Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/GTryjErQ-QvKOHELwraRwqDQoQ4.roa
File: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (raw, json)
Hash identifier: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=
Subject key identifier: 19:3A:F2:8C:4A:D0:F9:0B:CA:38:71:0B:C2:B6:91:C2:A0:D0:A1:0E
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019421B1C403FDD1AB35245E918313D11D26
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/GTryjErQ-QvKOHELwraRwqDQoQ4.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39732
IP address blocks: 195.60.72.0/23 maxlen: 23
2001:67c:20f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c4:03:fd:d1:ab:35:24:5e:91:83:13:d1:1d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=193af28c4ad0f90bca38710bc2b691c2a0d0a10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:f1:07:d6:a3:a2:cd:35:f2:3f:ef:9d:44:
e0:2f:3a:7c:a0:cf:e0:68:b6:e2:c6:fe:80:b2:0d:
91:9a:32:01:cf:fa:4f:6b:3d:8f:71:81:21:c7:54:
d4:5c:cd:c6:b3:34:24:2e:b0:39:b5:8b:dd:ed:84:
fd:20:5b:df:5c:e6:0e:e0:4f:a3:db:7c:2d:11:58:
27:b9:d7:c1:52:cf:7b:2d:56:82:8a:ff:52:3b:05:
d7:b4:8a:99:24:4b:b5:80:da:13:c6:b1:c4:a1:b4:
54:63:0f:0a:ff:9b:eb:0c:a6:4f:ae:b2:08:29:51:
84:f4:bc:45:5f:3d:a3:48:82:77:99:74:68:ed:3f:
bf:41:a1:ec:09:69:41:2e:05:cf:da:99:54:e3:a0:
c2:ed:27:95:ff:a9:09:1a:ec:29:04:62:cf:35:f0:
fc:ba:c1:98:a4:e1:c2:82:f1:d8:5d:32:4e:79:5e:
56:e8:bb:79:51:d5:b5:6f:d2:60:7b:6c:d0:c9:0c:
56:13:7b:37:00:65:7b:49:05:3b:3a:09:15:be:5f:
69:4c:83:b3:a5:6b:ee:0f:f4:70:b6:44:1a:e1:6b:
f4:d6:fc:29:e6:90:b1:54:6a:58:62:57:24:15:01:
01:d0:5f:14:e1:65:6a:94:ba:70:5f:2f:a7:f5:9b:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:F2:8C:4A:D0:F9:0B:CA:38:71:0B:C2:B6:91:C2:A0:D0:A1:0E
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/GTryjErQ-QvKOHELwraRwqDQoQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.72.0/23
IPv6:
2001:67c:20f4::/48
Signature Algorithm: sha256WithRSAEncryption
a0:fd:5c:8c:a8:0d:c4:3d:35:94:8f:74:b4:db:b5:63:53:0f:
78:1c:55:ee:c3:37:c0:c5:43:4f:eb:42:e9:d1:bf:a8:7a:c1:
d6:05:35:69:dd:99:6c:7c:3d:df:42:8f:52:08:7a:f3:3f:92:
73:fd:77:f5:ba:2c:da:cf:94:fb:a7:50:a3:af:62:f4:9f:1b:
f0:0a:e7:70:3c:bd:89:3c:f8:15:70:56:4d:59:ed:e2:8a:e9:
8d:f8:b5:0e:c6:1a:59:22:67:83:03:77:76:fd:47:92:ab:31:
52:3b:c1:d6:8d:26:f4:61:14:06:66:f4:b5:84:7f:9f:3c:ba:
f8:b9:f5:b1:23:51:dd:15:6c:31:85:e1:dc:13:52:a2:5a:8b:
7d:51:a9:b3:09:40:54:1a:60:22:7e:7c:a6:18:3d:8f:48:80:
12:7b:f2:7c:9e:73:e8:72:3d:87:4f:84:65:ec:8e:cd:55:13:
99:7c:cc:bb:1f:5f:f2:45:f5:0e:5b:01:89:76:fe:68:2b:88:
4e:2a:8e:67:01:3d:ac:11:97:2b:8e:17:50:78:ed:c7:49:bb:
ec:f9:e8:78:2c:ac:7a:02:06:db:93:d8:1a:20:11:b6:ba:70:
7a:38:4f:ed:80:21:b2:78:65:9d:7d:0e:5c:e5:b3:c6:1d:44:
f8:f9:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:42 2025 by rpki-client