Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa
File: GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa (raw, json)
Hash identifier: Ns47X0wI0O3MuVbdsHwm7ba7lckhv6ZFSEeB9gRrT7M=
Subject key identifier: 18:02:30:86:AC:BD:B3:EF:AC:2B:87:C0:51:BE:59:99:7D:00:63:05
Certificate issuer: /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial: 019427482F17AC2B53F018F5BAAE9834AB4B
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207727
IP address blocks: 194.165.35.0/24 maxlen: 24
194.165.38.0/24 maxlen: 24
194.165.56.0/24 maxlen: 24
194.165.58.0/24 maxlen: 24
2a10:2a80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2f:17:ac:2b:53:f0:18:f5:ba:ae:98:34:ab:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18023086acbdb3efac2b87c051be59997d006305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:cb:0a:12:4a:ed:d7:ab:3b:64:3a:15:3a:
b6:38:03:51:de:98:68:ce:6c:a8:1f:64:45:0b:37:
9a:84:2f:e4:5c:7e:b4:95:44:a8:ee:0d:5e:be:d4:
cb:da:a2:d3:53:5e:e3:9b:64:7c:24:90:94:77:33:
b5:82:de:de:39:57:07:a9:cd:7e:34:d5:8c:47:7e:
31:20:d6:0d:e2:21:e7:c3:db:31:e3:f2:21:34:93:
ad:dc:93:a0:04:81:42:02:a1:d8:f1:3a:b1:52:29:
25:5b:02:5a:55:e2:7b:38:44:f8:85:33:c4:e1:66:
56:e1:59:ef:04:ce:4f:0b:4f:14:1d:03:94:8e:83:
09:5d:cf:d9:aa:ed:17:ae:16:2b:e4:ac:fa:e0:fc:
93:1b:94:cd:2b:1c:f9:ce:c9:a1:83:de:8b:78:0e:
4a:ed:a4:9a:bd:4c:63:53:b1:e1:9a:e9:0f:a9:35:
19:67:3c:ab:5c:3c:a4:27:d9:f4:a3:d2:e5:3b:7a:
a6:c2:9c:d9:64:cd:bc:0e:17:00:f5:26:f9:ea:6c:
cb:aa:19:40:5c:32:cc:02:fd:65:07:c0:53:14:2c:
67:53:04:46:e3:5f:64:ba:64:cc:f9:dd:ac:7b:8f:
74:f4:b7:da:91:b1:69:d3:cc:4a:11:79:ca:83:97:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:30:86:AC:BD:B3:EF:AC:2B:87:C0:51:BE:59:99:7D:00:63:05
X509v3 Authority Key Identifier:
keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.35.0/24
194.165.38.0/24
194.165.56.0/24
194.165.58.0/24
IPv6:
2a10:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:99:80:76:3e:bc:1a:84:03:4b:c0:9d:f2:d5:de:22:61:4c:
44:91:43:77:72:6e:c9:91:02:f2:0d:24:bb:84:92:d8:d4:6c:
ba:50:65:53:fd:75:0e:88:84:4a:77:96:4f:c5:17:07:71:51:
a2:66:ab:3a:63:7d:5c:5d:4e:b4:ac:a2:ef:b7:b5:6a:65:fc:
f7:5e:6e:ea:ce:fc:36:af:fc:0e:00:2d:05:20:cc:9f:fc:fe:
04:76:cf:1a:69:af:b6:75:37:5a:2a:a0:1d:b7:d0:43:cc:01:
5d:90:5e:e2:8d:fc:85:a3:c4:88:ad:95:3f:b4:66:ad:a0:41:
2e:c5:d2:a3:5b:0d:f5:65:a8:2e:fe:37:ce:51:36:92:81:a7:
7d:09:fe:09:95:65:19:77:70:9c:e7:ab:a9:a8:ac:61:fd:cc:
ca:04:82:36:ff:1f:f6:e2:ed:ed:ed:92:3f:6b:09:94:67:76:
e2:5e:39:8f:0e:c3:72:63:bf:9b:f1:f6:e2:ee:3d:af:d6:73:
50:36:10:0b:e1:fc:8a:ad:94:2e:71:55:f2:23:8f:db:1a:e2:
53:f3:e5:6a:a8:01:62:53:cc:81:60:cf:a6:c0:c6:a9:f6:72:
4b:3c:6f:95:ea:ed:ad:09:8f:7e:db:8f:c5:fc:5b:be:ab:85:
bb:b7:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:02 2025 by rpki-client