Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa
File: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (raw, json)
Hash identifier: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=
Subject key identifier: 1A:88:CD:FE:FF:40:99:F2:25:0C:62:7E:A4:98:A2:5A:F4:41:DE:DE
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019421B1EA307B39BC7A56BE0621BD8B8485
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205022
IP address blocks: 193.232.72.0/24 maxlen: 24
193.232.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ea:30:7b:39:bc:7a:56:be:06:21:bd:8b:84:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a88cdfeff4099f2250c627ea498a25af441dede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:7c:8c:5a:74:8c:46:6a:28:50:92:48:d9:
40:18:b0:42:68:d5:0d:02:eb:e8:a8:4b:98:56:06:
25:cf:ec:2d:2b:af:52:13:6f:de:6f:8b:26:d9:3f:
60:36:8f:1f:cc:b9:97:78:00:6e:81:f7:40:1e:0f:
26:d4:2c:d7:0b:4f:70:fc:c9:58:72:3a:ff:15:ed:
37:6e:a3:0f:a7:f2:1e:4b:5b:97:49:be:34:f4:e5:
52:17:83:55:57:b8:61:68:0d:70:d5:63:fd:3e:42:
bf:ca:f6:4a:d2:e6:15:87:d9:ef:03:48:2f:09:57:
d7:ed:0f:eb:a3:52:3a:fc:1d:ef:f1:78:f8:13:f3:
4c:cf:2d:4b:2e:d8:d4:de:2d:41:6f:64:64:be:8c:
a6:4a:6e:3e:e7:dc:47:9f:1e:c5:78:81:39:1b:52:
88:1e:82:c6:2a:fc:e8:0b:a2:dd:2d:df:a8:f1:23:
15:d6:0c:be:7f:81:3e:ea:19:cb:49:58:e9:d3:dc:
5f:79:e8:52:1e:60:46:e4:43:0d:69:58:a3:de:4c:
4c:7c:05:ec:b2:58:37:fe:c9:f3:a5:b0:d4:84:bb:
b1:13:75:51:4a:5d:a7:2c:f4:36:3c:15:4a:4d:5c:
bb:d7:d2:7e:cc:d5:60:0d:33:a2:ca:34:80:aa:e5:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:88:CD:FE:FF:40:99:F2:25:0C:62:7E:A4:98:A2:5A:F4:41:DE:DE
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.72.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:f5:d2:17:8a:8e:90:af:50:b9:9f:b5:e1:ea:d4:bc:9a:d3:
9e:66:7d:47:c2:9f:4c:2f:c2:a6:1d:f4:08:8a:63:80:83:97:
9f:10:3f:09:43:be:12:a3:97:86:c4:f3:47:a8:4a:1c:d0:e0:
19:35:b8:7b:b7:04:82:29:cf:77:de:6a:08:50:cf:d4:69:90:
36:a6:03:4c:78:54:6d:a1:df:66:f6:8b:56:fa:48:d0:81:be:
70:da:a8:32:17:ca:98:c4:c3:83:74:99:21:4b:ba:98:6a:92:
0f:2c:0e:23:45:7d:77:9c:fd:f2:75:29:a1:c4:52:e8:1e:26:
76:b8:a1:1a:05:15:d7:04:dc:cb:5b:1d:e7:27:79:ef:35:73:
31:7d:ea:bd:3c:13:44:8e:d1:01:c7:17:5b:1c:57:b2:07:b2:
44:b8:44:03:2b:3b:0b:6e:92:c0:6b:2c:80:8e:f1:ff:e5:79:
a4:8b:a3:e6:33:dc:4e:1e:a6:16:77:30:b1:11:53:62:e3:6b:
ac:bf:58:c8:ff:ca:50:6d:a4:84:0e:fd:de:3a:67:3c:a0:59:
2a:e0:68:aa:d8:68:c6:8d:1e:3a:36:aa:15:00:19:5f:3f:d0:
37:bc:b5:30:b1:26:c1:09:e3:28:34:47:97:3a:c8:44:68:0b:
53:c9:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:47 2025 by rpki-client