Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/GOWs0802FOjDjhvj5VByRZ93Ms4.roa
File: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (raw, json)
Hash identifier: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=
Subject key identifier: 18:E5:AC:D3:CD:36:14:E8:C3:8E:1B:E3:E5:50:72:45:9F:77:32:CE
Certificate issuer: /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial: 0194266BCC2C47BFDC18D2F67B17223B1B5C
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/GOWs0802FOjDjhvj5VByRZ93Ms4.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20755
IP address blocks: 80.69.32.0/20 maxlen: 20
2a00:1a18::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cc:2c:47:bf:dc:18:d2:f6:7b:17:22:3b:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e5acd3cd3614e8c38e1be3e55072459f7732ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:79:52:cc:18:5a:8d:7c:a5:d1:ea:b4:d8:
6c:c6:69:f1:ed:29:26:51:58:f0:ae:e5:1b:27:af:
4f:0f:68:54:86:d6:cb:49:01:33:90:c5:68:ba:d9:
76:9f:62:eb:02:8c:c4:f1:86:4a:32:d4:74:62:d8:
b2:72:18:72:94:8b:cb:4a:fa:f9:b0:26:55:73:dc:
21:ca:6f:35:3c:c1:3f:07:70:9e:d0:a9:a7:00:67:
76:43:f9:9f:74:a4:d8:83:e8:08:50:a8:df:06:20:
59:85:43:a6:44:c0:07:73:56:c3:9a:ae:41:30:5e:
d3:39:eb:40:94:7f:47:70:65:41:c8:24:23:7c:39:
b9:f6:bc:68:96:44:dd:7e:01:2a:20:35:42:4d:70:
1a:ed:c6:58:cf:27:cc:04:df:4f:91:10:e9:2a:26:
cc:b7:dc:5d:1f:20:ff:e6:b1:3b:fa:05:33:04:59:
e3:32:0b:98:4c:e3:24:4d:f0:12:f5:48:29:5d:f7:
82:86:68:42:16:18:be:c8:9f:b1:2c:52:3d:eb:5b:
f8:c1:fe:04:46:6b:f3:f7:ac:5b:38:e6:fa:1a:4d:
de:32:0a:73:e1:20:a4:ee:ab:68:f3:86:8c:f1:dc:
48:af:cd:ff:7b:0e:5e:7e:9b:f3:96:73:b1:19:e9:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:AC:D3:CD:36:14:E8:C3:8E:1B:E3:E5:50:72:45:9F:77:32:CE
X509v3 Authority Key Identifier:
keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/GOWs0802FOjDjhvj5VByRZ93Ms4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.32.0/20
IPv6:
2a00:1a18::/29
Signature Algorithm: sha256WithRSAEncryption
19:bd:95:ca:84:f4:06:24:0d:42:50:32:24:d2:76:23:d6:9f:
a5:7b:57:6b:67:c5:3d:d3:97:71:6c:3b:cf:1f:a4:e0:b6:67:
85:bf:36:81:83:ef:ef:b9:18:9f:e6:b2:04:16:07:61:d8:d5:
83:0b:db:1a:cd:3e:f1:d4:13:17:49:af:d9:56:17:a7:1c:f0:
ca:96:20:ce:8d:53:bd:0f:db:bc:66:4a:88:79:c5:ad:89:b8:
d2:7a:29:ba:fa:12:e5:36:27:34:df:1b:8b:60:bb:3f:03:7f:
da:42:52:30:ae:c1:d6:b4:c5:e3:38:c8:9e:1e:98:b8:a3:5b:
dd:29:7e:de:09:84:55:c4:10:1b:36:72:c8:a0:e5:ba:45:8b:
ab:c2:8c:bd:e0:ae:fb:7c:8a:70:dc:1d:cc:ef:e7:a4:e9:af:
5f:d5:a3:a0:63:ac:2c:44:1d:3a:9f:f3:cb:35:f7:9b:97:a5:
18:b0:09:1e:14:b2:f3:0e:79:d8:d0:7e:27:bc:2f:37:bf:57:
97:27:22:b2:88:f9:04:ce:f5:99:a1:43:1c:e3:22:ec:60:27:
c7:ce:54:a2:18:d7:1e:f7:79:75:57:dd:0a:f7:fc:3e:55:c0:
65:1f:04:b3:b1:c7:84:23:98:a9:95:7f:15:de:e0:4c:89:23:
00:c0:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:15 2025 by rpki-client