Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa
File: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (raw, json)
Hash identifier: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=
Subject key identifier: 81:9D:32:54:37:CD:E2:FC:BE:78:AE:CE:08:43:D2:65:A0:5A:07:1B
Certificate issuer: /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial: 019421B22A483A7CC77C273CC494107AAC6D
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206865
IP address blocks: 185.168.188.0/23 maxlen: 23
185.168.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2a:48:3a:7c:c7:7c:27:3c:c4:94:10:7a:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819d325437cde2fcbe78aece0843d265a05a071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:a8:89:84:0b:80:e0:15:43:5d:41:27:4a:
30:bc:b5:f4:66:74:ad:35:a7:42:3d:c5:94:0c:21:
38:1a:b4:9b:05:0c:bc:e6:f6:df:93:4a:23:3d:a1:
49:e1:76:e0:14:12:79:7b:4e:02:52:80:63:07:43:
d2:78:c7:64:dd:6e:bf:e1:9f:f6:fe:0b:e2:e7:36:
ea:2e:37:e6:40:4c:51:90:26:fc:6e:2f:11:b0:b1:
92:52:87:0e:30:1c:01:6f:fa:ed:bf:98:ee:07:10:
78:50:ce:40:8e:d3:e6:55:f6:84:04:b6:fc:eb:a1:
3e:c6:d0:ae:17:70:4b:76:c0:6c:37:4e:ac:3e:2f:
84:50:7a:21:27:20:46:14:c6:4d:b7:64:4b:73:dc:
92:28:9c:b9:c5:64:cb:a8:ce:e4:50:e4:eb:b9:36:
e5:cd:ec:f7:54:67:38:19:06:56:90:1e:45:bd:72:
e4:dc:a8:94:f6:7b:21:bd:63:a0:4c:ec:9f:98:ca:
5b:35:c3:41:d5:7e:e1:09:20:41:79:c1:9d:4d:01:
fe:4d:c2:09:43:13:e5:b4:23:90:49:13:42:26:a9:
17:7a:05:90:fe:79:aa:d1:d7:78:c4:5c:42:78:cd:
f6:af:0a:89:34:11:51:39:ef:62:4a:b4:e8:6b:e6:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9D:32:54:37:CD:E2:FC:BE:78:AE:CE:08:43:D2:65:A0:5A:07:1B
X509v3 Authority Key Identifier:
keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:44:46:f1:7b:8d:a3:ea:73:d4:27:76:b7:7b:6e:8a:b2:1f:
b5:c8:de:5b:98:c2:d1:96:da:da:6f:e8:1d:b1:7c:78:97:90:
3b:36:c3:df:88:0f:98:49:e0:0b:3f:d0:da:dc:4c:f8:6a:4d:
74:19:79:12:ff:a4:b3:94:e3:0e:2a:9a:0d:03:8f:cb:54:97:
6c:0c:82:5b:8c:53:09:61:56:66:c6:52:2c:9c:75:32:96:b9:
78:49:a9:3b:3f:a6:d6:af:4c:d3:63:de:7a:0b:fe:f7:47:18:
53:a6:c8:0c:6a:80:0e:46:c0:36:b7:fb:42:f6:df:83:68:99:
27:b4:9d:f8:7e:38:7a:a7:30:a2:d4:e3:ac:39:0f:c8:50:b6:
93:41:77:c5:af:d7:d8:b9:76:14:98:8c:32:e6:94:e9:48:d4:
2e:7e:38:c3:91:dd:2e:89:80:6b:7f:53:31:2f:13:56:73:df:
a3:4a:bd:d2:5a:31:ac:0a:b1:65:63:60:8a:0f:04:ee:1d:d0:
50:00:03:e7:ac:96:3d:8e:5d:69:d3:23:92:ce:c3:76:f3:5d:
1f:1a:54:fb:32:a8:fc:c8:87:1f:5e:f7:16:57:0c:88:d2:fc:
0b:48:88:1d:8a:8e:e5:7d:de:57:fd:c7:e1:ff:f8:b0:c4:d6:
9f:6b:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:53 2025 by rpki-client