Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gbv-2V8PJ6aPOsPRk7DQN5MggqM.roa
File: Gbv-2V8PJ6aPOsPRk7DQN5MggqM.roa (raw, json)
Hash identifier: og16coyDgl/2N52bwsTG8AjjZpimTIvJXrBJ344Dmig=
Subject key identifier: 19:BB:FE:D9:5F:0F:27:A6:8F:3A:C3:D1:93:B0:D0:37:93:20:82:A3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194B2A41A576DBE85DEBF42DC7E7D9363F4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gbv-2V8PJ6aPOsPRk7DQN5MggqM.roa
Signing time: Wed 29 Jan 2025 15:18:06 +0000
ROA not before: Wed 29 Jan 2025 15:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212025
IP address blocks: 193.124.207.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:a4:1a:57:6d:be:85:de:bf:42:dc:7e:7d:93:63:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 29 15:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19bbfed95f0f27a68f3ac3d193b0d037932082a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:c9:6b:e7:10:a5:92:62:71:9a:4d:ad:21:
f7:78:c9:0f:cf:43:0a:41:c5:77:9b:db:c3:d8:af:
55:32:43:6b:e8:c2:3d:0e:3f:36:2e:fa:b7:7e:01:
c1:54:ba:cc:3f:1b:63:4e:f3:24:c0:9b:ca:30:63:
4d:cf:96:93:3c:f0:fa:31:24:24:fe:ac:7b:8a:4b:
f7:48:c6:33:2e:b5:0c:8a:4b:6a:7d:ed:a7:da:0c:
c7:c8:d0:bc:bf:11:bf:1a:dc:0d:c9:0e:21:cd:07:
c5:41:e4:aa:a9:8b:45:ea:20:2a:bd:08:fe:44:30:
d5:47:79:8b:eb:16:c7:6e:2b:e4:06:01:8e:e0:0d:
8c:20:60:86:30:c7:dd:9d:06:ba:3c:e4:2c:91:c2:
a1:3f:b3:b2:db:bd:f8:0c:26:5d:6c:82:72:36:22:
9e:da:94:e8:c9:53:c8:4f:81:1c:85:12:30:4e:da:
78:d5:7b:70:c5:00:50:d5:b6:34:0b:74:38:12:56:
cc:fd:02:f4:b6:7e:67:6c:91:f1:3a:de:51:74:97:
b1:21:c7:6b:bb:6d:9d:9d:15:eb:c5:cb:9f:03:1e:
cb:64:ef:99:fc:f1:15:6d:fb:65:fe:fb:d0:80:49:
d7:4f:61:60:c4:5f:b7:83:38:5d:07:25:a2:27:f6:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:FE:D9:5F:0F:27:A6:8F:3A:C3:D1:93:B0:D0:37:93:20:82:A3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gbv-2V8PJ6aPOsPRk7DQN5MggqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.207.0/24
212.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b6:d7:17:82:36:f6:79:b3:c7:c8:7b:c7:ba:06:78:77:b7:
16:8e:aa:d2:88:eb:38:ce:4e:54:55:15:57:80:71:ca:60:de:
c3:d4:13:ed:56:90:44:d8:8c:ff:42:1b:4c:c3:ba:25:5f:c0:
34:ab:f4:43:6b:0c:bb:9f:dc:21:4b:f1:be:cd:54:45:19:46:
35:06:88:5b:a5:fd:86:70:dc:4f:6b:91:8a:43:b4:64:0d:b2:
74:4a:58:2d:c6:62:b2:2c:f4:97:aa:5f:02:af:c5:f2:6b:c0:
bf:8f:81:35:53:d7:ba:92:90:ef:da:aa:80:6d:64:9f:aa:72:
f9:87:0f:81:cc:ce:e7:c7:2e:0d:f8:55:38:b0:6d:35:73:3e:
d5:d7:b3:78:0b:f8:1e:0e:d0:96:a6:c7:70:86:79:a1:7e:ce:
06:70:b7:9d:77:13:49:42:f5:1d:64:ec:c2:8f:59:eb:f7:1f:
a1:cb:e7:22:b9:7e:86:a5:ee:2b:b4:c2:2e:32:a9:99:1f:cb:
0b:03:29:a8:90:85:f3:70:3c:f7:16:c9:a0:d2:95:1b:40:7b:
3c:3e:18:41:17:6f:25:c2:90:d7:22:96:d2:b9:15:02:6d:59:
f7:d7:83:98:df:36:73:f9:c0:23:92:45:6d:eb:4d:8b:0f:3a:
c5:e6:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:14:02 2025 by rpki-client