3:bf:c0:22:a5:b0:1d:f6:37:c1:c0:1e:90:1a:b9:6f:a9:
30:f9:fc:8b:8b:4d:53:20:2d:73:06:d6:5d:5b:12:43:c1:14:
7e:17:94:61:24:e7:da:98:e9:fa:b5:50:40:95:60:aa:1a:5c:
bf:05:d8:36:04:5e:ca:02:95:bc:3b:9f:06:85:8a:22:62:05:
13:4b:16:24:e7:5d:89:1f:a1:61:f4:38:d9:74:31:82:c6:af:
8a:04:7f:42:44:c4:30:4d:34:ac:14:52:b0:3f:f0:b6:5d:2a:
03:cc:4c:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljv2W4JyvIn/cotHSCVopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2
ZGY0OGIwHhcNMjUwMTAyMDU0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWRjMDk2NWMzMDljYzk3ZDVhMmRkNDA2ZWY1ZGMzNmI1OTliOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriUDnZrTh7G+mTNjGWN6oCBeOxo9
6aE1/ljMMS0jF1r9LYHTvP4X6OvYazJ4jn33OiZHcpdfZyCmp/4+vSFnM3U6jew5
levrONxDuVkHyCLvX/HQWmBohqXDvUrxM0CRjkA3EjkZEGXLKriecxg1z8UrBiMM
swUYZKahC1UvdGBwaMk9iPHdd2Jzz7QReq/WH/O5MR5prWV5qzGldbdn893gMLPn
lWhxO3Hv78yrUv6xSuks17+O2CVFqfM9SpgR5znq2+jAG3z6wSdr9Cl8ahZ/gWiz
8GdLQP0d2SiF/IGPqxrGIreiJl2cXBy0gev7E9w9lQ2PkkQgzgSuPvvt5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBrcCWXDCcyX1aLdQG713Da1mblAMB8GA1UdIwQY
MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt
ZDFjNWYxYjUxZTE3LzEvR3R3SlpjTUp6SmZWb3QxQWJ2WGNOcldadVVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3
LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsp8lMA0G
CSqGSIb3DQEBCwUAA4IBAQAPaOokKSOzhfgZukTqbpB3Ia15kYmiguDL//ghudVe
mC1Cx+m3CVOwIX3Me7QQ3kYX59ld12mHxYNkDEHSZeur42aT9nZc2om+xui3Uj/6
VOpfrcM2sU5DIHuQ7PSJseOXw1AYzW+KbtXFSPFrtfNRcx3PpUY9CSbH9JUOhd9K
HDyNfh02t657qCLJEWNzwams07/AIqWwHfY3wcAekBq5b6kw+fyLi01TIC1zBtZd
WxJDwRR+F5RhJOfamOn6tVBAlWCqGly/Bdg2BF7KApW8O58GhYoiYgUTSxYk512J
H6Fh9DjZdDGCxq+KBH9CRMQwTTSsFFKwP/C2XSoDzEx+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net