Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gqEEeBhW5k51HVbO_JJGAarbmPM.roa
File: gqEEeBhW5k51HVbO_JJGAarbmPM.roa (raw, json)
Hash identifier: iWxBMqqnJ1bwWN9bJfGS+vq4aSWaEbRjUEJKRoiCnqI=
Subject key identifier: 82:A1:04:78:18:56:E6:4E:75:1D:56:CE:FC:92:46:01:AA:DB:98:F3
Certificate issuer: /CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Certificate serial: 1479C9D4
Authority key identifier: 81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gqEEeBhW5k51HVbO_JJGAarbmPM.roa
Signing time: Sat 01 Jan 2022 12:01:56 +0000
ROA not before: Sat 01 Jan 2022 12:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205951
IP address blocks: 185.14.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343525844 (0x1479c9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Validity
Not Before: Jan 1 12:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82a104781856e64e751d56cefc924601aadb98f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:91:59:85:e2:31:93:f9:63:3f:b0:c4:03:
0f:f7:59:ca:cf:05:4f:94:ea:bb:06:96:b7:46:d7:
15:6a:f7:16:f7:8b:8e:63:41:e9:d6:9c:7a:4f:00:
3f:3a:aa:cd:8f:6c:52:86:06:59:28:d7:be:5f:60:
1e:f7:72:9e:27:e8:83:2b:12:20:5d:f0:aa:88:dc:
52:34:75:05:22:3d:cc:fd:d4:76:cf:91:fe:fc:99:
fa:fc:2e:d4:19:bd:22:1b:a7:7a:04:46:52:88:05:
54:86:cc:20:7c:ac:2c:be:5e:64:db:3f:1e:ce:1f:
c0:49:bb:3c:51:16:5a:10:2c:c6:d4:05:e5:91:40:
fe:84:66:3d:4b:84:8d:c0:d7:b6:fd:02:81:a4:f6:
fe:f7:5d:25:5a:40:d8:0c:07:94:c7:fa:36:8e:41:
0a:0e:d6:b9:d7:2f:1e:23:84:9f:70:45:c0:9a:c3:
95:fd:26:86:22:74:9f:d4:44:e4:f2:c5:92:0b:c5:
98:10:fa:43:1f:62:50:25:22:70:87:fc:ab:d4:d1:
66:15:b8:30:33:71:5d:5a:8c:bb:77:06:02:aa:49:
72:3d:72:7e:24:c1:d2:be:8f:fe:a8:0c:f7:f6:d0:
bd:11:9d:f0:31:70:9d:43:c6:7a:81:6a:58:f5:b3:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:04:78:18:56:E6:4E:75:1D:56:CE:FC:92:46:01:AA:DB:98:F3
X509v3 Authority Key Identifier:
keyid:81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gqEEeBhW5k51HVbO_JJGAarbmPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gXJOewyyM65-fy6zdmlZ_Ggn-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.172.0/22
Signature Algorithm: sha256WithRSAEncryption
74:78:55:e7:9c:66:eb:ed:b6:1d:11:bb:8e:46:3b:42:ea:07:
b7:1f:fa:6b:31:93:f3:21:a4:20:53:58:ad:f6:4e:8d:e0:1e:
82:d3:f5:88:b2:26:cb:65:f0:db:60:3f:ee:22:24:2b:87:48:
53:6d:34:50:b0:28:e6:37:cf:35:ed:ca:e0:0c:dd:98:ed:0f:
fd:5d:04:e1:88:eb:88:b2:8c:b7:09:55:b9:7e:24:06:a0:65:
48:06:33:c9:77:44:4a:99:0f:64:0f:39:47:74:0e:4f:2d:63:
78:5f:45:42:c0:8a:d2:fe:38:04:99:51:96:60:9c:b5:75:da:
9a:66:fe:a7:2e:02:ff:ee:f2:c0:f0:49:75:d5:68:c4:31:e5:
43:2d:d7:54:d6:9f:9f:aa:68:eb:b7:31:8b:a2:41:c5:7a:fb:
e4:92:d3:86:29:2e:77:d0:4c:3b:30:08:11:f1:24:5a:d5:f7:
42:e3:5b:32:b8:d0:0e:ba:3d:98:24:aa:98:60:37:4e:38:4f:
bf:70:2a:3e:d0:dc:c7:2e:e7:07:18:14:ef:7a:09:0f:df:0e:
3b:1b:ec:3d:8d:39:09:73:fa:0e:22:26:36:54:be:d3:94:b1:
70:4e:ed:08:2e:dc:6c:11:0f:c3:b9:fd:33:26:69:b5:b1:22:
ef:03:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:40 2025 by rpki-client