
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa
File: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (raw, json)
Hash identifier: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=
Subject key identifier: 19:C5:D9:5E:EA:D3:1A:B0:27:15:72:A3:BD:41:D4:F5:70:FF:63:24
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 019427482BD05029346EADC94E04F200EC05
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203411
IP address blocks: 185.135.144.0/24 maxlen: 24
185.135.145.0/24 maxlen: 24
185.135.146.0/24 maxlen: 24
185.135.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2b:d0:50:29:34:6e:ad:c9:4e:04:f2:00:ec:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19c5d95eead31ab0271572a3bd41d4f570ff6324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:e7:65:76:df:30:48:d7:d3:89:75:f7:3f:
42:37:47:02:a6:b7:78:86:fe:7c:9a:cf:4a:56:04:
b9:31:87:be:41:74:5b:bc:4d:73:da:92:bd:64:0c:
ef:e3:46:80:b7:1f:59:0d:f0:b6:94:98:76:50:a2:
02:7e:56:ae:89:45:ec:c2:f4:b3:02:ba:f2:4e:e6:
3e:3e:9c:4a:bc:35:f6:73:71:7a:1e:16:e5:97:76:
f4:16:8a:df:80:84:45:a5:ba:6d:58:4f:2c:28:5f:
0f:cb:91:8b:e7:d4:5e:86:e8:7a:61:11:b7:d7:b1:
3d:05:47:53:ef:c7:13:76:7f:f9:b6:0d:6b:82:fa:
1a:16:55:1e:18:33:f3:96:eb:b3:eb:61:0e:9f:43:
3b:82:f7:1e:15:e1:8d:fa:f1:d7:95:52:ff:ba:1c:
2a:a8:48:7a:c4:44:85:cd:e5:d4:e2:be:d7:a8:fd:
1a:be:1d:57:d8:0b:c5:eb:35:09:19:e6:c1:df:fb:
2f:a9:87:0e:32:da:05:5f:04:f5:a9:52:0a:3d:d1:
dd:12:38:d9:38:01:c6:f5:81:66:3a:66:fa:36:c9:
97:54:42:0c:e4:63:a2:58:c4:20:5f:9a:e6:e2:1e:
be:9a:3e:a6:ca:ae:71:fc:2e:5a:89:02:ea:77:2e:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:D9:5E:EA:D3:1A:B0:27:15:72:A3:BD:41:D4:F5:70:FF:63:24
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:36:70:23:5a:d9:21:24:9c:38:8f:e6:50:6a:01:e9:cd:5d:
29:f4:25:0e:9d:d2:ad:2f:fc:3a:67:41:bb:1a:95:81:d7:96:
c3:4c:20:91:b2:83:ec:c1:44:a2:b1:87:b2:5d:11:6e:21:6a:
a6:fe:15:b6:65:97:28:ee:09:88:3b:c5:f6:a8:2f:ed:13:79:
47:ab:24:9e:0d:b0:1e:08:3f:3a:05:54:e2:4e:a1:e0:e1:3c:
c2:59:b5:6d:65:a4:53:d0:4d:0b:8e:46:68:90:0c:f7:00:29:
fe:3c:47:2b:62:28:6a:c0:d1:cc:28:e2:6d:9b:24:7d:c1:c9:
03:ff:cb:a6:fa:f7:23:6d:74:c4:0e:2d:d6:64:46:05:d8:cb:
d9:2f:b6:04:49:b3:6e:74:fa:d6:33:3e:cb:66:12:04:f6:c9:
89:db:78:9d:7c:80:7a:90:51:f7:bb:14:6f:08:f3:66:32:c1:
c4:75:9c:f2:cc:48:67:d1:cb:f3:a0:6c:29:7d:3f:71:9c:fa:
f7:1d:2f:52:b4:e8:af:c5:6b:53:e4:a2:8f:17:73:c2:a2:e1:
65:8b:ef:71:b2:ed:72:93:9b:de:78:79:8f:6f:a1:08:f0:a9:
0b:c8:f3:ff:7b:17:6a:05:75:a2:17:21:8e:5c:03:d6:45:08:
ed:dd:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:52:19 2025 by rpki-client