Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/GVBBQxMRVM5Prl-352Er5-uu-fo.roa
File: GVBBQxMRVM5Prl-352Er5-uu-fo.roa (raw, json)
Hash identifier: +lFuFlkpAKOd4QXUMkWYct6IPIsJLJLhmlMRZAyakUA=
Subject key identifier: 19:50:41:43:13:11:54:CE:4F:AE:5F:B7:E7:61:2B:E7:EB:AE:F9:FA
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0194944888BF5B8FF51BC82CEB0F664947D8
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/GVBBQxMRVM5Prl-352Er5-uu-fo.roa
Signing time: Thu 23 Jan 2025 17:49:29 +0000
ROA not before: Thu 23 Jan 2025 17:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196755
IP address blocks: 80.251.108.0/22 maxlen: 22
80.251.108.0/23 maxlen: 23
157.143.248.0/21 maxlen: 21
178.157.18.0/23 maxlen: 23
178.157.20.0/22 maxlen: 22
178.157.24.0/23 maxlen: 23
178.157.26.0/23 maxlen: 23
178.157.28.0/22 maxlen: 22
178.157.40.0/22 maxlen: 22
178.157.44.0/22 maxlen: 22
178.174.106.0/23 maxlen: 23
178.174.108.0/23 maxlen: 24
217.181.251.0/24 maxlen: 24
217.181.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:48:88:bf:5b:8f:f5:1b:c8:2c:eb:0f:66:49:47:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jan 23 17:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19504143131154ce4fae5fb7e7612be7ebaef9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:f4:3d:dc:40:5e:6f:5c:25:79:48:0b:3e:
1b:13:17:b2:e8:47:a9:29:05:53:c6:0c:80:3f:59:
df:06:20:0f:4b:d4:9b:c6:f0:54:c1:9e:3e:12:1b:
9f:27:f9:7a:f6:44:87:fc:64:bb:8f:bb:f9:eb:3d:
8a:6d:77:45:d1:3d:16:7b:00:81:4f:ce:3e:42:62:
6d:68:f4:ce:d1:a3:dc:ac:cf:85:dd:77:53:34:8f:
ac:eb:16:e5:49:99:e5:79:94:b8:25:7d:f4:24:b4:
b2:d6:1c:82:f9:0d:50:d7:f9:7f:5c:3d:8e:5e:51:
ab:83:79:09:ff:07:3f:f5:65:87:b6:5e:06:d4:d7:
c4:6f:4e:ed:1b:13:54:22:85:85:d0:05:21:3c:66:
58:dd:0c:36:7d:90:49:0f:45:6b:a3:92:5f:03:a1:
91:43:15:36:c5:33:cc:f1:0d:36:de:6b:e5:be:9d:
88:5b:d0:fc:7b:ce:a4:36:81:58:1b:2f:54:96:18:
19:77:88:49:87:4d:20:a5:7d:05:d1:4a:f8:af:90:
5a:60:eb:c9:48:79:6c:d0:f1:0a:5b:4c:bd:24:f2:
8f:f0:99:5d:eb:9d:d8:0f:48:01:c3:34:49:be:b6:
bd:b5:5b:37:f0:fb:58:32:46:08:4e:22:2c:75:02:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:50:41:43:13:11:54:CE:4F:AE:5F:B7:E7:61:2B:E7:EB:AE:F9:FA
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/GVBBQxMRVM5Prl-352Er5-uu-fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.251.108.0/22
157.143.248.0/21
178.157.18.0-178.157.31.255
178.157.40.0/21
178.174.106.0-178.174.109.255
217.181.251.0-217.181.253.255
Signature Algorithm: sha256WithRSAEncryption
85:7b:2e:47:f0:31:0d:05:c6:9c:ad:57:ea:19:2a:2f:d5:5a:
3d:a7:40:a9:07:f2:e4:82:65:df:af:af:9e:d0:ee:d8:98:93:
03:b2:d3:c5:e0:6f:39:17:c9:50:ee:cf:f4:98:ff:4e:78:ce:
ae:0e:14:2c:07:04:06:f4:54:7d:97:56:e3:62:36:60:06:95:
be:54:02:a1:c9:19:b5:0e:6c:22:71:00:fb:7c:38:1a:ac:31:
6d:a8:f5:6a:37:c1:f2:fc:7f:48:b8:ed:2f:70:99:e1:7e:41:
57:79:9d:b3:69:d5:a7:0d:8b:6c:1a:f3:86:4f:01:1f:4a:da:
73:b8:1a:33:75:4b:56:33:c1:9f:4a:d7:d5:90:b9:5a:86:08:
11:b0:e7:69:e2:ad:b0:f1:82:7e:19:0e:3f:3b:64:ab:ff:ad:
d0:f6:9d:83:03:10:44:0d:8b:2b:39:bd:31:10:04:0a:3e:1a:
06:74:d0:03:fe:14:50:3e:07:f1:34:54:a3:85:14:93:1b:c1:
ad:ac:7a:98:76:bf:82:7f:57:03:8c:ff:9e:5d:73:b9:c6:a0:
96:b1:b8:a6:aa:bd:43:6a:f9:c7:f1:57:55:b6:05:a6:67:1b:
dd:f0:de:3b:3c:41:14:e3:a0:a9:de:1c:45:e4:2b:41:14:a9:
18:c1:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:40 2025 by rpki-client