Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa
File: gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa (raw, json)
Hash identifier: BWCu7uf0+bhsgilLRDC1frTnR4k0Kb5AA6w389paaDU=
Subject key identifier: 81:D3:D2:95:95:72:93:4C:AD:FF:0C:3A:86:BE:AB:67:02:53:49:87
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 0194258E21813378DA1EF8D045C0163FBCF0
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa
Signing time: Thu 02 Jan 2025 05:47:39 +0000
ROA not before: Thu 02 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197066
IP address blocks: 185.75.152.0/22 maxlen: 22
2a03:4ae0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:21:81:33:78:da:1e:f8:d0:45:c0:16:3f:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Jan 2 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81d3d2959572934cadff0c3a86beab6702534987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:86:ce:84:6b:1c:f1:c1:f0:35:ac:d3:c4:
ac:4c:d3:cf:21:03:af:2a:b2:3a:7c:59:bb:87:73:
d1:68:c5:b0:a0:5c:94:49:af:00:51:09:f4:37:b0:
09:c1:51:f2:95:fe:e8:c2:cd:17:9e:81:a0:48:fb:
f8:02:38:59:3f:ba:6f:23:11:45:34:7a:a1:35:d5:
5f:5f:c2:59:f1:39:af:c5:d6:0c:90:d6:68:a2:41:
de:f1:1c:f5:ea:13:61:83:7f:29:b0:6e:38:38:d0:
72:ea:13:d2:e0:86:7a:01:1a:cd:35:2a:38:ec:bf:
27:75:80:b2:49:c9:31:6c:5e:9b:e0:0d:02:cc:10:
94:2e:db:31:08:ae:0f:41:9d:d2:11:db:3e:69:a8:
02:da:5d:27:ee:c3:9a:dc:08:2f:6c:b5:b5:ea:d6:
27:f4:84:c1:8d:4d:85:e3:16:c1:4a:bf:9a:f0:9a:
54:95:e9:a1:ac:0f:cd:1f:a6:4c:d2:b4:5e:99:7b:
53:84:95:8f:9d:a0:a7:a6:e4:90:96:ea:62:8f:c0:
3b:97:b3:27:24:d3:6d:04:ab:54:61:2c:73:f6:75:
32:60:05:f9:6b:c6:66:71:cd:26:13:a2:80:8c:fc:
46:cd:21:76:dc:a0:80:7c:b7:4b:0c:86:d6:42:9c:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:D2:95:95:72:93:4C:AD:FF:0C:3A:86:BE:AB:67:02:53:49:87
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.152.0/22
IPv6:
2a03:4ae0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:c2:10:23:1a:3e:3b:b7:ce:fb:b4:51:69:3b:de:ca:89:47:
e2:d6:b0:08:be:4e:3e:62:ff:5a:c0:3a:90:65:b6:fb:26:99:
71:a2:7c:66:2b:c4:34:8a:b5:b0:76:60:14:87:10:60:ed:de:
9c:34:2d:4a:c2:65:93:63:82:ce:70:74:3f:38:78:e1:b6:50:
19:6a:ad:cb:95:dc:38:46:ac:b4:15:f9:76:e6:da:95:70:51:
5e:22:2e:49:96:59:68:3b:31:25:72:05:88:34:bf:08:08:9b:
b3:b4:67:bf:1f:c2:e5:49:bc:f5:43:d2:1b:aa:9e:39:2a:10:
2e:db:9d:fe:0d:2b:2c:6f:2e:7e:cf:3a:3e:40:5c:d0:75:13:
64:b1:a7:fd:9b:6f:06:a7:e2:a1:e3:b6:02:98:03:40:8a:4d:
cd:3b:e0:d1:c8:4f:72:24:09:0a:1e:0c:a1:bb:2e:c9:4b:dd:
02:71:d5:b0:66:55:a2:9f:26:ce:f3:2a:02:b1:9d:a4:fa:ba:
67:34:52:29:d7:c5:28:b8:eb:bf:ce:21:7f:ba:3e:23:29:91:
02:14:e7:ca:e3:48:2e:a8:c5:08:e7:35:eb:54:56:e3:f0:ef:
8b:c1:7d:bc:80:c2:09:fe:06:06:ca:6d:40:fe:9b:be:d0:ab:
cf:b6:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:03:58 2025 by rpki-client