Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/GXn4ppunsJgcgy-UOrFrKoqoiSI.roa
File: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (raw, json)
Hash identifier: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=
Subject key identifier: 19:79:F8:A6:9B:A7:B0:98:1C:83:2F:94:3A:B1:6B:2A:8A:A8:89:22
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 01941F8C0D454A771C84BC814D84054DA8BB
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/GXn4ppunsJgcgy-UOrFrKoqoiSI.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204076
IP address blocks: 88.210.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0d:45:4a:77:1c:84:bc:81:4d:84:05:4d:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1979f8a69ba7b0981c832f943ab16b2a8aa88922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:68:f1:a9:54:68:2c:a8:d5:60:42:9f:fe:
27:4e:bf:ec:6b:ee:4a:74:5d:51:c6:d3:f1:7c:d4:
a3:e9:a2:f7:01:4b:e9:f6:83:f9:12:f2:2d:a4:f0:
6a:f6:c3:b4:df:f0:ca:c4:fa:1e:55:85:ae:b4:2f:
37:ef:ec:55:48:2b:02:87:36:cd:6b:cb:e4:89:bd:
02:18:dc:65:2f:fb:4f:be:5b:46:b1:bc:e0:cd:9e:
51:c1:32:00:24:30:d2:34:a9:ba:56:4c:cc:f9:a4:
c6:1e:14:f7:22:21:dc:f0:c5:43:d6:db:22:07:1d:
4c:d1:ac:b9:68:97:e1:db:fb:0d:bc:26:23:69:b0:
56:26:32:b9:18:c5:20:fa:1d:40:73:73:ff:60:84:
7a:5b:0a:b7:ed:f0:5c:9d:4e:9f:5c:76:51:48:66:
47:3b:f2:b3:b7:0c:7f:fc:42:c8:46:ce:83:8d:60:
cd:62:96:41:29:df:d2:b6:e7:f8:35:f2:7b:81:c8:
59:0e:c8:a4:e0:66:55:0c:3c:58:51:a1:a9:4a:fb:
f8:f3:1e:ee:5e:b7:38:ce:35:eb:15:3b:2a:35:8d:
dd:10:54:63:79:8c:28:05:c4:74:5b:fd:e0:a8:21:
a9:6f:31:4d:02:be:31:8f:33:85:f2:67:fe:53:cd:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:79:F8:A6:9B:A7:B0:98:1C:83:2F:94:3A:B1:6B:2A:8A:A8:89:22
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/GXn4ppunsJgcgy-UOrFrKoqoiSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.42.0/24
Signature Algorithm: sha256WithRSAEncryption
28:27:ac:51:cb:2a:6f:bc:24:56:62:8f:d9:59:09:c0:b7:18:
7d:12:70:ef:88:6d:94:41:36:77:b2:94:1a:40:3a:7e:36:05:
c0:80:77:a3:99:b6:ef:24:39:d8:32:da:5a:1a:d6:20:9e:2c:
d2:6a:e0:51:47:4f:e7:30:02:e5:8f:25:5d:74:d5:85:33:61:
f2:20:c8:be:29:5d:e9:c6:1b:08:7a:86:ca:e8:68:48:6b:5f:
26:1d:e4:a5:f5:e2:10:e3:2d:b8:a4:7c:a9:68:1a:d0:9e:a9:
eb:33:8a:19:8a:69:29:c6:01:96:55:a6:e5:fa:3b:eb:2b:6e:
f8:19:c0:37:b0:44:c9:ac:b5:3f:7c:e6:8f:2c:21:7c:e0:b9:
fe:54:e1:fe:66:0b:16:dd:51:57:bd:41:68:73:d2:d5:0b:bc:
d1:48:af:ba:48:27:6b:58:59:d3:89:3e:37:94:e3:74:df:83:
78:1a:1c:12:78:f4:a5:a8:8d:d6:0a:85:58:c4:5f:d1:b0:c6:
0e:ab:0e:cf:21:aa:40:36:d1:03:ac:0c:be:ae:b4:15:a4:b4:
0f:97:d4:12:27:ad:21:1e:ac:cb:6a:9d:77:35:96:3b:74:be:
3a:f1:66:c5:9e:ef:70:68:52:a1:cd:b2:d0:40:c2:47:c4:8d:
9f:d6:06:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjA1FSncchLyBTYQFTai7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy
MzBmMTQwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTc5ZjhhNjliYTdiMDk4MWM4MzJmOTQzYWIxNmIyYThhYTg4OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqVo8alUaCyo1WBCn/4nTr/sa+5K
dF1RxtPxfNSj6aL3AUvp9oP5EvItpPBq9sO03/DKxPoeVYWutC837+xVSCsChzbN
a8vkib0CGNxlL/tPvltGsbzgzZ5RwTIAJDDSNKm6VkzM+aTGHhT3IiHc8MVD1tsi
Bx1M0ay5aJfh2/sNvCYjabBWJjK5GMUg+h1Ac3P/YIR6Wwq37fBcnU6fXHZRSGZH
O/Kztwx//ELIRs6DjWDNYpZBKd/Stuf4NfJ7gchZDsik4GZVDDxYUaGpSvv48x7u
Xrc4zjXrFTsqNY3dEFRjeYwoBcR0W/3gqCGpbzFNAr4xjzOF8mf+U83vuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBl5+Kabp7CYHIMvlDqxayqKqIkiMB8GA1UdIwQY
MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt
MGQ4ZmNlM2ViZmJiLzEvR1huNHBwdW5zSmdjZ3ktVU9yRnJLb3FvaVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi
LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNIqMA0G
CSqGSIb3DQEBCwUAA4IBAQAoJ6xRyypvvCRWYo/ZWQnAtxh9EnDviG2UQTZ3spQa
QDp+NgXAgHejmbbvJDnYMtpaGtYgnizSauBRR0/nMALljyVddNWFM2HyIMi+KV3p
xhsIeobK6GhIa18mHeSl9eIQ4y24pHypaBrQnqnrM4oZimkpxgGWVabl+jvrK274
GcA3sETJrLU/fOaPLCF84Ln+VOH+ZgsW3VFXvUFoc9LVC7zRSK+6SCdrWFnTiT43
lON034N4GhwSePSlqI3WCoVYxF/RsMYOqw7PIapANtEDrAy+rrQVpLQPl9QSJ60h
HqzLap13NZY7dL468WbFnu9waFKhzbLQQMJHxI2f1gb2
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net