Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa
File: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (raw, json)
Hash identifier: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=
Subject key identifier: 19:40:80:AA:F4:34:B4:C5:3E:6D:E9:EC:76:D6:DA:F9:67:37:C4:9D
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01942369FC850A2F72F74700375F20984CEC
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26380
IP address blocks: 185.96.136.0/23 maxlen: 23
185.96.136.0/24 maxlen: 24
185.96.137.0/24 maxlen: 24
185.96.138.0/24 maxlen: 24
185.175.204.0/23 maxlen: 23
185.175.204.0/24 maxlen: 24
185.175.205.0/24 maxlen: 24
185.175.206.0/23 maxlen: 23
185.175.206.0/24 maxlen: 24
185.175.207.0/24 maxlen: 24
185.199.60.0/24 maxlen: 24
185.199.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fc:85:0a:2f:72:f7:47:00:37:5f:20:98:4c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=194080aaf434b4c53e6de9ec76d6daf96737c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:0c:8d:ee:c0:ec:20:bf:e3:ab:24:46:ee:
d9:c7:47:1e:9c:92:d4:a5:7b:7e:51:00:d5:99:1b:
b6:45:03:63:ff:e6:cc:60:d9:91:1c:2c:b5:e6:8d:
93:9a:15:dc:17:13:77:59:8a:27:4f:b0:48:42:1c:
84:c2:5b:24:9e:3a:ac:fd:ba:be:29:c5:96:75:7c:
ad:ae:98:96:3d:f8:b2:44:54:d9:3b:1b:34:1d:42:
95:5b:58:0a:60:56:d2:e0:1c:8d:81:dd:16:ef:02:
28:1a:ed:a6:bf:fe:ca:e4:8a:08:ed:a2:9c:fb:d9:
2e:77:c6:96:e2:57:93:1c:53:d5:25:e4:f2:c2:90:
cb:a5:94:31:6d:e4:28:97:ec:36:48:f9:e5:73:38:
be:5c:98:e1:9f:0c:23:50:35:7e:08:e4:c5:51:12:
17:5e:16:0e:95:22:bc:a6:40:c6:e6:0e:b4:6e:4f:
fc:ad:9a:fb:05:ba:de:95:de:c0:04:b3:27:15:d1:
cf:b7:cc:ac:c4:66:65:51:75:4f:5f:42:94:ad:33:
ad:e4:f1:c3:0f:a2:05:aa:c0:3b:e9:6e:6f:3b:85:
83:9f:4f:be:dd:b1:14:6e:1c:92:8a:55:5b:48:80:
fb:01:5c:21:90:17:cf:b8:18:84:8d:8c:0c:cf:d1:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:80:AA:F4:34:B4:C5:3E:6D:E9:EC:76:D6:DA:F9:67:37:C4:9D
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.136.0-185.96.138.255
185.175.204.0/22
185.199.60.0/23
Signature Algorithm: sha256WithRSAEncryption
26:f2:84:f6:dc:1e:dd:30:c1:67:38:f6:a2:25:e4:ca:b5:c9:
48:6b:d8:ee:91:25:66:96:64:cf:d4:0d:1e:42:ff:b8:d3:ff:
35:38:8e:d2:68:18:7c:3d:8d:8d:d5:2b:84:60:c5:d3:47:67:
17:06:b6:61:3d:af:60:e5:e3:64:e1:40:29:e4:23:9a:f2:ae:
ef:05:64:fb:3c:cc:45:24:e8:e5:15:e6:0e:b5:70:41:d3:79:
1e:21:ef:f3:99:73:b1:7f:08:42:94:51:38:29:68:bc:9b:08:
11:42:2c:cf:3a:04:d0:c7:ef:47:ca:77:50:1c:34:04:9a:b9:
82:3d:0f:0f:e0:80:86:c4:84:58:3b:bd:7b:38:2b:cb:64:83:
7e:79:b8:80:bb:8f:e9:22:97:40:9f:e8:9b:b8:a0:d3:84:95:
69:a7:5a:28:28:3e:fa:1d:9c:41:ae:c0:1a:f8:62:f9:5a:9d:
6e:d0:5e:36:1d:9f:95:2c:ed:ec:16:c6:c5:01:9b:ae:be:71:
5a:de:4e:9c:41:a3:d2:5f:38:d6:27:7a:e4:01:19:3e:4b:46:
8a:e0:e2:bf:9a:8f:ed:cf:a1:13:45:1c:0a:59:ac:23:b5:bd:
7a:aa:58:d3:89:7b:c1:c3:55:07:44:a6:3d:90:24:4d:57:0a:
a0:e1:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:58 2025 by rpki-client