Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa
File: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (raw, json)
Hash identifier: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=
Subject key identifier: 18:5C:DE:45:A0:66:C8:83:A4:AC:3B:F9:62:5E:1E:79:12:7D:C8:1A
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 01941FFA81F3F6D31CFEEAC6900E25A1DB3E
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61157
IP address blocks: 185.171.216.0/24 maxlen: 24
185.171.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:81:f3:f6:d3:1c:fe:ea:c6:90:0e:25:a1:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=185cde45a066c883a4ac3bf9625e1e79127dc81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:d1:de:5d:7b:86:52:78:bb:0a:2f:77:33:
66:5b:67:22:50:b3:63:f7:9d:f8:1e:bb:09:b6:86:
57:96:b8:12:d4:96:fa:8a:4f:66:d4:ef:c6:2a:f2:
0e:b1:1b:e8:40:ea:f5:47:70:f2:47:02:bd:f8:b3:
f9:e3:76:92:0c:22:74:91:7e:13:9d:2c:a9:f8:76:
a0:2b:e9:54:03:13:6a:d1:b0:0e:b9:cb:fa:fc:08:
b1:37:ad:75:4c:67:9b:9c:a5:38:e5:a2:93:8f:cf:
f2:6c:2d:1e:d3:91:53:e8:fe:c0:5e:2b:45:fa:27:
80:3f:4c:d2:ee:93:cf:bf:37:c5:52:f3:92:82:9d:
e6:09:48:ca:fd:bc:c1:eb:45:99:eb:c6:9e:91:87:
44:32:f5:e3:1e:6e:a7:8b:d0:2f:44:83:50:27:01:
6d:0a:68:8b:a6:62:9a:20:b2:7a:3d:46:f8:73:c9:
a5:75:ee:4b:09:c6:8d:c4:e9:c5:ed:3e:23:60:85:
3b:44:68:39:fc:21:26:b2:1f:11:c5:50:69:44:d2:
84:dc:6f:68:6e:86:f4:3f:35:f5:89:3f:ff:d4:83:
c8:74:a9:53:2c:52:70:bd:4e:ed:63:c8:66:59:5c:
9e:cc:31:71:c7:01:26:58:c0:e7:b1:66:f9:78:b4:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:DE:45:A0:66:C8:83:A4:AC:3B:F9:62:5E:1E:79:12:7D:C8:1A
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
24:2e:33:30:f2:ad:9f:b4:04:bd:00:61:42:f8:dd:af:c0:d8:
f3:34:f5:d8:84:d2:32:ce:ac:2e:98:47:d0:9c:7d:d6:e7:c5:
ed:b3:4a:fb:ab:0f:c4:38:d7:6f:5f:f8:c7:19:ae:c0:ad:7e:
5c:56:9f:04:f1:7d:fe:a0:0b:25:00:71:e0:6b:e6:07:e6:31:
dc:4d:29:70:0a:70:9d:14:66:0c:7e:16:18:02:bb:01:92:4d:
ce:a1:6a:ee:ca:dd:4d:41:10:58:39:a3:1d:7a:6b:ae:de:17:
50:4c:26:0d:c1:45:e4:9b:34:dc:72:9b:54:e7:43:b2:4f:2e:
e3:0f:f8:90:ec:97:1f:6a:78:2f:62:74:bf:3e:17:5a:f1:fa:
0e:88:c1:b5:75:05:a9:30:55:2b:81:09:f4:d2:1e:4e:e8:4d:
59:84:0a:ec:26:be:a2:ed:57:38:b6:50:64:21:d0:97:1e:07:
3a:0d:f6:ea:92:7d:cf:a7:9e:3b:77:bf:7f:aa:48:d3:14:ba:
40:42:d8:b4:54:20:8e:c7:14:dc:87:85:af:f9:ed:44:f3:b8:
f1:9e:76:b1:07:1c:72:38:da:b5:f5:5a:62:1a:f5:8a:b3:0d:
fb:39:d1:e3:22:16:4a:ed:76:a2:21:bd:5b:9e:59:6a:7b:ae:
95:9c:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:20 2025 by rpki-client