Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/GGRSsytPMsehyIvT0Ks7HBxoCsU.roa
File: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (raw, json)
Hash identifier: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=
Subject key identifier: 18:64:52:B3:2B:4F:32:C7:A1:C8:8B:D3:D0:AB:3B:1C:1C:68:0A:C5
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 0194266C014B38AFBF50BDC0661A17CB9C8F
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/GGRSsytPMsehyIvT0Ks7HBxoCsU.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209782
IP address blocks: 185.126.202.0/24 maxlen: 24
185.126.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:01:4b:38:af:bf:50:bd:c0:66:1a:17:cb:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=186452b32b4f32c7a1c88bd3d0ab3b1c1c680ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:54:f1:e0:a2:26:cf:80:ba:16:88:9b:a1:
6f:ea:b4:8a:00:eb:be:b4:f7:46:55:56:de:83:e0:
71:3e:7d:1a:78:93:af:05:7e:d2:c2:24:62:7a:83:
56:bf:fd:cd:c5:be:46:df:3a:b3:0b:f1:9d:b2:f0:
1b:cc:4f:72:05:8d:a6:27:61:8b:9e:b1:b1:5d:6e:
f2:13:60:1d:e3:06:0d:43:47:40:fc:2c:a3:1c:ed:
67:bc:0d:d7:6d:f2:e6:fc:eb:21:82:2d:c0:02:ce:
a4:d7:23:be:d6:c9:db:5f:02:9d:1f:16:9e:92:73:
3c:5f:af:87:53:bf:22:35:0d:53:c9:a6:2d:29:1c:
64:27:fe:18:5f:14:a3:4c:99:c8:6a:42:76:0c:cc:
b3:d2:35:36:58:2b:1a:fe:fe:a8:89:c8:11:b5:52:
b3:59:d3:fe:1b:ed:61:80:96:80:a2:1d:8f:25:c5:
f2:64:9b:77:75:bc:51:a0:a1:5c:af:52:35:3f:52:
0d:26:c4:0b:58:99:ad:4e:8c:40:4c:46:60:89:fa:
a1:60:89:54:59:0b:2f:b2:f9:1d:c4:ad:9e:43:83:
7d:cc:aa:a8:7d:cc:6b:23:c9:49:d3:df:9b:19:46:
d1:da:80:97:fe:26:25:f9:b7:31:5c:9c:f2:d6:e0:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:52:B3:2B:4F:32:C7:A1:C8:8B:D3:D0:AB:3B:1C:1C:68:0A:C5
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/GGRSsytPMsehyIvT0Ks7HBxoCsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.202.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:69:61:fe:57:27:2f:e0:69:d3:a7:aa:c8:bf:ae:be:6b:c0:
9b:27:b3:29:71:95:0a:cd:92:f1:fa:0c:f0:2b:af:2a:4c:45:
fd:1a:64:54:44:0d:c7:12:ad:e3:9a:78:d3:b0:d7:a2:a3:14:
67:ff:ca:e3:3d:c2:2f:ab:6e:9b:40:23:cc:4d:ba:6c:af:0c:
a9:3e:37:e6:c8:31:9c:87:67:a3:e1:88:88:be:a0:3e:7d:c2:
d4:a5:26:36:12:da:65:2e:89:1b:38:ec:6a:e3:3e:cb:ed:fe:
cc:68:9d:d4:01:66:b0:ef:5d:ef:8b:02:d3:e3:77:85:70:67:
6d:46:0a:fb:1e:59:5d:4c:ef:01:8b:9b:f8:64:f7:e6:b5:52:
e8:c5:ce:1e:d1:83:54:43:bc:73:dd:2a:02:0c:d8:47:00:18:
49:ff:d3:be:82:d9:a5:50:d8:90:ed:49:ec:1f:96:33:0e:79:
24:ab:29:9b:fa:00:15:dc:92:53:4e:08:5f:73:48:b6:64:72:
16:3d:09:c6:d8:9b:41:b5:e4:16:cd:43:fd:79:70:7b:6f:bd:
7f:e2:34:dc:59:33:a4:fa:1e:a9:8d:50:b4:0f:ff:ef:4e:54:
17:ac:bf:5f:f8:d2:4b:7a:c0:12:a1:0d:ab:3e:87:ad:5a:69:
a4:ad:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:50 2025 by rpki-client