Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/GJw7zqEP2MYXk-VzraqbdpzBYjQ.roa
File: GJw7zqEP2MYXk-VzraqbdpzBYjQ.roa (raw, json)
Hash identifier: qItsG1ZR8G/cyesdFIz2YJqOvRUW5MaD+66ItbxcyQI=
Subject key identifier: 18:9C:3B:CE:A1:0F:D8:C6:17:93:E5:73:AD:AA:9B:76:9C:C1:62:34
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 018570153384D69CD9495C1D76379DA39BE4
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/GJw7zqEP2MYXk-VzraqbdpzBYjQ.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12874
IP address blocks: 193.26.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:33:84:d6:9c:d9:49:5c:1d:76:37:9d:a3:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189c3bcea10fd8c61793e573adaa9b769cc16234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:c4:78:e4:79:ea:fd:74:ba:5e:c4:0e:f2:
9f:66:b1:71:7c:8b:c6:e6:89:92:7a:fe:5b:d0:5b:
c6:3e:11:ce:1e:15:f4:6a:cb:e1:cf:13:0c:fd:57:
90:c8:6c:2b:88:6a:43:2d:8f:e2:c4:b1:a4:64:f7:
b3:55:d7:a2:1a:fc:b4:ef:6d:a8:c1:6b:ce:d7:40:
16:9e:39:ed:cd:5c:73:96:76:e7:bc:d7:d2:d5:00:
20:4d:f4:f1:85:06:39:0a:4c:3a:16:0e:85:0b:b2:
83:cc:6e:74:19:60:b2:d4:38:b3:01:cf:b3:f4:73:
81:8a:6b:3a:7e:46:e8:41:2c:a5:03:c2:30:13:88:
a3:e9:ac:c5:6d:01:f6:51:1f:f5:f4:58:9f:ee:12:
0b:14:7d:e4:30:16:f3:72:ee:77:e9:66:66:0a:ff:
37:16:14:37:4d:a3:88:ea:fd:a0:3c:2a:ed:e3:73:
72:34:a3:18:89:f5:d3:c7:66:8e:bd:be:2e:ea:6b:
e6:24:4c:de:31:a2:78:b2:d9:a2:48:ab:0d:5e:76:
4e:b0:c9:50:0b:06:dc:6c:9a:a1:59:7d:b1:d1:ec:
2b:a6:2f:18:65:30:3f:ed:73:46:69:18:01:db:c0:
ca:fa:34:9d:3a:b7:20:03:58:b8:60:45:5d:06:fa:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9C:3B:CE:A1:0F:D8:C6:17:93:E5:73:AD:AA:9B:76:9C:C1:62:34
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/GJw7zqEP2MYXk-VzraqbdpzBYjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.22.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4b:6e:fb:5d:3c:8f:a0:b6:2c:98:b3:cd:36:b7:fe:22:2f:
17:0b:1b:a0:dd:a5:7e:97:45:91:13:87:30:81:67:2f:2b:bc:
cc:fc:95:83:2e:e1:9a:dd:f6:04:d5:58:ba:87:28:74:36:9f:
67:c4:43:84:b7:0c:b8:bd:e0:08:46:cd:8f:d1:0d:03:42:fc:
3b:37:ba:4b:49:5c:8a:35:e4:1a:e5:ec:88:ec:e5:33:63:1c:
83:b9:78:59:87:03:a1:7b:b0:29:5d:d1:15:2e:b3:41:cb:d5:
0b:8e:b0:af:86:40:2a:d7:58:2c:15:21:1a:f4:71:fb:ef:ee:
11:69:4a:a7:55:df:83:c9:93:5c:4e:33:40:e6:c1:9c:17:3d:
bc:75:42:00:50:c9:1d:47:aa:5e:e1:d3:da:07:27:70:d0:77:
80:91:85:91:d9:e6:ff:40:cd:cd:8e:15:4d:13:ab:84:c8:d7:
d5:38:62:c3:37:a3:80:26:43:f2:98:ad:21:00:2b:0b:b6:80:
72:ae:ff:57:8b:c2:e9:df:8d:f4:15:a5:b8:1d:59:aa:09:b3:
77:d9:95:e3:43:1d:90:9d:c1:02:9b:2b:3b:76:28:ee:d5:41:
85:ca:be:d2:6a:e2:6f:15:c0:b2:38:a8:7f:29:20:b1:95:60:
23:48:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:24 2025 by rpki-client