Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GnowC1bT3czS-zAG1J7LVPgIxH8.roa
File: GnowC1bT3czS-zAG1J7LVPgIxH8.roa (raw, json)
Hash identifier: 1NLaEodRtCxg5yqkqswUzU/qHNFBrU7Sv1pUQqfoBVM=
Subject key identifier: 1A:7A:30:0B:56:D3:DD:CC:D2:FB:30:06:D4:9E:CB:54:F8:08:C4:7F
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018C2BBF6ED67582CDA024759EA9D322F8D5
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GnowC1bT3czS-zAG1J7LVPgIxH8.roa
Signing time: Sat 02 Dec 2023 18:16:55 +0000
ROA not before: Sat 02 Dec 2023 18:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.200.0/23 maxlen: 24
178.216.184.0/21 maxlen: 24
79.139.64.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
198.145.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:bf:6e:d6:75:82:cd:a0:24:75:9e:a9:d3:22:f8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Dec 2 18:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a7a300b56d3ddccd2fb3006d49ecb54f808c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:aa:09:f9:80:73:8c:4b:78:e8:cb:84:d1:
ae:77:08:66:5c:ed:99:31:34:a5:c7:89:b6:97:e5:
dc:b0:ec:70:b9:62:52:a5:9e:0e:08:93:6b:23:11:
6e:ab:f1:b8:bf:81:aa:d8:09:48:1c:7b:d6:7f:71:
f4:de:bc:31:84:2f:3c:82:74:c6:1b:c8:39:85:71:
8e:d6:81:2a:b9:75:d6:86:d4:a9:2f:ed:6e:ca:cf:
4e:93:71:da:b7:49:a6:b1:c1:c7:80:72:ec:ce:1b:
57:8b:48:b3:60:8a:d2:62:24:ee:6e:0a:33:c9:ea:
67:1e:de:b2:21:fa:ef:3b:20:f4:04:a6:37:e0:9a:
88:ee:55:a7:cc:46:c7:5c:08:d4:16:35:67:16:43:
36:cc:fb:5b:4e:30:b3:cd:45:fa:b9:5d:2e:d5:86:
1b:be:89:ad:99:0f:8e:ad:eb:fd:f3:4d:cb:21:b9:
af:b2:bb:2a:7a:9f:dd:1a:22:70:ea:a1:62:83:da:
75:12:e6:1f:96:c0:df:ef:62:cd:67:86:9a:dd:f3:
65:8d:26:85:ae:10:8a:7f:38:2f:cc:38:cc:1f:3f:
3d:2e:b1:45:c3:dd:d4:d8:44:84:98:33:0b:e9:6e:
ce:8d:b8:55:bb:4b:d4:67:09:2b:8d:42:6a:57:c7:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:30:0B:56:D3:DD:CC:D2:FB:30:06:D4:9E:CB:54:F8:08:C4:7F
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GnowC1bT3czS-zAG1J7LVPgIxH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.200.0/23
79.139.64.0/23
176.222.48.0/22
178.216.184.0/21
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
79:ed:46:bd:af:b5:1a:d2:04:59:2a:28:3b:d1:eb:3b:f3:98:
84:b2:47:de:03:a3:88:a9:b7:d0:32:ae:d1:0b:0c:47:ea:07:
0c:0c:11:cb:32:2c:3b:a6:0d:a3:48:bd:2a:30:8d:60:88:74:
4c:58:9b:36:52:bc:9f:e0:01:ab:35:d2:fd:fc:b0:cc:11:ae:
df:16:87:a0:17:32:ea:52:f7:f1:25:3d:f1:79:8f:3f:ed:5c:
4b:7b:a0:1e:46:2a:fb:b9:7a:a6:4d:ee:16:b5:1c:90:df:8a:
a0:24:76:22:b3:dd:7d:97:ab:19:eb:ef:9e:c4:f5:1a:b6:37:
60:d5:08:d4:24:9e:4c:8e:76:6e:cf:53:21:69:00:e7:ca:34:
e9:03:02:b2:6a:b1:f5:02:94:8c:5b:63:2d:72:c1:cb:c4:9a:
77:7a:dd:b7:43:26:4d:4b:b5:76:3a:cf:3b:ab:bc:7e:82:b3:
80:8f:91:59:39:fc:cf:9c:41:5b:17:dd:37:e7:b6:32:28:22:
64:7b:3b:a6:f9:dd:a8:4b:8f:34:f4:fd:6a:7d:cf:d8:f6:42:
60:52:34:72:44:db:24:fd:d5:0b:ec:fd:3c:ec:c6:32:6b:bd:
89:eb:e8:28:81:ac:c9:6f:62:e4:6f:97:25:13:a2:7d:bf:81:
56:a9:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:57 2025 by rpki-client