Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/GebDZHzgUSVpcN28Yg77a-VI06g.roa
File: GebDZHzgUSVpcN28Yg77a-VI06g.roa (raw, json)
Hash identifier: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=
Subject key identifier: 19:E6:C3:64:7C:E0:51:25:69:70:DD:BC:62:0E:FB:6B:E5:48:D3:A8
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 01942369BEFFA83FE26EE515DC307E728114
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/GebDZHzgUSVpcN28Yg77a-VI06g.roa
Signing time: Wed 01 Jan 2025 19:48:40 +0000
ROA not before: Wed 01 Jan 2025 19:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48663
IP address blocks: 188.246.192.0/23 maxlen: 23
193.108.199.0/26 maxlen: 26
2a03:9800:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:be:ff:a8:3f:e2:6e:e5:15:dc:30:7e:72:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jan 1 19:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19e6c3647ce051256970ddbc620efb6be548d3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:f6:87:28:82:6a:74:c6:ab:d7:8c:ec:f9:
f4:5e:fd:37:8f:3f:7f:ba:bc:49:ca:ff:1e:f0:11:
d8:5b:31:de:64:3e:d3:b3:20:c5:7e:73:26:ba:49:
be:b3:72:f1:df:c4:54:16:72:8c:57:54:cc:67:15:
05:08:8b:a1:65:23:26:bf:26:00:73:ab:1c:78:ea:
fe:19:ad:10:df:6b:56:bf:c9:ba:cd:18:8a:06:c4:
05:43:15:8b:99:97:c4:dd:2f:60:4e:a8:d7:fe:cf:
34:a9:27:5b:06:54:1e:e7:1d:38:bb:94:fc:c9:38:
f8:6a:b0:a3:3a:d2:75:95:be:63:c1:c9:a0:15:c3:
19:50:20:5e:d5:1b:13:42:0e:37:c3:4d:4d:af:c4:
aa:a2:44:25:08:76:38:fd:7d:6d:4e:5c:1c:38:c6:
90:8d:fe:77:29:e7:d7:1f:a2:29:d9:9c:d0:6a:fa:
e7:6a:b9:4d:c0:31:b9:a4:3f:7e:19:40:30:6c:97:
b1:1a:1f:a4:a6:c9:6b:2d:cc:45:f4:7d:47:a9:01:
c7:0e:be:4b:77:6a:82:cf:85:2b:1d:e3:b7:a2:ef:
e6:c6:14:ee:2a:84:4b:2e:82:29:d6:20:e8:ab:a9:
63:92:9f:d9:19:d5:45:40:26:88:43:7b:db:cd:af:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:C3:64:7C:E0:51:25:69:70:DD:BC:62:0E:FB:6B:E5:48:D3:A8
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/GebDZHzgUSVpcN28Yg77a-VI06g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.192.0/23
193.108.199.0/26
IPv6:
2a03:9800:1::/48
Signature Algorithm: sha256WithRSAEncryption
c1:f4:b6:91:e5:30:27:60:04:04:03:b2:a9:bd:7b:80:af:bb:
e5:10:73:ec:e8:43:e8:e4:e8:a3:e1:f7:ae:99:00:0a:9e:06:
f6:74:22:d6:91:ff:2b:e1:44:b1:60:f7:a9:d5:c5:15:ff:c9:
8a:6a:21:a1:52:01:c3:01:5f:a6:02:c1:6c:a5:5c:eb:35:41:
00:c1:9c:f1:e0:10:e5:0e:09:d4:ef:89:42:d0:aa:52:11:78:
7b:df:dc:31:80:ed:05:6b:8c:16:05:77:13:92:c6:23:0f:d3:
22:ba:70:72:11:d5:65:5f:8f:6b:51:53:e5:a3:92:b3:c3:ce:
6f:1e:73:d5:e8:e0:b5:d9:ee:d4:fd:d8:d9:55:b7:55:22:90:
d9:44:3a:b1:8c:97:1e:a2:05:56:d7:8e:1e:85:d3:07:21:66:
cb:21:d5:0c:f0:c6:71:6c:89:95:bb:87:0c:79:d8:98:5e:46:
50:aa:3a:59:be:31:f4:72:94:1d:e4:ac:fd:11:26:13:cb:f4:
2d:c5:3f:cd:9a:9c:19:e6:49:2b:d8:05:dd:70:30:6b:02:ca:
c8:e8:b4:2f:6b:34:6b:f7:2b:42:69:70:5a:e9:f5:7d:33:a7:
77:02:c5:f9:69:ea:f3:6d:67:4b:7d:6b:a9:79:ba:a6:6f:8c:
3a:e0:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:05 2025 by rpki-client