Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Gwc_dMMIfzV84jmhXlTOzubj5xY.roa
File: Gwc_dMMIfzV84jmhXlTOzubj5xY.roa (raw, json)
Hash identifier: wNl0yJIwUxXQ0NDrkrPJjfrgPsrGnPdUy2eXFZ2Hq54=
Subject key identifier: 1B:07:3F:74:C3:08:7F:35:7C:E2:39:A1:5E:54:CE:CE:E6:E3:E7:16
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C6F7319
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Gwc_dMMIfzV84jmhXlTOzubj5xY.roa
Signing time: Tue 08 Mar 2022 10:36:59 +0000
ROA not before: Tue 08 Mar 2022 10:36:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61157
IP address blocks: 46.23.208.0/20 maxlen: 21
212.1.32.0/19 maxlen: 19
188.64.192.0/21 maxlen: 21
62.75.174.0/24 maxlen: 24
185.209.64.0/22 maxlen: 22
195.244.96.0/19 maxlen: 19
2a02:ad0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208630553 (0xc6f7319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 8 10:36:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b073f74c3087f357ce239a15e54cecee6e3e716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:4c:31:ae:2d:38:cd:a5:2d:51:01:05:57:
5d:48:13:37:d2:d2:3c:d4:5b:16:49:cc:23:f4:b2:
12:b6:13:3c:be:f6:15:a5:f4:4f:72:33:aa:9f:7b:
79:01:25:d5:58:fd:eb:98:ce:43:4d:e0:4f:5d:5f:
61:b7:43:ca:1b:fb:90:38:92:01:8e:2a:18:fa:83:
9f:06:82:1f:79:b5:82:73:58:99:74:9b:a0:74:bc:
8a:b6:61:32:12:02:65:d9:e6:b6:a9:62:f8:24:fe:
9b:e1:b1:75:b5:d3:63:c7:fd:29:51:c6:c1:b7:4e:
49:a1:8c:05:0e:4d:63:4e:3b:bd:36:99:3a:79:10:
9c:dc:6d:fd:fe:a2:28:bb:eb:0c:a2:48:1e:f5:9e:
a1:09:96:fd:97:4d:d0:2f:1a:92:d8:ad:40:9c:84:
04:c4:1b:5c:e8:6c:70:5d:d3:51:31:8a:b2:95:61:
eb:b1:20:d2:28:30:33:d7:46:9d:0f:e3:c6:f0:86:
03:05:31:f5:0a:67:16:82:4f:25:da:14:03:26:3a:
e6:50:32:58:8e:e5:96:28:ec:86:0c:2b:aa:9d:61:
02:ba:05:ce:02:58:45:3f:a0:1e:51:20:d7:90:67:
75:ca:94:31:b6:02:a5:0a:04:9d:46:b7:22:80:ab:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:07:3F:74:C3:08:7F:35:7C:E2:39:A1:5E:54:CE:CE:E6:E3:E7:16
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Gwc_dMMIfzV84jmhXlTOzubj5xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.208.0/20
62.75.174.0/24
185.209.64.0/22
188.64.192.0/21
195.244.96.0/19
212.1.32.0/19
IPv6:
2a02:ad0::/29
Signature Algorithm: sha256WithRSAEncryption
13:c8:b2:7e:1b:8c:39:ab:0c:53:13:49:33:8e:dd:13:ec:2b:
a1:8d:0b:78:9f:08:e7:59:77:ae:34:00:4a:89:85:a8:08:58:
45:39:66:7c:17:56:6d:7e:ee:85:8e:a2:a8:ed:76:db:ee:ac:
9b:eb:12:14:13:b4:3c:d4:2a:6e:dc:10:97:e5:3a:2f:cf:af:
2f:84:eb:dc:9c:4a:bb:b8:20:cd:89:78:73:1a:f4:51:00:24:
35:d1:09:90:93:07:3e:75:3c:ea:e4:08:cb:ee:55:98:80:da:
65:d2:0f:39:55:5a:90:fd:c0:32:1c:e1:cc:55:05:94:38:bd:
a6:f4:5a:6d:39:aa:aa:66:20:ec:11:14:8c:e1:f4:3d:41:95:
b8:0f:c2:4d:d7:3c:38:d0:18:dd:65:8b:2b:28:9b:03:f4:5e:
36:c2:5c:a8:bd:9e:87:f1:ff:9f:98:55:73:7c:66:75:6b:94:
73:b2:73:ac:c1:45:60:8d:ca:d9:11:38:17:57:ca:39:b0:83:
7d:7a:8f:10:55:bf:4d:92:e0:67:1e:25:73:cc:21:5a:c1:d7:
bc:8d:cb:54:36:87:40:03:37:31:d8:57:77:14:b7:16:c2:d3:
6b:85:52:08:3e:72:a2:8d:0a:f9:d0:6e:56:fa:c6:3f:37:64:
b5:f9:8b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:20 2025 by rpki-client