Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/GzDEyQPlP7XqkDOXMJVrm-t5quA.roa
File: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (raw, json)
Hash identifier: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=
Subject key identifier: 1B:30:C4:C9:03:E5:3F:B5:EA:90:33:97:30:95:6B:9B:EB:79:AA:E0
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 0194258F5DFA6DE77FEE1E9422229B2F58F2
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/GzDEyQPlP7XqkDOXMJVrm-t5quA.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.79.72.0/24 maxlen: 24
185.79.73.0/24 maxlen: 24
185.79.74.0/24 maxlen: 24
185.79.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5d:fa:6d:e7:7f:ee:1e:94:22:22:9b:2f:58:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b30c4c903e53fb5ea90339730956b9beb79aae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:cd:7e:34:ca:bc:2f:8a:76:0a:35:5f:d0:
94:81:12:2c:b5:de:1f:82:de:89:d5:5d:38:82:58:
51:9d:c7:ef:6e:cc:ff:4d:5b:ea:dd:d4:01:f9:ef:
90:46:5b:f3:ef:c9:0f:0b:95:5d:c7:fb:16:95:c9:
ea:24:30:f3:03:94:b5:ee:bf:03:f2:e2:68:f9:ff:
b7:e4:83:07:54:e1:9a:78:9c:ef:6a:b0:b2:70:4a:
68:98:d7:0f:b2:b2:9c:f8:82:db:2d:61:8f:ac:2f:
91:c3:98:4c:20:4a:75:72:12:c2:35:67:d9:77:9b:
27:8f:af:7b:22:d6:6b:2d:fc:0d:09:c6:a9:82:d4:
a8:c3:5b:ae:1a:c0:ac:46:79:58:20:50:c3:ad:83:
af:bc:b2:e7:88:62:d0:d3:ce:6a:92:01:24:ae:50:
f5:74:b1:25:3a:ae:e6:90:c4:dc:1f:df:80:f1:1d:
84:36:bb:67:e7:95:f2:24:9c:4b:02:15:08:a4:01:
d4:8b:e4:40:c6:f2:dc:9a:48:fd:3f:ec:26:6a:e9:
86:51:8a:9b:48:42:a8:9c:b0:3a:08:1a:5e:40:d2:
e5:b4:8e:a3:10:06:5b:a1:8b:0f:1d:96:c3:43:aa:
56:5b:1a:77:00:2d:6d:95:66:6a:14:29:0b:7e:45:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:C4:C9:03:E5:3F:B5:EA:90:33:97:30:95:6B:9B:EB:79:AA:E0
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/GzDEyQPlP7XqkDOXMJVrm-t5quA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:a2:f4:85:2b:ec:ac:18:d8:27:61:97:5a:bd:26:58:cf:aa:
96:c7:e9:99:66:7e:ee:a5:62:3b:d9:20:2e:a8:5b:9f:7b:a1:
24:91:85:b8:42:23:5c:40:fa:f0:53:7d:c5:e8:0f:be:23:ba:
b5:17:4f:ba:7d:60:d7:00:2c:14:4d:19:96:44:0a:1c:18:fe:
25:a4:1b:ac:72:4d:8f:48:28:1c:fb:00:a2:c2:82:09:94:ac:
7f:37:db:e8:cf:5e:27:b0:d6:a9:6f:9a:d6:ca:2d:10:a0:8f:
36:b5:ac:f4:3f:86:56:82:d3:97:33:0e:c9:6b:29:a6:8c:12:
1e:1b:01:c7:ae:65:7d:39:37:e0:52:1b:98:f2:2d:b9:66:e0:
ef:f7:4d:18:a0:83:d1:97:97:26:3d:6f:82:2b:19:5f:51:17:
c0:57:c1:ab:e3:82:0d:c2:c9:4d:cf:4f:9b:8f:28:78:11:ed:
95:60:f4:7e:f7:63:fc:e8:b6:5d:36:be:7f:da:9c:86:50:d9:
80:ef:82:65:4b:4f:1c:6e:57:e8:a4:4b:f7:04:85:35:38:02:
2e:71:d1:9d:82:42:8d:09:a0:97:0d:a1:84:74:9e:1a:82:c4:
50:ec:0a:1c:ef:9c:02:06:b6:7e:d3:7c:fb:4b:54:dc:e6:d0:
08:f8:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:44 2025 by rpki-client