Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/Gx61TcX_jg_POohtFk3y578RK3s.roa
File: Gx61TcX_jg_POohtFk3y578RK3s.roa (raw, json)
Hash identifier: cdRA7EEe8Z56qv2cSGc980wpIss1qxURTPJYCEyx71I=
Subject key identifier: 1B:1E:B5:4D:C5:FF:8E:0F:CF:3A:88:6D:16:4D:F2:E7:BF:11:2B:7B
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 0194266BFDFD4E29CE540BEB4FD53E71F0FB
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/Gx61TcX_jg_POohtFk3y578RK3s.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202016
IP address blocks: 5.159.32.0/21 maxlen: 21
194.145.244.0/22 maxlen: 22
2a03:bec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fd:fd:4e:29:ce:54:0b:eb:4f:d5:3e:71:f0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b1eb54dc5ff8e0fcf3a886d164df2e7bf112b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:f8:05:69:ed:1b:09:d7:40:3b:2a:fa:b8:
0d:22:3b:0c:b7:60:4d:24:43:4d:ea:d1:63:b0:b9:
81:2a:41:73:8e:1d:1e:3e:89:6f:f6:e5:59:3a:fb:
e8:37:d3:5f:9a:8a:de:39:3a:ec:7b:0b:d6:f6:fb:
96:6b:b4:7d:82:17:8d:cd:28:0a:0e:9b:4a:d7:c9:
29:aa:92:36:c4:61:2a:54:99:b3:f5:35:1c:ea:1f:
ad:19:bb:0f:96:7f:99:0f:5c:43:8e:d5:1b:17:cb:
da:89:7f:44:0c:b7:ce:61:a3:77:b0:79:7d:ff:36:
6c:46:e2:de:e8:c8:ae:2a:a2:ca:78:ce:a3:7d:fa:
1a:89:37:8e:01:45:24:ad:cd:c4:64:5f:d3:ba:85:
66:63:96:ea:5b:a1:f5:a1:65:d8:dd:c7:18:df:cb:
2a:90:61:9a:c5:56:40:69:f7:53:f3:ef:6a:47:c9:
1a:55:04:d2:d0:41:8b:25:fc:de:6f:a9:b3:e6:bd:
87:04:03:88:d8:98:aa:81:64:b1:da:81:71:bf:b2:
90:68:e0:8c:a5:dc:65:f0:06:19:f9:5f:2a:6c:17:
4d:b3:88:3e:97:9a:94:5d:98:dc:62:df:89:50:fe:
6a:9c:32:ed:97:50:52:bd:62:4c:03:34:b4:74:63:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:B5:4D:C5:FF:8E:0F:CF:3A:88:6D:16:4D:F2:E7:BF:11:2B:7B
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/Gx61TcX_jg_POohtFk3y578RK3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.32.0/21
194.145.244.0/22
IPv6:
2a03:bec0::/32
Signature Algorithm: sha256WithRSAEncryption
21:a2:3a:8a:60:7e:bb:36:14:89:ed:f9:6d:6d:da:e5:14:53:
39:f8:ee:51:46:13:86:17:19:74:5f:c2:58:9e:84:12:46:51:
61:44:93:c5:fe:22:35:2b:35:99:1f:f3:f3:2a:39:bb:e2:e6:
ac:cb:81:7e:5c:a6:49:af:8a:54:ff:59:4d:08:b5:e6:0e:7a:
cb:6f:09:87:de:75:bd:99:80:11:98:4a:ed:c9:ff:c3:e8:06:
85:03:10:9c:67:c8:79:29:5c:07:bb:8f:0a:cc:ec:e5:19:ff:
f7:80:7c:83:cd:bd:5e:b8:52:03:d1:63:55:a5:6b:ec:d7:40:
85:a1:4d:d0:a7:93:89:bd:84:7e:61:51:57:5c:03:9f:8f:bb:
4b:b1:ce:3d:e8:68:5c:c0:f6:5e:90:ce:9f:f2:bc:6d:eb:aa:
75:e9:e0:f6:05:84:18:da:60:99:a8:4f:57:a3:7b:3e:91:20:
fe:0c:a4:94:95:06:92:45:e8:08:57:ae:01:ab:db:60:c1:6b:
a6:d2:79:3a:f2:ef:db:33:d5:79:48:cc:0f:7c:48:6e:e5:92:
fd:ac:ea:9c:c6:4a:48:3f:ee:a4:63:82:aa:41:ef:04:d4:ab:
18:4a:79:a0:ff:94:ac:da:14:e8:4f:f8:b9:7e:fa:80:78:58:
18:68:29:01
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQma/39TinOVAvrT9U+cfD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjUwMTAyMDk0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjFlYjU0ZGM1ZmY4ZTBmY2YzYTg4NmQxNjRkZjJlN2JmMTEyYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV/4BWntGwnXQDsq+rgNIjsMt2BN
JENN6tFjsLmBKkFzjh0ePolv9uVZOvvoN9NfmoreOTrsewvW9vuWa7R9gheNzSgK
DptK18kpqpI2xGEqVJmz9TUc6h+tGbsPln+ZD1xDjtUbF8vaiX9EDLfOYaN3sHl9
/zZsRuLe6MiuKqLKeM6jffoaiTeOAUUkrc3EZF/TuoVmY5bqW6H1oWXY3ccY38sq
kGGaxVZAafdT8+9qR8kaVQTS0EGLJfzeb6mz5r2HBAOI2JiqgWSx2oFxv7KQaOCM
pdxl8AYZ+V8qbBdNs4g+l5qUXZjcYt+JUP5qnDLtl1BSvWJMAzS0dGOEGwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBsetU3F/44PzzqIbRZN8ue/ESt7MB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvR3g2MVRjWF9qZ19QT29odEZrM3k1NzhSSzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBZ8gAwQC
wpH0MA0EAgACMAcDBQAqA77AMA0GCSqGSIb3DQEBCwUAA4IBAQAhojqKYH67NhSJ
7fltbdrlFFM5+O5RRhOGFxl0X8JYnoQSRlFhRJPF/iI1KzWZH/PzKjm74uasy4F+
XKZJr4pU/1lNCLXmDnrLbwmH3nW9mYARmErtyf/D6AaFAxCcZ8h5KVwHu48KzOzl
Gf/3gHyDzb1euFID0WNVpWvs10CFoU3Qp5OJvYR+YVFXXAOfj7tLsc496GhcwPZe
kM6f8rxt66p16eD2BYQY2mCZqE9Xo3s+kSD+DKSUlQaSRegIV64Bq9tgwWum0nk6
8u/bM9V5SMwPfEhu5ZL9rOqcxkpIP+6kY4KqQe8E1KsYSnmg/5Ss2hToT/i5fvqA
eFgYaCkB
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net