Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/GxZ4pcHNxJWWZmo3QeLWFcOJ96w.roa
File: GxZ4pcHNxJWWZmo3QeLWFcOJ96w.roa (raw, json)
Hash identifier: kNugI+MqbUha2Kis69qN7eApEr+kh+K19k8AdkY1d4o=
Subject key identifier: 1B:16:78:A5:C1:CD:C4:95:96:66:6A:37:41:E2:D6:15:C3:89:F7:AC
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: 0186B82F1D2FC4920BADC30DD586804FFC06
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/GxZ4pcHNxJWWZmo3QeLWFcOJ96w.roa
Signing time: Mon 06 Mar 2023 18:29:00 +0000
ROA not before: Mon 06 Mar 2023 18:29:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30644
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:2f:1d:2f:c4:92:0b:ad:c3:0d:d5:86:80:4f:fc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Mar 6 18:29:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b1678a5c1cdc49596666a3741e2d615c389f7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:61:28:b0:5e:e6:5f:2b:9b:fb:5f:9e:cf:
6d:99:5d:6a:d8:c9:90:eb:ed:74:c7:82:90:9f:b6:
a8:27:38:f2:48:0b:62:dc:ee:d8:4c:7e:60:5f:0b:
b4:01:22:b5:ea:fd:01:ec:78:15:66:a1:13:96:c0:
61:ab:ee:9b:7d:ab:92:b8:7c:a4:dc:55:29:a6:38:
48:0a:e4:bd:5a:76:d9:4e:81:f2:7f:21:58:96:23:
af:e7:5d:56:b0:bf:b4:a5:4f:3a:09:9c:00:74:0e:
3f:46:23:d3:dc:77:56:58:95:12:48:33:3e:61:0c:
93:88:fc:2c:4a:2d:58:16:a5:8f:a3:44:cc:b8:14:
9a:3b:f2:50:1d:c6:30:51:85:78:4d:ab:12:4e:e9:
8d:46:e8:e1:75:52:2f:7d:6e:6e:50:b9:c3:94:b4:
67:00:cb:9d:5c:ac:f3:2d:1a:19:5b:01:da:19:a3:
b6:f9:0d:5b:7d:73:05:b7:57:9c:1c:ed:2f:c8:e2:
32:71:2e:03:aa:77:d6:35:48:15:88:48:04:5f:76:
1b:a8:f9:40:8b:6a:da:d7:8e:13:31:46:10:28:b8:
96:47:fa:99:3c:39:b6:d9:ec:b9:24:c8:13:43:d8:
e5:8f:f4:ca:43:ba:c2:5b:60:00:a0:6f:63:47:14:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:78:A5:C1:CD:C4:95:96:66:6A:37:41:E2:D6:15:C3:89:F7:AC
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/GxZ4pcHNxJWWZmo3QeLWFcOJ96w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:54:61:80:ad:c8:80:28:3f:92:a2:68:22:bb:29:3c:33:bd:
f9:4c:24:84:3f:a1:16:cd:db:62:2c:56:7d:a3:3b:63:a6:93:
25:34:23:1c:9d:90:40:f0:2c:b4:48:73:d9:2c:45:a4:17:b6:
ad:6e:c9:cb:e3:58:63:d0:9c:55:76:5f:b0:58:ce:82:ca:45:
0f:87:a1:07:f2:13:da:f7:cc:52:35:b0:f3:5d:68:25:bf:82:
78:ae:99:c3:80:4e:4e:65:65:92:04:9c:f6:cf:8a:a9:93:dd:
ac:dc:c2:27:82:64:35:70:25:25:b3:36:7e:08:c8:7f:b9:c7:
26:d5:d2:64:bf:f0:f9:0c:c5:f8:62:02:53:5b:65:11:f4:4d:
ab:23:cd:1f:d2:16:fe:e1:ac:e7:0c:d7:8b:3a:19:fb:2b:33:
6c:05:b5:54:d1:6d:e0:5e:dd:c6:b2:df:72:56:c2:9c:01:e4:
e0:97:0d:61:9e:f1:ee:ec:71:e9:fa:53:43:ee:d8:36:76:6e:
de:3c:6d:0f:71:e5:73:ff:02:96:a1:26:6a:2c:47:1d:35:8f:
c5:f1:e1:8e:85:10:1f:a8:4e:67:fb:02:57:96:cb:0d:5b:44:
d8:f9:6d:cb:bd:b8:8d:b4:c6:9b:aa:af:a8:b8:59:14:95:3d:
18:a5:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:14 2025 by rpki-client