Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/GTFBgv2tNjcuxAQIe01brH4jwTk.roa
File: GTFBgv2tNjcuxAQIe01brH4jwTk.roa (raw, json)
Hash identifier: Mc8ui7CXRHASlbfIuKweFLL2cR+DG52g7wgx3xsTD/U=
Subject key identifier: 19:31:41:82:FD:AD:36:37:2E:C4:04:08:7B:4D:5B:AC:7E:23:C1:39
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019425222E288E134000FE667DAA6E4219EA
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/GTFBgv2tNjcuxAQIe01brH4jwTk.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16340
IP address blocks: 82.115.64.0/19 maxlen: 19
95.174.32.0/19 maxlen: 19
217.144.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2e:28:8e:13:40:00:fe:66:7d:aa:6e:42:19:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19314182fdad36372ec404087b4d5bac7e23c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:de:34:3f:b1:d1:a2:48:f2:21:44:b5:e4:
f6:4c:71:1c:b5:ca:3f:4d:06:b9:65:0a:25:db:94:
26:85:8d:f7:7d:10:db:2b:40:c0:54:06:18:bc:b6:
cf:a7:83:29:bf:c2:aa:ec:aa:32:c2:d6:2d:31:a3:
bc:4d:33:48:a8:b4:e4:72:d0:13:b5:43:d8:36:08:
05:92:dd:96:b9:04:45:6d:86:c0:f5:93:8a:fa:db:
cb:1c:eb:e8:9b:80:8a:62:7e:93:8d:60:f9:39:ad:
89:d8:e2:d3:07:65:cb:f4:56:e2:b7:2f:fd:f7:ed:
75:f4:77:4a:e2:9d:01:25:89:bb:72:36:a9:88:c0:
4a:8e:6d:36:5e:22:f4:86:f1:76:08:8a:fc:d6:7b:
60:5a:07:72:c1:5f:e7:87:5b:41:88:b6:23:16:7b:
8d:67:0d:c7:f2:97:ab:0a:3b:64:04:71:5f:d6:8d:
34:16:18:72:70:4f:b4:df:fe:8f:d8:e9:d7:f7:89:
88:e0:36:35:eb:02:fb:11:e6:75:0b:64:66:35:30:
5a:ea:de:91:62:4c:cc:a5:5c:05:73:a7:f1:67:98:
00:19:a1:9d:60:18:28:6c:bc:3d:39:14:2f:e5:d7:
74:13:21:5c:7f:37:ec:94:f6:58:22:1f:4a:d9:91:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:41:82:FD:AD:36:37:2E:C4:04:08:7B:4D:5B:AC:7E:23:C1:39
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/GTFBgv2tNjcuxAQIe01brH4jwTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.64.0/19
95.174.32.0/19
217.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
68:1f:e7:bd:8d:75:95:5d:89:2e:6a:8e:90:03:bb:6e:4d:b6:
06:1a:92:fd:bb:0d:cf:61:24:2a:a4:86:4e:3d:00:a3:84:dd:
5c:43:98:3d:c1:68:78:ab:d9:4e:1b:32:7b:44:e8:66:10:a0:
67:58:6b:4c:ff:85:ec:42:69:15:44:76:c0:f8:05:a1:92:32:
af:23:23:ec:04:53:3a:7d:98:fa:74:9f:b3:4c:84:4a:12:d3:
10:04:a4:05:5e:20:70:d1:6f:bd:e7:46:da:4d:ee:72:ee:53:
46:c5:69:f7:fd:68:1e:86:06:ce:ca:5e:4f:8a:34:81:b1:18:
75:ee:f4:e9:fe:f8:ae:8b:75:27:5b:39:32:84:a7:dd:d4:f5:
61:64:2c:47:1a:82:b4:53:55:0f:4f:0f:89:9d:f2:d4:14:fa:
ba:97:71:64:27:b7:6e:44:f7:03:e3:a8:9e:2c:f6:e1:75:94:
4d:6c:a0:d5:6c:e2:d6:90:ec:d9:30:78:6f:2c:b6:3a:a8:95:
1f:ef:e4:7a:32:64:58:a3:a0:cb:ce:6e:fa:1f:84:02:9b:5b:
ee:a6:6f:62:fc:6a:16:8a:1e:75:78:39:8a:da:7d:34:b9:f3:
3f:48:01:d6:b7:6b:94:2d:43:47:df:60:19:3c:0e:23:1a:bc:
7a:6c:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:44 2025 by rpki-client