Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa
File: Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa (raw, json)
Hash identifier: 6g02bbz7+35Jk54vCdrzHk533LcEU45qtdmE3cJZevQ=
Subject key identifier: 1A:EE:1F:76:D2:3A:89:F2:C1:66:80:6B:5A:2A:C3:EC:B9:37:D5:82
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01945FB54F4555E2C6825B04BA2004112CBE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa
Signing time: Mon 13 Jan 2025 12:48:25 +0000
ROA not before: Mon 13 Jan 2025 12:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13763
IP address blocks: 194.163.80.0/22 maxlen: 24
195.180.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b5:4f:45:55:e2:c6:82:5b:04:ba:20:04:11:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 13 12:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aee1f76d23a89f2c166806b5a2ac3ecb937d582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:5c:b7:30:dc:07:8b:14:cf:1d:d1:6f:dc:
13:bc:8e:8a:5d:19:25:9a:0f:5c:01:54:81:e4:b1:
4e:a8:79:3f:61:44:4c:61:f9:b3:77:41:f2:ef:7c:
12:b8:56:e4:f4:de:90:27:47:af:26:a5:0a:44:f2:
64:2c:67:05:c7:26:0d:98:0f:d5:76:46:0b:9b:a4:
60:ca:f6:98:56:26:02:1f:3f:fb:ae:16:88:24:6c:
9f:92:f0:bc:0e:cd:d1:7f:7d:4c:f4:0b:34:79:f6:
22:ad:8e:90:d1:a2:de:94:9b:ac:34:09:cb:34:c3:
96:dc:b7:4c:af:04:15:7d:91:58:66:03:78:42:a0:
d9:b1:3b:40:28:92:68:bd:a4:92:b9:f7:39:b1:17:
04:a9:7b:6e:dd:09:8e:47:f5:d3:9d:15:4f:24:6a:
34:fe:04:35:f8:64:b0:40:61:7e:b3:a1:cf:18:44:
17:85:f9:2c:6c:91:a1:56:9b:e9:6b:d6:6e:c1:05:
02:da:6c:85:2f:ec:25:62:af:0b:1a:d6:df:f6:32:
bc:ee:63:f5:09:a0:08:5a:52:a9:57:a8:d9:39:20:
c8:c8:88:5d:9d:38:32:f0:7c:d6:94:59:cf:d2:80:
9c:1b:3d:c7:62:bd:a6:37:dc:52:cd:af:36:c2:93:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:1F:76:D2:3A:89:F2:C1:66:80:6B:5A:2A:C3:EC:B9:37:D5:82
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.80.0/22
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8e:3b:2a:40:bc:23:45:8e:a1:3f:13:99:4d:44:1a:15:c8:
69:dd:30:27:cc:46:e6:03:fd:01:fd:79:89:04:05:b0:53:7c:
88:a5:c9:8f:e2:5e:66:85:bc:e3:f2:77:2e:3d:a8:3e:0c:9a:
36:82:fe:ea:2d:2e:3a:15:43:36:50:c7:9e:a6:79:e7:ec:af:
ca:1d:cb:c8:1b:af:ae:06:c0:5e:eb:40:14:92:b9:d6:1c:49:
3c:54:5d:3d:91:18:35:8d:b8:02:1c:f5:c8:0d:26:02:3a:f1:
0c:1d:a0:18:9e:5b:12:e9:a0:d5:ff:56:dc:24:dc:89:e0:56:
04:b8:54:48:06:67:44:df:70:19:dd:b6:8d:73:01:04:48:88:
d9:2a:ed:2d:72:16:99:8b:62:73:bd:9c:0f:bd:79:ef:e3:e0:
4e:30:c9:64:b0:97:73:13:32:e7:8a:ae:67:a6:67:7a:bb:da:
eb:90:89:08:21:0c:07:d7:14:7f:93:20:7b:11:29:b7:e7:a8:
f2:d5:3f:a3:77:c2:1e:26:b3:81:63:c3:09:04:b1:b2:94:76:
7b:29:41:90:9b:29:c5:7e:9c:4d:be:97:15:ce:df:77:10:1e:
6f:38:d3:91:b4:15:e6:e3:4a:55:e4:34:72:9e:a4:b6:50:99:
11:1c:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:34 2025 by rpki-client