Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/GVHKfBG0Fdssz3GrLpnPpHzY0H4.roa
File: GVHKfBG0Fdssz3GrLpnPpHzY0H4.roa (raw, json)
Hash identifier: 5jnK71C8euR9qWtxC8Vd8ouVAS7rQVOQE4Ot0PQTGcE=
Subject key identifier: 19:51:CA:7C:11:B4:15:DB:2C:CF:71:AB:2E:99:CF:A4:7C:D8:D0:7E
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 018572DF17A061EA448FB2B9DBB95AC27100
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/GVHKfBG0Fdssz3GrLpnPpHzY0H4.roa
Signing time: Mon 02 Jan 2023 14:25:01 +0000
ROA not before: Mon 02 Jan 2023 14:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39759
IP address blocks: 89.186.32.0/20 maxlen: 20
89.186.32.0/19 maxlen: 19
89.186.43.0/24 maxlen: 24
89.186.42.0/24 maxlen: 24
89.186.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:17:a0:61:ea:44:8f:b2:b9:db:b9:5a:c2:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Jan 2 14:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1951ca7c11b415db2ccf71ab2e99cfa47cd8d07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:96:be:d2:09:b0:d4:c7:44:0a:9d:ec:f6:
0c:8d:18:0a:e3:0a:d5:fd:02:4c:7e:8b:e5:70:8b:
ed:56:1a:37:5f:74:3b:fe:b0:fc:01:15:c1:5b:e1:
45:c2:2c:85:4a:40:fc:fb:86:d2:d1:af:09:b0:ca:
f4:5d:e2:34:b0:be:ee:fa:15:20:e6:31:30:49:2d:
05:2e:73:75:7c:1f:ab:fd:f4:62:bd:0b:21:bd:16:
51:7c:77:7f:ae:3d:c1:ee:69:a0:9b:3d:e8:45:5e:
ae:5c:37:05:9a:6f:54:6c:6f:0d:7e:36:bb:b4:2d:
b3:40:2b:f7:63:73:c7:4b:60:59:de:5c:41:86:ee:
b6:d3:ca:df:27:18:ce:92:19:71:f5:65:80:5e:97:
19:0c:84:9d:27:cc:65:97:72:8f:52:ce:db:d2:d5:
d0:a4:73:88:23:63:f1:fb:58:f6:fa:f8:1a:e2:bc:
b3:1e:95:9e:35:cd:5a:c4:66:68:fa:4a:a1:d9:84:
36:b0:0a:68:b4:e5:9f:92:2f:ed:21:b4:d5:8c:73:
7f:bb:01:80:9a:fd:01:91:7d:50:3f:1c:92:ea:b6:
d4:13:84:eb:6f:a7:41:43:73:1c:f0:00:10:54:de:
f0:ad:3f:2e:2b:76:18:eb:44:3f:d2:aa:c2:f4:87:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:51:CA:7C:11:B4:15:DB:2C:CF:71:AB:2E:99:CF:A4:7C:D8:D0:7E
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/GVHKfBG0Fdssz3GrLpnPpHzY0H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.32.0/19
Signature Algorithm: sha256WithRSAEncryption
10:9f:ee:dd:2b:bb:fc:e5:6b:df:77:4c:1a:de:06:43:41:f0:
38:96:54:78:e9:a2:5b:5c:b8:8b:e5:b6:9d:12:12:05:c6:d0:
13:65:7c:09:fa:17:80:42:32:dc:c7:a1:20:4d:49:67:27:64:
1c:ca:06:39:d3:e6:4d:03:1a:40:7f:9f:53:e8:28:aa:fa:8e:
5a:5a:cd:ca:44:34:91:6c:6d:bf:ac:39:d7:eb:ad:be:46:d7:
a6:aa:56:2c:6b:1e:87:e0:78:76:aa:87:33:13:c8:9a:91:a7:
d6:7c:ce:4d:2b:0c:12:05:0a:05:cf:33:89:4f:ce:a0:1f:92:
62:a7:61:07:73:dd:a3:3d:ff:ff:11:c5:73:8a:28:26:ce:14:
57:df:38:25:c9:36:5d:85:a1:ce:aa:ba:c7:cb:f5:96:9b:49:
b2:ca:e9:82:92:05:84:4d:5c:58:16:3e:c1:31:f7:4a:44:63:
6f:7c:3d:44:62:c3:91:ef:ca:fb:51:d5:e9:d8:bb:2e:48:ed:
fd:f6:ea:c4:bf:6b:97:b5:e0:d5:41:f8:06:14:37:e8:8d:fe:
63:43:b7:e4:0b:6a:c7:9e:86:20:7d:99:fd:af:ca:2c:e7:fe:
80:ad:14:54:a7:a9:1c:65:b4:ec:bf:2c:b5:77:7b:07:fa:45:
8e:8d:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:32 2025 by rpki-client