Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/GKJs0od1VETJMcBZXydiNLbJbk0.roa
File: GKJs0od1VETJMcBZXydiNLbJbk0.roa (raw, json)
Hash identifier: KhgAjx+rFXJ9T1PT9/Ilo9rhQ0J1RaJykr1lAnbaQn0=
Subject key identifier: 18:A2:6C:D2:87:75:54:44:C9:31:C0:59:5F:27:62:34:B6:C9:6E:4D
Certificate issuer: /CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Certificate serial: 0182020D17EC7318C4637F71D87969FFC0FA
Authority key identifier: D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/GKJs0od1VETJMcBZXydiNLbJbk0.roa
Signing time: Fri 15 Jul 2022 13:29:48 +0000
ROA not before: Fri 15 Jul 2022 13:29:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 193.34.240.0/24 maxlen: 24
193.34.242.0/24 maxlen: 24
193.34.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:0d:17:ec:73:18:c4:63:7f:71:d8:79:69:ff:c0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Validity
Not Before: Jul 15 13:29:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a26cd287755444c931c0595f276234b6c96e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:93:b7:4c:dd:8d:b8:b7:2b:10:59:a7:00:
a4:20:f9:86:26:35:de:a4:c2:b6:e0:0d:1b:f9:24:
de:2d:57:17:57:45:49:65:00:8a:0c:7b:30:52:89:
e6:42:e1:a5:c0:fc:a8:59:1d:de:3c:79:5e:8a:32:
60:b5:f4:34:cb:82:69:25:cc:8f:1f:b1:35:bb:7c:
2f:76:c3:05:19:ab:49:d6:2d:b9:88:48:78:9b:c4:
f2:2e:2f:47:58:ad:2a:a5:3e:15:eb:36:0f:97:ef:
15:8b:8a:9a:4c:d8:91:cf:15:fb:75:68:ef:34:d5:
1e:6c:e0:b7:0d:26:f7:03:21:9c:05:5e:ff:b2:75:
47:9c:7a:3f:56:78:21:8a:30:c0:f5:af:62:94:df:
6b:e1:79:2a:e7:3f:44:ca:16:a7:6e:b9:0a:c8:50:
6e:18:ca:2e:04:ae:49:ad:06:b9:b6:ce:ad:04:e1:
09:cc:50:d5:96:9a:40:f0:9e:22:99:ab:d0:9f:5d:
56:ca:cd:e2:59:9b:d4:47:03:9f:96:10:60:5d:82:
39:e4:1c:c7:77:58:23:80:68:7c:71:cb:a5:d4:28:
17:8a:bc:ce:b2:ad:74:8d:0a:cb:46:93:a5:4a:e4:
c9:b7:d4:54:26:5d:5d:34:b9:82:9c:88:a0:bf:9f:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:6C:D2:87:75:54:44:C9:31:C0:59:5F:27:62:34:B6:C9:6E:4D
X509v3 Authority Key Identifier:
keyid:D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/GKJs0od1VETJMcBZXydiNLbJbk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.240.0-193.34.242.255
Signature Algorithm: sha256WithRSAEncryption
24:4e:4d:d2:df:19:e0:ea:b2:85:f8:ff:a1:da:5f:b8:75:31:
d5:5a:9c:3a:b3:6a:c4:55:6d:14:4c:6c:2d:78:a0:a7:55:4a:
8f:de:88:e4:5d:44:89:51:a0:ad:dc:7e:6f:ec:aa:7b:3c:59:
f2:dc:2b:b8:97:da:16:c3:68:4f:f9:51:2a:d0:79:47:56:98:
5e:dc:51:c4:c5:79:9a:18:5d:c8:53:21:cd:7d:50:38:74:20:
9e:90:ec:0d:73:f1:05:d0:db:fe:81:5a:c1:22:5f:98:4b:71:
a4:50:a7:d0:33:a9:fb:db:2c:15:ee:57:ca:6a:df:31:80:8b:
1e:7b:c5:43:90:a6:de:0d:94:a8:6f:46:22:5b:21:35:21:20:
80:e6:73:e5:27:79:f8:04:39:33:45:90:45:bd:21:df:39:27:
0b:e8:32:45:ab:98:d6:64:c7:39:02:e1:1e:af:20:da:b8:2f:
43:49:21:d8:80:19:83:fb:6d:3e:d8:f0:b0:a8:92:30:17:81:
12:45:aa:70:7c:c9:ca:34:db:ba:05:c8:68:54:7f:db:7b:dd:
23:0c:8d:ab:2b:29:3b:3e:17:fd:76:1c:6e:d4:5b:ff:0e:6c:
52:65:1e:81:08:7e:8e:c6:06:d5:2e:e7:fc:9c:d7:b7:e4:65:
9c:23:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:55:59 2025 by rpki-client