Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/GZBEBDVvuKrEI33iqx5474Emrgs.roa
File: GZBEBDVvuKrEI33iqx5474Emrgs.roa (raw, json)
Hash identifier: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=
Subject key identifier: 19:90:44:04:35:6F:B8:AA:C4:23:7D:E2:AB:1E:78:EF:81:26:AE:0B
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 019427B626BB12B638AA59258460B360180F
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/GZBEBDVvuKrEI33iqx5474Emrgs.roa
Signing time: Thu 02 Jan 2025 15:50:36 +0000
ROA not before: Thu 02 Jan 2025 15:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3285
IP address blocks: 93.100.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:26:bb:12:b6:38:aa:59:25:84:60:b3:60:18:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19904404356fb8aac4237de2ab1e78ef8126ae0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:f7:45:06:6a:31:dd:37:1f:92:ef:f2:84:
d9:31:86:26:1b:6b:ab:f7:ba:b0:88:e4:c6:e1:4e:
08:ef:5c:aa:b9:32:bd:c5:3b:c6:db:63:54:b5:9f:
3a:6b:24:9a:98:a9:bc:c5:9f:12:67:b7:2e:05:62:
bc:29:e9:8b:b4:a4:62:42:6c:e3:ee:75:a3:83:08:
46:d4:30:9e:82:e3:05:d0:d2:d9:f8:25:1f:19:e9:
f6:ea:17:5f:6e:73:0c:2f:ab:51:5d:3a:2a:8f:5a:
62:a6:68:7d:ab:38:cc:ff:ce:7e:02:96:eb:25:59:
0c:9d:89:49:0c:f2:cd:0f:a4:16:de:08:66:f5:74:
92:47:c5:a6:56:10:87:2c:aa:45:b4:d7:96:92:3e:
54:96:4e:d4:f9:1a:e2:a4:27:fb:d1:a5:ba:f7:23:
a0:95:e9:01:a8:e5:55:a9:ff:91:79:bc:10:d9:6a:
41:44:03:b6:6c:77:37:a5:c6:c8:6c:1e:ea:db:b7:
1c:25:0d:4f:f2:13:77:b6:c4:b9:e9:11:67:70:92:
71:a5:ba:14:f1:12:95:08:5d:46:b7:4c:60:ac:a1:
10:f5:a0:06:9f:e2:26:00:9e:a6:f6:5f:b8:56:e7:
1a:4d:a4:8d:79:36:ff:11:e7:ee:1f:c4:9b:50:db:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:44:04:35:6F:B8:AA:C4:23:7D:E2:AB:1E:78:EF:81:26:AE:0B
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/GZBEBDVvuKrEI33iqx5474Emrgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.100.195.0/24
Signature Algorithm: sha256WithRSAEncryption
94:72:8c:d7:32:ad:a7:05:25:7c:82:c5:05:c1:89:7a:7a:59:
9a:58:4b:8d:62:9c:05:cb:a9:a7:73:c7:0b:4e:c7:9d:3b:ac:
cc:a3:e2:dd:93:ea:81:6d:fb:9a:34:80:f5:aa:ff:b0:e1:24:
2e:04:dd:1d:53:75:98:cf:38:a7:c1:3a:a5:a8:27:ec:a8:ec:
a4:d0:77:92:a5:1f:5f:16:b4:ee:6a:72:67:56:9a:fc:51:f9:
15:f0:5b:43:24:c6:d9:fd:40:4c:4a:d7:22:0f:e6:df:52:9b:
1c:e4:cf:13:4a:c4:8a:bb:ed:62:00:fb:be:7f:c3:90:a5:39:
c2:1d:e1:59:cc:64:04:af:f2:61:33:27:20:6b:ff:f5:13:37:
8f:76:a7:08:d7:80:04:2f:11:a9:1b:d0:69:39:ec:76:34:cf:
14:9a:0a:19:a3:3b:46:a8:50:9f:1a:08:e9:b8:02:a3:4b:23:
c3:7e:0d:31:b9:1a:c7:9d:55:f0:2c:7d:99:c3:01:7f:3d:b9:
19:8a:ee:96:f3:7b:af:48:c7:50:86:91:dc:6b:54:d9:6d:df:
62:b7:18:17:70:81:f8:c1:93:ce:cf:2d:fe:54:b6:1e:46:27:
29:f6:4f:aa:c9:91:82:37:c1:8a:da:9a:9e:7c:6c:78:ff:56:
72:0b:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:20 2025 by rpki-client