Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/gpOFwGigFruN2xX1_4na-JihRrY.roa
File: gpOFwGigFruN2xX1_4na-JihRrY.roa (raw, json)
Hash identifier: 0yfE24GB/9TSNfuk9Qc/laEhooVfpgFo5Q1e52VDvck=
Subject key identifier: 82:93:85:C0:68:A0:16:BB:8D:DB:15:F5:FF:89:DA:F8:98:A1:46:B6
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 019423D6D218E183CCA60116AA33CEB13BC0
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/gpOFwGigFruN2xX1_4na-JihRrY.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202617
IP address blocks: 84.247.18.0/24 maxlen: 24
93.113.103.0/24 maxlen: 24
93.113.109.0/24 maxlen: 24
185.159.0.0/22 maxlen: 22
185.159.0.0/24 maxlen: 24
185.159.1.0/24 maxlen: 24
185.159.2.0/24 maxlen: 24
2a07:b0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d2:18:e1:83:cc:a6:01:16:aa:33:ce:b1:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829385c068a016bb8ddb15f5ff89daf898a146b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:e8:68:11:ff:e7:fc:75:37:98:a3:93:fa:
18:dc:26:17:e7:80:05:df:d8:cb:f4:ba:c8:45:bf:
f4:28:83:1b:e4:9e:cd:99:f9:2d:a5:b7:a2:8d:5d:
8f:12:cb:51:e5:2f:ba:17:f3:04:1e:18:a4:5f:c2:
28:74:ea:1b:f5:05:09:e9:97:50:dd:90:69:2b:6d:
59:ed:ee:78:9e:94:ec:09:84:98:5e:1c:75:37:59:
35:19:d5:9b:6f:af:67:1c:bf:83:cd:bd:89:db:32:
18:d8:11:57:fc:1b:6e:f3:a0:61:ca:dc:f5:2a:79:
52:aa:b2:85:39:8c:73:41:55:f7:b7:65:76:57:c9:
d6:7b:df:80:d4:b3:c1:7f:46:f9:9b:2b:f4:20:23:
62:8f:0d:ad:55:79:42:7b:8e:19:58:fd:9e:6a:6d:
1c:ce:43:71:38:53:e0:56:d0:b7:b6:a6:03:8a:10:
69:cc:aa:04:c5:04:56:2e:1c:52:02:43:48:f4:b1:
be:0e:03:20:bf:c3:7d:2e:0d:e0:b3:25:5f:2b:07:
9b:0f:ac:8e:cc:34:d4:b6:ba:f4:cf:cf:0c:f7:29:
0b:be:2c:a3:01:58:95:d3:d5:d5:c0:94:bb:1b:35:
e9:00:d0:c2:49:fc:f1:5b:16:71:0a:f8:3f:02:70:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:93:85:C0:68:A0:16:BB:8D:DB:15:F5:FF:89:DA:F8:98:A1:46:B6
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/gpOFwGigFruN2xX1_4na-JihRrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.18.0/24
93.113.103.0/24
93.113.109.0/24
185.159.0.0/22
IPv6:
2a07:b0c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:73:54:da:78:a3:15:8c:88:43:23:5b:f5:11:b8:0d:bc:56:
05:19:05:09:33:ff:b3:1d:9f:65:e1:8b:d6:56:7a:1c:7f:1f:
52:2c:bb:90:fd:94:8c:70:6f:e3:48:b5:cb:be:78:da:12:9b:
71:7c:47:72:dc:17:50:7d:c8:c3:08:bd:97:d2:90:2e:77:d2:
98:ee:20:8a:df:a2:52:f8:ad:7e:d2:c5:7b:05:75:5e:cf:4d:
e2:9d:26:8c:0f:22:03:03:27:65:30:d1:11:0e:58:92:33:66:
bc:98:7f:81:07:6b:10:6e:68:36:36:48:a8:60:cb:cd:0b:3f:
74:97:05:b4:bc:31:99:dc:e1:4e:9a:1f:eb:81:8f:15:15:26:
61:69:a3:e4:36:b1:5a:47:56:23:c7:27:d4:e1:9f:01:f2:0e:
ea:38:93:61:4d:8e:8c:51:ee:6e:81:ae:fd:97:64:42:31:4c:
df:83:4e:81:e8:17:ab:c8:4b:ae:ae:c1:d4:56:ff:1e:ad:06:
06:df:db:af:11:ec:20:06:c9:ca:ff:23:3a:55:9f:e9:de:fc:
ef:d0:a4:f1:58:2e:ba:0e:b4:2a:74:51:23:42:64:d4:70:50:
f6:53:6e:93:10:15:12:95:16:49:49:0c:40:b9:66:c2:26:b9:
e6:a3:0f:a3
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQj1tIY4YPMpgEWqjPOsTvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1
NjJjNDQwHhcNMjUwMTAxMjE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjkzODVjMDY4YTAxNmJiOGRkYjE1ZjVmZjg5ZGFmODk4YTE0NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL7oaBH/5/x1N5ijk/oY3CYX54AF
39jL9LrIRb/0KIMb5J7NmfktpbeijV2PEstR5S+6F/MEHhikX8IodOob9QUJ6ZdQ
3ZBpK21Z7e54npTsCYSYXhx1N1k1GdWbb69nHL+Dzb2J2zIY2BFX/Btu86Bhytz1
KnlSqrKFOYxzQVX3t2V2V8nWe9+A1LPBf0b5myv0ICNijw2tVXlCe44ZWP2eam0c
zkNxOFPgVtC3tqYDihBpzKoExQRWLhxSAkNI9LG+DgMgv8N9Lg3gsyVfKwebD6yO
zDTUtrr0z88M9ykLviyjAViV09XVwJS7GzXpANDCSfzxWxZxCvg/AnB/MQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIKThcBooBa7jdsV9f+J2viYoUa2MB8GA1UdIwQY
MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt
Mjg4NzY2MDYxZDk4LzEvZ3BPRndHaWdGcnVOMnhYMV80bmEtSmloUnJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4
LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAVPcSAwQA
XXFnAwQAXXFtAwQCuZ8AMA0EAgACMAcDBQMqB7DAMA0GCSqGSIb3DQEBCwUAA4IB
AQAfc1TaeKMVjIhDI1v1EbgNvFYFGQUJM/+zHZ9l4YvWVnocfx9SLLuQ/ZSMcG/j
SLXLvnjaEptxfEdy3BdQfcjDCL2X0pAud9KY7iCK36JS+K1+0sV7BXVez03inSaM
DyIDAydlMNERDliSM2a8mH+BB2sQbmg2NkioYMvNCz90lwW0vDGZ3OFOmh/rgY8V
FSZhaaPkNrFaR1YjxyfU4Z8B8g7qOJNhTY6MUe5uga79l2RCMUzfg06B6BeryEuu
rsHUVv8erQYG39uvEewgBsnK/yM6VZ/p3vzv0KTxWC66DrQqdFEjQmTUcFD2U26T
EBUSlRZJSQxAuWbCJrnmow+j
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:44:03 2025 by rpki-client on console.sobornost.net