Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GT3zeXYTpJgWXHUwZT95ikjXups.roa
File: GT3zeXYTpJgWXHUwZT95ikjXups.roa (raw, json)
Hash identifier: 13RKIiW0pZi7LKxzb8tM0xvLXEZP5G6Opwpp+BS+SD8=
Subject key identifier: 19:3D:F3:79:76:13:A4:98:16:5C:75:30:65:3F:79:8A:48:D7:BA:9B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D00482E
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GT3zeXYTpJgWXHUwZT95ikjXups.roa
Signing time: Fri 22 Apr 2022 06:18:23 +0000
ROA not before: Fri 22 Apr 2022 06:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 194.64.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218122286 (0xd00482e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 22 06:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=193df3797613a498165c7530653f798a48d7ba9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:d0:dd:eb:97:ac:57:cd:d5:a2:d2:87:a9:
f7:02:8d:fd:cb:fa:fb:54:46:30:88:be:f0:84:f5:
b7:86:42:79:f7:e2:b8:8e:ce:8a:72:17:c1:82:23:
46:be:5a:13:1d:dc:78:4d:92:4b:c7:b2:0f:40:e5:
2c:4c:6b:1a:71:49:ee:fe:7a:d6:2d:ca:dc:23:c7:
ad:d6:d2:ee:14:04:ca:9d:51:2a:1b:d6:6b:a1:bc:
d6:36:e3:ab:f9:b9:d2:37:62:73:99:91:5e:a3:53:
22:96:eb:84:07:6e:fa:b0:6b:e8:93:65:cf:84:1d:
61:1a:da:ac:13:38:38:8f:b5:72:32:ee:65:69:b9:
8b:89:5e:f3:f7:6e:a9:50:e3:18:5b:42:f8:e9:be:
b4:bf:f5:a1:a0:7f:ee:0d:71:ae:37:86:1d:3f:d6:
a2:1b:6e:d2:51:33:9e:1a:14:71:0b:79:3a:a0:72:
4d:7a:cc:4d:55:54:35:75:ed:64:4e:d6:07:47:55:
8a:f1:c0:9e:e9:63:05:d1:6e:8a:ae:a2:4c:4a:d2:
1e:07:92:90:c5:fb:5d:13:a7:6f:c4:e5:f2:3f:b2:
87:9a:73:9a:62:3d:54:ce:30:27:41:32:31:64:94:
ec:81:cc:09:80:ff:c1:67:9f:92:a8:62:9f:7f:97:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:F3:79:76:13:A4:98:16:5C:75:30:65:3F:79:8A:48:D7:BA:9B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GT3zeXYTpJgWXHUwZT95ikjXups.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.90.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b2:ae:93:73:1c:dd:7e:d9:19:2f:86:a7:f4:03:a1:59:70:
e7:9b:cc:52:f3:9e:44:a7:46:93:89:8c:01:39:5e:ee:ed:ca:
9d:ef:2e:63:e2:b4:fe:54:88:a0:89:67:f8:54:25:10:c0:f7:
9c:ff:2a:93:36:b4:19:aa:50:f4:63:b7:ee:18:3e:70:33:7f:
cf:eb:49:f6:c2:93:b3:7f:61:01:94:84:64:31:21:17:3b:e4:
62:eb:cb:c4:3f:85:d5:f6:bf:75:9d:cc:34:4a:ad:3d:dd:72:
dd:cf:3f:9f:a0:75:0b:57:87:8b:17:b8:f7:d4:13:b1:47:31:
a5:43:54:6d:83:41:e8:34:0c:c8:a7:8a:39:06:8f:30:38:c7:
ff:34:09:d7:62:62:05:80:41:f8:a4:35:a3:cd:58:cf:19:6b:
fb:2d:54:ab:bc:c5:9c:29:6b:92:a6:9b:a1:dd:8a:91:47:25:
27:7d:45:77:58:0e:3c:54:f9:57:f5:a8:fb:f4:67:5f:c7:18:
0b:de:b7:02:91:a8:4f:0e:52:20:1e:48:12:3a:1c:7d:42:7a:
36:1a:a1:d0:36:f2:1c:07:2f:49:3f:bb:91:39:7d:71:4f:da:
7a:19:dc:37:b3:37:ac:b5:1c:2e:e0:04:b7:f6:5c:12:19:0b:
d1:4b:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:04 2025 by rpki-client