Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/GI-i99kB9ZZSVKD8l02CbLd6aSk.roa
File: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (raw, json)
Hash identifier: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=
Subject key identifier: 18:8F:A2:F7:D9:01:F5:96:52:54:A0:FC:97:4D:82:6C:B7:7A:69:29
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 019425FCAB3102C9C63B310F4CB5EA78429B
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/GI-i99kB9ZZSVKD8l02CbLd6aSk.roa
Signing time: Thu 02 Jan 2025 07:48:23 +0000
ROA not before: Thu 02 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60924
IP address blocks: 146.71.94.0/23 maxlen: 24
146.71.94.0/24 maxlen: 24
146.71.95.0/24 maxlen: 24
185.23.196.0/22 maxlen: 24
185.23.196.0/24 maxlen: 24
185.23.197.0/24 maxlen: 24
185.23.198.0/24 maxlen: 24
185.23.199.0/24 maxlen: 24
185.92.128.0/22 maxlen: 24
185.92.128.0/24 maxlen: 24
185.92.129.0/24 maxlen: 24
185.92.130.0/24 maxlen: 24
185.92.131.0/24 maxlen: 24
185.177.184.0/22 maxlen: 24
185.177.184.0/24 maxlen: 24
185.177.185.0/24 maxlen: 24
185.177.186.0/24 maxlen: 24
185.177.187.0/24 maxlen: 24
2a04:2600::/29 maxlen: 64
2a05:f1c0::/29 maxlen: 64
2a0a:4380::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ab:31:02:c9:c6:3b:31:0f:4c:b5:ea:78:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Jan 2 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=188fa2f7d901f5965254a0fc974d826cb77a6929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:6e:c3:bf:75:1c:f0:3e:83:bc:df:dd:5b:
a2:f7:c8:08:9e:4f:d3:95:b9:f4:6a:6d:20:3d:cd:
18:c5:de:47:9d:f8:27:40:99:28:ab:23:7c:ac:73:
3c:e3:fe:e7:6e:5c:e8:a7:97:3e:72:dc:79:47:6f:
6b:07:dd:ce:ca:bf:dd:76:4d:a2:6a:9d:bd:83:3e:
7d:e4:dc:a5:61:07:9e:bb:c9:e9:8d:9b:1d:d6:45:
3a:bc:7f:c5:4b:44:20:73:3a:db:1e:e1:8d:90:2f:
b5:8a:52:36:84:18:f3:8b:a5:e9:50:d7:cf:21:94:
db:c0:b1:3a:92:0e:f8:74:79:84:19:e5:6c:8c:f1:
56:a8:ec:7c:93:01:47:b5:ff:2f:0b:6b:76:d8:11:
ae:83:6d:ff:65:83:95:52:e3:21:f6:08:08:bf:88:
cd:6e:9e:67:9c:d5:96:f8:e0:b9:b5:27:d0:ff:30:
c9:b8:a8:16:67:66:81:e9:46:04:db:3a:f8:12:37:
77:65:0d:a5:71:e5:ec:77:68:d3:7b:29:5f:92:2e:
d2:9b:60:ad:aa:33:4e:e2:6c:42:96:a3:d5:59:f9:
99:75:5d:63:67:29:60:42:17:66:d8:30:65:6f:a9:
91:63:71:51:bb:82:ca:f9:4f:59:7a:65:01:b9:18:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8F:A2:F7:D9:01:F5:96:52:54:A0:FC:97:4D:82:6C:B7:7A:69:29
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/GI-i99kB9ZZSVKD8l02CbLd6aSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.71.94.0/23
185.23.196.0/22
185.92.128.0/22
185.177.184.0/22
IPv6:
2a04:2600::/29
2a05:f1c0::/29
2a0a:4380::/29
Signature Algorithm: sha256WithRSAEncryption
32:3b:bf:e1:27:27:08:d4:39:6d:4b:7a:07:74:9b:f0:d5:3f:
33:40:0c:88:74:d4:44:c4:25:c2:66:4e:cb:50:ef:00:7b:15:
0d:43:44:4b:5b:14:2d:fe:b7:3b:12:86:83:ab:c9:87:d5:72:
17:f7:15:f3:30:ad:df:fe:ea:fe:48:fd:ff:72:01:f6:5e:3b:
b8:66:9a:a4:9d:76:ba:5e:f4:3b:ca:66:bd:24:c1:3d:ab:93:
45:39:cb:d5:93:09:d2:d1:50:4d:a6:6a:2a:96:4c:b7:75:c3:
d5:4f:fb:32:e6:4f:24:cd:1c:ce:ba:fd:36:af:6e:ba:bd:6d:
e9:1d:39:0a:65:b7:ee:f7:8b:16:96:a3:3b:6e:dd:38:af:4f:
2f:4e:9a:a5:33:95:8b:54:36:64:8b:ff:55:5b:61:42:62:c1:
04:53:62:de:e5:39:8e:18:39:f2:2c:fd:6d:95:fb:e8:26:62:
3f:09:f8:06:27:c9:2f:2b:ff:71:48:f0:0f:15:0c:df:99:0c:
81:0a:05:2e:10:cd:aa:c3:63:37:80:83:79:fd:dc:83:46:7a:
d1:0e:b1:57:2c:74:e0:a4:5c:e8:b1:a8:14:14:6c:6f:49:0d:
9b:83:61:29:20:3e:85:a0:21:9f:ca:77:07:9d:8e:ea:34:5b:
62:38:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:47 2025 by rpki-client