Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/gz7px3LCXwdOhvRIWMGfnzsiLoY.roa
File: gz7px3LCXwdOhvRIWMGfnzsiLoY.roa (raw, json)
Hash identifier: F70BUXb5RkAWoSm6MxaywQeDn9WJDpTvkQ2ap1NhBjE=
Subject key identifier: 83:3E:E9:C7:72:C2:5F:07:4E:86:F4:48:58:C1:9F:9F:3B:22:2E:86
Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial: 01951AACBC46CE21A38A7B03FEA7D0EEE587
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/gz7px3LCXwdOhvRIWMGfnzsiLoY.roa
Signing time: Tue 18 Feb 2025 20:08:02 +0000
ROA not before: Tue 18 Feb 2025 20:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 212.209.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:ac:bc:46:ce:21:a3:8a:7b:03:fe:a7:d0:ee:e5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Validity
Not Before: Feb 18 20:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=833ee9c772c25f074e86f44858c19f9f3b222e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:73:6a:93:bf:be:09:c2:33:92:a3:51:a9:
05:6a:4f:a9:4a:7a:be:d2:b5:ef:79:c8:fa:d3:fe:
43:74:23:6c:2b:53:ea:c8:d5:9e:30:39:02:9d:ee:
3c:02:36:13:c2:63:56:8c:72:ca:39:17:a2:8c:00:
41:17:df:96:fc:d2:83:cb:35:1b:ec:cb:8a:9f:c1:
4b:5d:17:9a:8b:54:6a:cf:eb:48:fe:cc:b2:c7:eb:
c4:80:10:15:b6:aa:b8:0c:de:b4:42:97:6a:60:17:
a9:99:27:97:0d:0a:99:2f:57:84:2a:47:29:37:da:
48:9f:a7:ec:03:62:96:22:19:a7:eb:ac:89:e4:5a:
46:b1:09:16:c6:c9:49:4d:bc:fe:b5:61:8e:04:dd:
ad:e8:7d:20:15:8e:d2:ea:46:89:e4:48:c3:1b:ae:
a2:19:2f:37:77:57:4c:8b:cd:af:4d:4e:0b:56:45:
be:12:10:8c:a0:25:15:55:da:47:fd:88:94:63:30:
b0:b3:aa:2c:4a:0f:9a:a0:6b:ad:bd:ac:b6:91:a6:
33:4e:70:88:fb:3b:c3:fe:b3:dc:cc:15:4c:62:6e:
3c:c0:be:9b:11:fa:0f:e6:db:01:ef:89:bb:19:be:
56:f1:c7:49:f0:24:9b:d8:91:b9:1a:ec:d3:27:8e:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:E9:C7:72:C2:5F:07:4E:86:F4:48:58:C1:9F:9F:3B:22:2E:86
X509v3 Authority Key Identifier:
keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/gz7px3LCXwdOhvRIWMGfnzsiLoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2b:04:d9:bc:ea:84:83:1f:3a:de:2a:b3:19:25:08:98:d0:
65:85:0f:55:b7:91:ec:8e:0d:04:8a:29:0b:b9:b5:51:89:31:
72:17:bf:88:71:df:f0:3c:0e:81:2e:26:8e:d0:65:b1:a6:ea:
5d:d7:94:6e:ac:0f:3e:2e:06:4e:fb:71:6b:7a:eb:ef:80:9f:
4d:ec:18:70:4f:f7:a4:ba:84:08:73:2d:ab:53:8e:f7:85:00:
59:b9:c9:c3:4d:29:03:a1:75:77:8b:1a:79:7a:b2:dc:0d:b3:
01:f2:33:2f:e9:df:63:7a:8b:69:4e:f3:c0:ac:20:45:de:81:
9a:66:c3:d8:da:08:16:f7:22:d5:77:5c:a8:c7:43:22:e8:88:
2e:56:38:f5:8f:04:d3:bc:93:fd:29:60:23:90:6b:05:54:98:
1c:ae:ed:d5:48:cd:4b:dd:54:5f:2f:3d:c8:3c:8a:25:0a:60:
f6:62:01:b3:0e:7d:c6:a9:b9:b1:93:09:58:02:d4:54:6d:a8:
c2:4d:c5:da:95:47:76:c4:b0:be:dc:e1:1e:4e:41:db:78:df:
b4:6b:78:56:f4:4c:0c:0a:fc:b2:ea:9c:84:4d:4c:03:6c:15:
01:9c:65:a0:a1:77:45:87:c4:08:fa:b0:32:21:9b:e6:7a:78:
61:d9:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:26:31 2025 by rpki-client