Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/GWHlXKm0sM09h00CHS4OA90ZDEo.roa
File: GWHlXKm0sM09h00CHS4OA90ZDEo.roa (raw, json)
Hash identifier: nINowmfDfKGL1Tvt7j8uTMeqVpzK8gUstL889w0cG50=
Subject key identifier: 19:61:E5:5C:A9:B4:B0:CD:3D:87:4D:02:1D:2E:0E:03:DD:19:0C:4A
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 01941F8C82B380D1E95223223C2C468E6294
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/GWHlXKm0sM09h00CHS4OA90ZDEo.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212062
IP address blocks: 195.244.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:82:b3:80:d1:e9:52:23:22:3c:2c:46:8e:62:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1961e55ca9b4b0cd3d874d021d2e0e03dd190c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:b1:ff:50:35:dd:d1:ba:48:8d:ee:70:6d:
62:06:c4:91:56:90:9a:d5:0f:27:39:cd:d1:f1:3d:
09:c6:e3:f4:cb:17:13:0c:59:40:9a:6d:29:03:58:
15:e5:33:a5:96:19:61:ed:86:3b:c8:19:65:31:d1:
ea:a5:c8:2b:85:38:13:b9:b2:c6:72:3e:10:15:91:
91:3c:8d:ea:e1:ee:f8:f0:b9:ff:7e:fa:5b:76:62:
fc:0b:a5:2d:c1:cf:e4:aa:aa:8f:93:d5:a2:8b:8f:
2e:ad:36:7b:5c:b4:e7:ac:b8:db:d6:7c:50:17:0a:
23:88:56:52:2d:bc:4a:8b:01:61:00:1f:7a:2b:fb:
17:a8:62:4a:e6:77:b7:b1:0a:43:63:ab:8c:8e:84:
e4:5a:e8:5e:fa:93:fc:1d:1f:c8:cd:df:e0:db:00:
10:0b:4e:33:7f:34:35:7b:ef:df:30:dc:35:26:6c:
08:37:3e:65:72:22:e2:38:54:13:99:39:c8:75:39:
df:85:2b:64:d1:19:5a:55:7a:3f:a8:8b:23:4e:19:
b1:c6:73:40:ca:40:74:42:af:17:b3:f5:e5:04:75:
d9:2c:99:f4:a3:b9:3e:cb:0f:9a:29:e1:08:9d:3c:
b3:8f:a8:be:77:04:e6:88:1a:e4:0f:65:ed:60:e3:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:61:E5:5C:A9:B4:B0:CD:3D:87:4D:02:1D:2E:0E:03:DD:19:0C:4A
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/GWHlXKm0sM09h00CHS4OA90ZDEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:70:67:18:fd:5c:7d:a0:a6:af:3a:e0:15:7f:ba:16:dd:45:
ab:a6:a8:15:a7:68:4c:59:2a:09:46:de:9c:5f:f2:16:fc:59:
5c:f1:14:9c:f8:90:27:67:8f:16:fb:8e:30:e0:3e:91:cc:bb:
16:eb:ef:98:7d:a6:5e:14:fb:20:7a:73:5c:24:50:7a:06:28:
ec:94:99:bf:35:b8:59:98:a5:01:7a:c9:1b:96:ff:fe:54:c9:
1c:b7:22:27:b1:1b:1d:4d:f1:32:f6:74:9f:14:fc:a1:77:5b:
35:58:9d:c2:e8:55:59:46:a0:ae:8b:52:97:51:65:65:54:5b:
33:11:46:e8:3c:b8:c5:ff:04:35:77:c4:cd:ff:dc:54:ad:34:
ba:f6:6c:d5:3f:66:00:ae:a5:d7:7a:33:a4:cb:0f:7d:92:bb:
da:9e:78:ab:36:6c:f8:9a:54:a2:22:f6:97:14:b4:38:45:a5:
5d:d6:49:f5:9f:25:cf:20:72:2e:8a:a1:ad:2e:c7:9a:95:9a:
52:20:94:82:d3:de:af:38:b5:41:b2:7e:7e:00:22:4e:83:15:
ce:97:31:f5:15:5d:dc:32:20:e0:05:82:0e:e7:55:fe:c2:18:
8d:ac:7d:76:fd:df:4f:b8:bf:27:9d:10:d7:ce:3f:8b:8a:be:
61:be:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:15 2025 by rpki-client