Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/gWFI607GT4diptK6z6klQ2oZYkU.roa
File: gWFI607GT4diptK6z6klQ2oZYkU.roa (raw, json)
Hash identifier: H46kA3fqfVNyrqG30wfIQclN0fJfVoNQ86D8lIAtPgI=
Subject key identifier: 81:61:48:EB:4E:C6:4F:87:62:A6:D2:BA:CF:A9:25:43:6A:19:62:45
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 019427485ABC20886D7A804D1ADF0FD5C672
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/gWFI607GT4diptK6z6klQ2oZYkU.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 131.188.0.0/16 maxlen: 16
192.44.81.0/24 maxlen: 24
192.44.82.0/23 maxlen: 23
192.44.84.0/22 maxlen: 22
192.44.88.0/23 maxlen: 23
192.44.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5a:bc:20:88:6d:7a:80:4d:1a:df:0f:d5:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=816148eb4ec64f8762a6d2bacfa925436a196245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:21:6b:3a:7c:5d:38:6e:15:08:c7:b6:a1:
87:4d:94:b2:42:51:5d:2a:ee:91:3e:43:97:7b:07:
0b:a1:8c:9b:07:d7:22:f0:b2:22:6e:39:9e:e3:5c:
28:0c:79:d5:a3:19:80:71:23:37:2b:10:d5:ed:cf:
a6:10:63:a8:b8:67:41:ac:55:ee:6c:1a:3c:3f:d6:
e2:db:6c:3a:16:53:c8:47:47:32:69:32:3e:f7:bf:
1b:43:b8:19:37:1d:0d:e0:41:30:b7:e8:98:4b:14:
b1:ff:1b:b1:aa:b6:05:1b:51:8c:7e:b8:f4:95:31:
65:09:f7:74:b7:4d:29:68:ed:06:3d:d4:f2:e3:c0:
21:d2:de:d6:ec:fb:59:b8:4c:14:64:bc:e0:3a:83:
1c:94:a8:3b:47:5f:d4:5b:d7:76:42:9e:30:dd:5f:
4c:9f:0b:ad:1c:b3:f6:68:53:5b:c6:35:4a:3a:89:
58:a5:4c:14:1f:fb:08:b0:d5:a6:ac:c5:82:ba:e2:
f2:c7:9a:eb:33:1f:19:f5:c3:11:d8:2a:c8:a1:59:
f4:19:cb:2d:a3:ac:1c:d1:cd:a0:07:a7:b9:7c:be:
f6:8b:38:88:ba:80:c2:7a:73:d5:0f:c4:29:6c:4f:
44:85:b3:c5:9f:18:fc:ad:39:cf:dd:9b:14:a3:de:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:48:EB:4E:C6:4F:87:62:A6:D2:BA:CF:A9:25:43:6A:19:62:45
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/gWFI607GT4diptK6z6klQ2oZYkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.188.0.0/16
192.44.81.0-192.44.90.255
Signature Algorithm: sha256WithRSAEncryption
04:1d:ce:08:d5:71:81:08:1e:ef:c7:e9:b2:63:77:31:13:df:
c9:37:20:3c:58:d0:c6:8d:17:2d:dd:80:7d:cb:be:7b:99:d2:
e2:c5:74:29:20:41:27:20:a9:d5:d7:3b:c4:5d:b2:3c:9a:ba:
c0:ed:50:3a:46:7f:0d:75:4e:bf:f5:66:5f:c2:29:b4:cf:b8:
74:db:4b:f1:00:e4:bb:a4:ba:66:a9:f0:f4:e5:b6:c7:59:3e:
62:70:3b:81:d7:5d:13:40:2f:fb:de:46:de:9d:d9:cb:9e:5b:
23:d2:7e:62:6d:2c:38:c9:1d:6e:3d:24:d5:5e:11:d3:15:a5:
e1:fb:aa:d4:2c:52:35:fd:54:99:03:9c:65:e8:77:78:e1:86:
52:62:e0:6a:52:7a:72:3e:c2:9b:14:50:b5:8c:72:66:ba:af:
b5:05:e4:b3:f3:ab:bf:11:f3:6a:e0:7f:ad:86:00:9e:0f:9e:
d4:5e:5a:b7:91:8d:3a:8f:03:65:a4:99:13:ee:44:76:4f:8f:
bf:98:bf:90:c8:81:08:de:58:7d:6e:3a:1c:8b:03:e3:a6:d7:
00:2e:b4:6a:a9:57:4e:05:c1:02:20:e7:10:9a:c2:45:57:db:
ab:d5:77:e1:19:23:e5:3d:6b:62:3f:31:66:ed:f1:58:fc:de:
18:af:31:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:39 2025 by rpki-client