Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/GyISCTVnPZ05yiIGPaqs_BIQe3A.roa
File: GyISCTVnPZ05yiIGPaqs_BIQe3A.roa (raw, json)
Hash identifier: HXZebLN++PLAND9Fse+1Vz/sTH36ccZhc302O6BcMlM=
Subject key identifier: 1B:22:12:09:35:67:3D:9D:39:CA:22:06:3D:AA:AC:FC:12:10:7B:70
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B81283742EBC311C651DE32D11DB3
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/GyISCTVnPZ05yiIGPaqs_BIQe3A.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 81.4.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:81:28:37:42:eb:c3:11:c6:51:de:32:d1:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b22120935673d9d39ca22063daaacfc12107b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:4f:3e:a6:64:f1:a3:9d:ba:bf:c3:25:57:
d1:98:4a:cc:3c:00:12:3b:76:f7:5a:ef:bf:c9:ea:
f5:83:ea:c3:f0:d9:6d:ae:03:79:b3:90:b2:aa:3a:
ba:3e:11:80:26:c6:7e:2b:5e:d2:a5:3b:6b:67:ce:
33:d1:0b:41:e1:bf:c6:38:66:32:ff:09:d2:b1:a4:
87:3d:3b:7c:4f:83:e1:7a:a1:f1:57:78:7e:2f:26:
b5:f8:49:df:11:c9:64:a6:e3:95:bc:76:f3:aa:a8:
b8:66:b3:31:a0:55:8a:ed:28:33:97:e7:5f:d5:d0:
f7:48:d0:08:b1:bc:40:12:c1:87:23:ea:36:0a:75:
08:e9:73:e3:13:17:2a:63:bf:82:c9:60:57:e3:7d:
5c:5d:d4:59:f9:8d:72:74:52:c9:a2:98:dd:ec:85:
61:f9:17:4b:fa:85:d7:b2:04:5a:78:ce:ae:ac:90:
da:66:80:c7:ea:5e:e9:7d:5f:8c:83:bd:3b:0d:0f:
13:c4:af:70:c4:b9:3f:79:b0:7d:76:d5:ac:85:e1:
01:9c:b6:d7:50:e6:38:7c:e3:5b:59:af:51:ea:d0:
2c:41:d1:e6:e6:b3:d9:70:fc:bd:b1:62:b9:87:f7:
6f:24:ce:83:42:7e:2a:8d:d8:ee:73:69:47:b4:6f:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:12:09:35:67:3D:9D:39:CA:22:06:3D:AA:AC:FC:12:10:7B:70
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/GyISCTVnPZ05yiIGPaqs_BIQe3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.186.0/23
Signature Algorithm: sha256WithRSAEncryption
36:de:18:e7:77:96:8a:cc:21:b6:a8:88:5d:31:98:b2:08:06:
fd:73:95:d3:c1:7f:57:41:9d:7a:42:82:6d:ec:a2:0b:aa:d6:
c1:d0:06:96:6b:74:35:44:25:a2:0b:79:c2:5a:5d:f0:0a:e4:
42:a9:74:c1:3c:cd:12:43:b5:23:2e:ec:f0:e1:67:66:72:11:
b1:6d:21:b4:f0:39:ac:a3:32:66:bf:50:15:21:c9:b8:c3:09:
79:54:3b:e3:e7:7e:fc:35:23:7a:90:a3:05:51:29:bd:6a:73:
b5:3b:69:72:39:1e:75:60:23:11:28:82:c4:97:95:99:2c:7a:
3b:8b:ad:45:04:c0:cf:1a:71:b5:47:ff:91:db:d0:79:43:68:
b3:4c:1f:13:69:46:aa:d0:52:f9:f4:40:58:b1:16:c3:e7:72:
d1:76:2f:80:6d:ac:b3:17:85:f6:d3:b6:c0:f1:e2:bf:06:11:
e6:f5:38:50:0d:cf:fe:95:5a:a2:d0:0e:ec:f2:2a:56:30:b3:
e6:fe:05:fd:b1:cb:ec:a2:54:b6:cc:d2:c3:00:a5:c9:2a:6b:
d2:57:d4:dc:87:98:f2:bc:fd:4e:8a:3c:54:43:17:a9:60:8a:
a9:f4:d7:81:ce:ee:6d:05:70:e9:ff:36:17:2c:18:bb:d9:fc:
d9:42:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:53 2025 by rpki-client