Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/gRtu0LUQ36KM73SlUMkc38__UYk.roa
File: gRtu0LUQ36KM73SlUMkc38__UYk.roa (raw, json)
Hash identifier: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=
Subject key identifier: 81:1B:6E:D0:B5:10:DF:A2:8C:EF:74:A5:50:C9:1C:DF:CF:FF:51:89
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F70AF09B4330899A7A551ECEC8F2D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/gRtu0LUQ36KM73SlUMkc38__UYk.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 185.179.218.0/23 maxlen: 24
188.64.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:70:af:09:b4:33:08:99:a7:a5:51:ec:ec:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=811b6ed0b510dfa28cef74a550c91cdfcfff5189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:53:7a:70:04:8e:fe:d7:04:eb:11:f2:5b:
43:f0:1b:85:77:1f:9c:97:c4:9e:6f:ca:98:dc:ca:
31:25:75:d8:80:6d:11:3f:94:03:17:b8:e4:05:61:
41:3a:7a:80:1e:98:c8:9c:f6:21:fc:7a:cd:39:33:
e0:5f:e1:f4:92:67:70:56:05:d7:34:78:2b:2d:6c:
7e:04:22:80:8d:6d:2b:22:ce:ce:47:c9:5c:8d:59:
72:5f:71:5b:3d:44:38:01:59:28:98:71:c9:b5:b2:
58:23:7e:52:30:03:88:f7:d0:a9:c7:5d:de:fc:28:
d7:89:81:55:99:4b:ba:38:df:60:06:db:65:be:f8:
0e:e6:b7:04:63:67:91:33:17:a4:fd:7b:59:fb:b8:
84:9f:e4:7e:32:4c:09:ae:75:3b:63:fe:29:3c:cd:
16:b5:6b:cd:cb:ee:c0:7f:88:e5:22:b3:eb:c0:e8:
f5:4d:68:8e:a1:d7:93:15:5d:7b:1f:7a:e8:72:e8:
61:3a:fb:8a:51:26:5d:33:44:23:4b:4e:0e:41:c3:
b8:78:43:b5:b0:70:f4:bd:c4:f0:27:05:39:6a:71:
1c:7b:eb:b1:c1:b6:2a:78:90:28:04:80:80:43:75:
c8:c1:dd:08:22:32:8f:38:a3:bc:2e:dd:1a:0a:43:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1B:6E:D0:B5:10:DF:A2:8C:EF:74:A5:50:C9:1C:DF:CF:FF:51:89
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/gRtu0LUQ36KM73SlUMkc38__UYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.218.0/23
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
59:be:fc:31:18:09:60:1e:c3:19:a6:7a:21:80:a3:e7:28:b9:
2d:cf:be:ca:3b:eb:7b:aa:f0:fd:f8:3c:05:20:49:1e:66:1d:
27:83:a4:36:71:4a:8b:53:ca:62:69:c5:42:62:9d:ab:a9:7b:
ad:2d:6b:e4:f7:c1:4c:9e:ad:3e:49:d1:d1:d9:be:47:8d:82:
ee:28:0f:5b:7e:96:e5:73:66:e8:bd:a2:0b:eb:40:00:c6:b4:
63:11:cd:72:49:92:95:d5:5f:45:2b:38:72:15:e6:d7:47:f3:
5b:5c:6b:fa:a9:92:be:c3:6c:d8:08:e9:b3:cd:81:60:c7:78:
ef:b5:b8:f1:6e:02:d2:7f:35:2c:21:ab:20:f3:98:bd:39:09:
7c:34:30:68:bf:e4:57:10:8c:6c:4d:11:cc:19:82:8d:e1:51:
61:75:01:93:20:b5:dc:0a:99:09:07:fc:09:be:23:2f:e9:78:
27:b8:53:b9:39:06:46:fa:51:0c:62:4c:f3:da:2f:ff:48:e8:
db:ce:79:7b:b1:c0:21:d6:15:d6:cb:c3:fc:cb:99:79:e1:f9:
f5:db:5a:22:29:d0:55:bf:23:74:f9:26:5d:9f:6d:03:18:31:
bb:5f:c8:84:52:8f:57:60:93:21:59:3b:66:43:fd:c6:d3:d7:
b1:8d:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:22:58 2025 by rpki-client