Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GKwBtdaHHEJCBrGzHFpoQ0g5mqg.roa
File: GKwBtdaHHEJCBrGzHFpoQ0g5mqg.roa (raw, json)
Hash identifier: DEP5/d/12nQ++GSyniIH8UpYx8rHJQwiRbJz8yidoPM=
Subject key identifier: 18:AC:01:B5:D6:87:1C:42:42:06:B1:B3:1C:5A:68:43:48:39:9A:A8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019127C851D0B7F5ED10AA9EA313B85F2AC9
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GKwBtdaHHEJCBrGzHFpoQ0g5mqg.roa
Signing time: Tue 06 Aug 2024 13:02:05 +0000
ROA not before: Tue 06 Aug 2024 13:02:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15899
IP address blocks: 85.254.9.0/24 maxlen: 24
85.254.10.0/24 maxlen: 24
85.254.11.0/24 maxlen: 24
85.254.12.0/24 maxlen: 24
85.254.14.0/24 maxlen: 24
85.254.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:c8:51:d0:b7:f5:ed:10:aa:9e:a3:13:b8:5f:2a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 6 13:02:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ac01b5d6871c424206b1b31c5a684348399aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:64:38:29:de:c9:02:b2:60:c7:21:c5:e6:
b8:9b:b1:fb:f1:2b:48:85:00:42:ad:31:6a:90:7e:
26:28:78:76:c0:05:9f:41:5a:22:11:dd:c9:09:15:
8c:b9:13:9b:19:f1:4f:80:ca:fc:c5:f3:ae:16:0b:
6c:0d:9e:76:2d:2d:31:3d:99:70:6b:20:8f:31:30:
4c:a1:6e:58:66:66:2d:f0:b9:d1:f7:58:1a:6e:55:
e1:bd:d8:d9:6a:8e:4f:92:e9:34:2c:8d:14:6d:9d:
39:1b:8a:f8:4f:46:f2:9d:68:ee:49:49:3d:56:b2:
d6:cf:8c:98:c6:03:d1:71:aa:ab:e5:ab:78:b3:4c:
14:0c:b3:e4:53:ef:51:2e:a1:f2:24:47:c4:75:3d:
21:18:23:82:54:24:11:4b:66:ad:49:f3:19:25:46:
56:61:11:fc:79:8c:cc:42:8f:81:5c:f5:4f:dc:4d:
1c:47:81:25:f0:42:cc:06:ed:54:bf:77:4f:74:d7:
7d:16:cb:be:d8:d8:a5:18:33:17:bc:66:0f:f2:53:
57:d4:2f:9d:ab:52:c3:49:90:53:98:8f:ff:24:92:
9f:fa:a1:b3:80:d3:4f:0a:11:e5:ac:dc:5d:2b:84:
fd:2e:f8:c0:fe:10:5e:53:da:4e:f8:5e:f7:23:84:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:01:B5:D6:87:1C:42:42:06:B1:B3:1C:5A:68:43:48:39:9A:A8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GKwBtdaHHEJCBrGzHFpoQ0g5mqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.9.0-85.254.12.255
85.254.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:1b:b6:85:6a:03:45:49:bc:b5:0f:56:81:1c:1d:a7:01:27:
a6:ca:c7:67:53:5e:fc:ba:e3:6f:46:5a:c2:22:23:e4:3f:49:
5f:71:55:c0:c4:46:31:23:d1:eb:14:bb:42:e4:67:4f:61:44:
84:c6:f0:64:3a:50:fa:b5:bb:de:b7:b1:b2:77:32:05:73:aa:
02:39:dd:37:e4:f2:fe:c3:c7:f4:b6:1a:ea:76:05:16:7e:a9:
bb:bb:e2:ef:e4:0c:3b:a5:dd:2f:fc:3c:bf:ca:88:28:f0:ac:
77:bf:44:b2:be:88:d1:23:7b:d2:68:fc:02:a4:93:0c:9f:71:
3a:14:01:85:1c:79:cd:71:d7:e0:8d:c9:c6:b1:0b:2d:e4:b0:
a0:9f:58:41:32:15:b6:09:cf:02:9a:60:7a:87:54:cf:f7:cf:
98:cc:7a:c0:e7:ef:12:78:e6:4d:07:ba:1b:75:8d:72:f3:00:
f2:57:1c:11:74:ac:3c:dc:28:e4:9c:e6:ea:99:28:54:06:be:
10:5b:b8:5e:39:45:03:37:72:0f:bd:8b:2b:1f:55:36:77:21:
21:1d:5f:e2:4d:53:43:4d:c8:2c:3e:23:db:1b:16:29:52:7a:
1c:b6:58:79:50:1f:be:20:7e:43:a7:3e:9e:96:fd:19:45:c4:
76:a8:1d:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:25 2025 by rpki-client