Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/G0TH3lCQFru_QjladmhvhozyRbs.roa
File: G0TH3lCQFru_QjladmhvhozyRbs.roa (raw, json)
Hash identifier: x5sECp0W//9pkozJAL/FVsg/fRPmnmoYOdSpb7eCgXQ=
Subject key identifier: 1B:44:C7:DE:50:90:16:BB:BF:42:39:5A:76:68:6F:86:8C:F2:45:BB
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 018CC5011DB43F53742DDFD50579675D0288
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/G0TH3lCQFru_QjladmhvhozyRbs.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41540
IP address blocks: 31.172.143.0/24 maxlen: 32
91.231.127.0/24 maxlen: 32
92.60.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1d:b4:3f:53:74:2d:df:d5:05:79:67:5d:02:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b44c7de509016bbbf42395a76686f868cf245bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bb:79:6c:1f:fd:1b:11:60:ba:40:02:35:90:
42:67:32:db:e8:09:c4:94:da:df:e1:35:0c:18:d2:
4d:c5:6a:a6:5e:52:e2:f2:6c:24:2b:fa:e7:fc:a6:
30:e6:23:ea:59:0e:0d:b2:f0:0d:a8:df:bd:20:79:
d9:6d:5c:21:cd:cf:5c:dc:8a:d2:a1:2a:10:94:e4:
74:bd:38:97:7f:11:b0:35:49:a5:d9:eb:4f:39:d5:
73:95:be:53:39:38:ad:fc:b7:ee:b0:63:ec:17:9a:
e1:f0:4c:b4:7d:7e:d4:3f:0f:63:36:2b:46:77:0e:
99:3f:7b:4c:7b:01:de:3e:11:87:57:3b:1e:b5:d6:
51:3c:e5:5e:fd:8a:7c:82:4a:4f:02:15:59:1e:17:
06:e7:ca:75:9f:0a:9c:71:68:cc:d0:fa:3a:2e:ac:
09:b4:5f:a9:c3:81:1b:35:b8:62:ae:2f:b2:55:f8:
cc:4d:cb:02:58:34:f0:64:84:32:7d:35:b8:0d:dc:
8a:e0:b9:5b:03:60:8e:9e:8a:7d:5f:ff:6e:f8:00:
ea:ee:d2:a0:11:fd:2a:4c:1e:8d:12:2c:19:e8:8a:
45:2d:3e:0c:20:e8:cf:5f:8a:90:d0:e1:c8:c6:85:
20:34:f7:5f:93:1c:7b:88:f4:c0:ed:dc:85:b0:b3:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:C7:DE:50:90:16:BB:BF:42:39:5A:76:68:6F:86:8C:F2:45:BB
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/G0TH3lCQFru_QjladmhvhozyRbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.143.0/24
91.231.127.0/24
92.60.190.0/23
Signature Algorithm: sha256WithRSAEncryption
af:5f:22:94:0f:60:7f:2d:ae:d4:c3:64:a1:79:a0:a3:12:87:
d8:bf:18:71:08:1e:03:e0:5e:98:a0:83:56:b2:06:66:07:05:
10:f0:28:8b:1e:57:e2:af:f1:1d:2f:30:e6:14:09:51:2e:a0:
8c:b2:65:41:9b:32:e7:5e:15:2c:10:d4:f0:38:0d:61:1a:eb:
44:3c:30:d2:40:2d:a4:91:9b:2a:bd:07:fd:49:18:7a:3a:44:
09:24:34:68:62:34:e8:a0:a0:82:27:3f:d3:e4:a4:b3:e9:0a:
59:a6:46:b3:57:57:cb:0d:93:e4:36:c5:32:a8:e9:d6:7b:11:
ff:77:c2:1e:50:ac:8c:40:df:1c:d2:6c:af:7c:48:a6:63:f9:
7e:5f:82:74:e1:26:b5:bd:74:21:ec:18:f7:b9:74:28:a6:29:
26:b0:91:f7:b7:8b:95:9c:0b:9c:06:40:db:c3:fe:01:83:3e:
9a:14:a0:03:95:00:f4:cd:11:e6:5b:cc:07:15:a8:29:10:a9:
29:80:13:fd:2f:35:1e:b2:68:21:2d:a6:ec:e8:38:ee:d3:e6:
1a:0f:5c:74:70:49:3b:e6:cd:c2:18:e1:d1:e7:84:83:51:68:
a4:02:02:27:49:2e:e0:ac:c3:a2:71:bc:2c:7d:e7:f9:57:5a:
b1:8d:7e:9b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFAR20P1N0Ld/VBXlnXQKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi
YjM0YmMwHhcNMjQwMTAxMTIzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjQ0YzdkZTUwOTAxNmJiYmY0MjM5NWE3NjY4NmY4NjhjZjI0NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrt5bB/9GxFgukACNZBCZzLb6AnE
lNrf4TUMGNJNxWqmXlLi8mwkK/rn/KYw5iPqWQ4NsvANqN+9IHnZbVwhzc9c3IrS
oSoQlOR0vTiXfxGwNUml2etPOdVzlb5TOTit/LfusGPsF5rh8Ey0fX7UPw9jNitG
dw6ZP3tMewHePhGHVzsetdZRPOVe/Yp8gkpPAhVZHhcG58p1nwqccWjM0Po6LqwJ
tF+pw4EbNbhiri+yVfjMTcsCWDTwZIQyfTW4DdyK4LlbA2COnop9X/9u+ADq7tKg
Ef0qTB6NEiwZ6IpFLT4MIOjPX4qQ0OHIxoUgNPdfkxx7iPTA7dyFsLPp3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBtEx95QkBa7v0I5WnZob4aM8kW7MB8GA1UdIwQY
MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt
YTMxNzA4ZDQwMzkxLzEvRzBUSDNsQ1FGcnVfUWpsYWRtaHZob3p5UmJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx
LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH6yPAwQA
W+d/AwQBXDy+MA0GCSqGSIb3DQEBCwUAA4IBAQCvXyKUD2B/La7Uw2SheaCjEofY
vxhxCB4D4F6YoINWsgZmBwUQ8CiLHlfir/EdLzDmFAlRLqCMsmVBmzLnXhUsENTw
OA1hGutEPDDSQC2kkZsqvQf9SRh6OkQJJDRoYjTooKCCJz/T5KSz6QpZpkazV1fL
DZPkNsUyqOnWexH/d8IeUKyMQN8c0myvfEimY/l+X4J04Sa1vXQh7Bj3uXQopikm
sJH3t4uVnAucBkDbw/4Bgz6aFKADlQD0zRHmW8wHFagpEKkpgBP9LzUesmghLabs
6Dju0+YaD1x0cEk75s3CGOHR54SDUWikAgInSS7grMOicbwsfef5V1qxjX6b
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:03:08 2025 by rpki-client