Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/GPFpap7M0DbSFtJBpaKp67RfOgs.roa
File: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (raw, json)
Hash identifier: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=
Subject key identifier: 18:F1:69:6A:9E:CC:D0:36:D2:16:D2:41:A5:A2:A9:EB:B4:5F:3A:0B
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019423D7699736ABBADE33EC9B0CB0099A54
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/GPFpap7M0DbSFtJBpaKp67RfOgs.roa
Signing time: Wed 01 Jan 2025 21:48:27 +0000
ROA not before: Wed 01 Jan 2025 21:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203937
IP address blocks: 185.125.4.0/24 maxlen: 24
185.253.233.0/24 maxlen: 24
194.42.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:69:97:36:ab:ba:de:33:ec:9b:0c:b0:09:9a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 1 21:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18f1696a9eccd036d216d241a5a2a9ebb45f3a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:ac:18:a8:70:5c:d7:35:d5:31:c2:6b:75:
86:43:25:5a:67:c6:f8:40:5b:3b:53:60:78:09:83:
e9:64:a1:84:9b:5c:b9:0c:1c:21:89:dc:39:f5:74:
2f:cb:6c:29:ff:45:d2:bb:70:66:6b:a4:c7:e7:15:
78:d4:5c:1a:71:16:e3:36:d0:26:59:7a:5b:7d:e1:
c0:24:10:15:dd:98:6f:e6:bd:33:df:b5:18:72:8f:
5c:7e:ce:86:8b:bb:f9:fd:9d:67:44:c6:cd:04:03:
63:9f:78:0a:1b:3d:41:61:11:74:a5:7c:0b:fd:7e:
9c:7e:40:45:f7:10:ef:f0:2a:bf:b4:7a:fc:a5:57:
60:b2:bf:1e:90:2d:f4:52:81:da:d7:f0:4d:6b:e8:
44:13:76:2c:41:8a:cf:06:91:51:fa:69:d3:75:b6:
a6:dd:60:a2:1a:fb:9d:5f:98:24:54:43:53:93:d2:
cd:40:65:45:fe:1d:52:d0:08:8e:31:99:a9:4d:01:
4e:a0:a8:16:3c:77:da:bf:e3:22:9e:34:fc:31:76:
b3:7f:2c:c6:b2:ea:26:cc:18:6a:a3:9f:1c:ff:9a:
44:92:c0:03:63:6c:e8:b8:eb:ef:2a:de:93:6f:6c:
0e:af:9d:98:0c:13:48:06:4a:8b:89:5d:84:39:0c:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:69:6A:9E:CC:D0:36:D2:16:D2:41:A5:A2:A9:EB:B4:5F:3A:0B
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/GPFpap7M0DbSFtJBpaKp67RfOgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.4.0/24
185.253.233.0/24
194.42.118.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:59:eb:18:2e:56:ac:a1:9b:de:ad:f0:1a:89:73:37:49:10:
73:5a:a7:b2:a9:ef:8d:51:ff:8c:4a:20:e3:70:fc:a5:0b:ad:
db:bf:7b:32:59:da:e8:c8:fd:88:da:09:d1:b3:59:9c:9e:74:
f9:06:73:f8:0d:f9:bc:2d:61:c1:49:f4:f5:44:a9:37:ea:01:
fa:3f:f7:2e:c6:5c:7e:55:d8:02:e8:f1:ff:7b:31:88:e4:96:
70:26:81:15:cd:1d:bd:1b:91:26:93:2d:cf:21:d4:f3:e1:95:
59:09:6f:a6:a6:c0:9e:95:ff:ed:d0:b7:79:fb:4c:20:3b:3a:
4b:99:cb:ac:60:66:ee:17:49:6c:ad:60:21:f2:10:e2:8b:f7:
bb:33:10:65:56:10:8f:93:4f:6c:9f:26:03:c3:a3:19:47:ff:
3d:74:84:e0:b7:ab:74:1c:fa:60:2b:14:52:55:c9:06:70:d8:
01:fe:af:ad:90:b9:b1:c7:92:be:72:ef:f1:55:67:ac:b9:e2:
c8:e2:c2:45:cd:a9:c8:64:64:d5:a6:16:fb:b0:8b:1c:40:76:
21:ec:4c:30:b3:7a:3f:ae:a8:28:e0:a3:e6:37:e3:96:c9:52:
89:32:a5:44:a7:65:96:3d:5b:90:84:5c:e2:c0:04:f2:c2:22:
8c:13:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:52:56 2025 by rpki-client