Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/GWp0rSjdfGwKcSPnGUUsbETvzK0.roa
File: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (raw, json)
Hash identifier: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=
Subject key identifier: 19:6A:74:AD:28:DD:7C:6C:0A:71:23:E7:19:45:2C:6C:44:EF:CC:AD
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266BA340101DCF9ACFB1741265FE760D
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/GWp0rSjdfGwKcSPnGUUsbETvzK0.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210791
IP address blocks: 78.136.110.0/24 maxlen: 24
109.167.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a3:40:10:1d:cf:9a:cf:b1:74:12:65:fe:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196a74ad28dd7c6c0a7123e719452c6c44efccad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:ef:ff:4c:42:37:9b:95:9b:b4:f9:9e:a6:
10:d2:7b:e7:65:43:72:39:78:a6:78:93:11:df:5e:
21:43:99:bf:92:d0:6a:8c:46:e2:8a:44:16:e7:8f:
7e:f0:55:e7:30:9f:61:ca:23:30:e9:08:1d:10:3c:
63:7e:72:e7:ab:c2:2a:6e:8c:b0:2a:53:c1:7e:85:
4c:a5:4d:98:8e:40:8f:8a:6b:06:e9:c5:8e:e2:f3:
b4:0f:f4:36:27:63:b1:b8:17:cd:9a:b5:96:45:d3:
a5:f2:7e:5e:7d:fb:a6:35:dd:80:29:a8:c9:46:8a:
fd:dd:7d:66:c0:d4:13:ad:75:38:6b:d0:3d:94:05:
90:ca:a9:10:2d:db:8c:62:05:2f:8b:7e:fb:02:db:
d1:70:85:fa:5d:be:8c:ac:5e:5c:bd:fd:13:c4:a0:
66:56:d3:a1:51:91:d4:58:9b:13:23:a2:65:21:25:
f8:f3:78:42:c1:99:86:cf:36:f3:7a:4c:d8:b5:1c:
b4:3a:01:58:ae:4a:5d:8c:e5:c4:06:d4:5b:a9:42:
2c:1b:94:d8:c8:38:30:60:3d:d2:a8:4a:3d:54:83:
03:16:da:8e:6e:d9:ec:bf:14:0c:97:98:06:51:a7:
fd:81:0f:07:a3:6b:59:e8:f6:57:d2:d3:c7:f5:0d:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:74:AD:28:DD:7C:6C:0A:71:23:E7:19:45:2C:6C:44:EF:CC:AD
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/GWp0rSjdfGwKcSPnGUUsbETvzK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.110.0/24
109.167.106.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a1:64:d5:c4:7c:b9:d6:09:b6:3e:38:31:d1:cb:7d:04:0f:
08:b1:0c:32:4f:b5:2f:f2:83:1f:49:13:cf:36:cd:67:4d:4c:
4e:ed:c4:d3:72:76:e9:18:ff:af:66:76:41:2f:ef:2e:78:62:
68:d6:92:04:69:a6:4d:8f:21:fb:da:76:e5:8e:b2:b4:6d:97:
75:66:8d:84:14:d3:89:3a:46:b2:1f:8b:00:b5:5a:b4:12:28:
84:2b:13:71:79:ef:1f:6b:53:77:b1:a2:bb:1a:c2:a5:14:08:
83:21:8a:11:e7:1d:2c:cf:fe:ee:21:8a:33:7e:34:ee:b1:de:
fc:56:b5:ce:56:69:0b:87:eb:08:f6:db:6a:5b:34:ec:93:9a:
3c:b1:f9:b0:c0:1a:1a:5d:39:75:91:15:fb:16:0a:ca:1a:7e:
98:ae:e4:64:61:cd:81:96:0f:9a:e4:a3:f1:11:93:a1:7a:43:
b8:01:8f:c2:57:e1:e2:d2:cd:1d:6a:8e:8d:3c:0f:d7:65:15:
e1:d8:57:34:80:de:21:39:04:2c:3c:ad:93:36:f9:2e:87:e3:
32:13:87:de:03:56:a3:7a:5e:f2:cb:f1:6b:2f:9d:53:d0:f4:
49:d1:b6:dd:cd:23:5d:0f:09:fe:6d:cb:d0:c4:ca:1b:a6:ff:
81:96:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:32 2025 by rpki-client