Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/gqzdVcpuUbsuX8T0rr087q7RUfg.roa
File: gqzdVcpuUbsuX8T0rr087q7RUfg.roa (raw, json)
Hash identifier: PVkK0/m0ztwnyIOh2a+tRYXZ/vbcfjzJzT1QmgMq6f0=
Subject key identifier: 82:AC:DD:55:CA:6E:51:BB:2E:5F:C4:F4:AE:BD:3C:EE:AE:D1:51:F8
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: 0186B82D48EF28985D910E0E2132F99C6F13
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/gqzdVcpuUbsuX8T0rr087q7RUfg.roa
Signing time: Mon 06 Mar 2023 18:27:00 +0000
ROA not before: Mon 06 Mar 2023 18:27:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:2d:48:ef:28:98:5d:91:0e:0e:21:32:f9:9c:6f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Mar 6 18:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82acdd55ca6e51bb2e5fc4f4aebd3ceeaed151f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:33:cd:32:ed:0e:17:42:87:2e:91:ac:4c:
87:c4:fd:96:6e:d2:1c:b5:10:a9:f6:3e:ec:99:cb:
e9:71:cb:53:eb:b2:e0:4c:dd:f7:b0:0c:8a:52:c6:
73:82:8c:3c:57:4d:e0:a1:7f:7b:6c:67:9c:66:3d:
05:e5:32:fd:66:3b:06:61:a0:6d:85:91:8d:78:15:
7c:78:92:83:3a:52:c2:1e:00:20:a0:bd:06:58:98:
28:4e:96:54:7b:f5:46:ab:33:cf:57:e7:17:4d:de:
ab:7f:ce:f7:bb:f4:a0:a5:d4:cf:e5:67:65:61:e8:
bc:d5:bf:82:62:07:fd:cd:81:68:5f:fe:f5:34:23:
31:34:e8:e8:1c:eb:02:73:7b:17:2f:6e:71:07:3d:
a5:30:66:6e:05:01:7f:4c:96:75:c7:f8:9f:22:ee:
1d:af:2d:05:5d:9b:e1:32:87:44:22:e6:38:5d:7e:
46:e4:cc:b3:97:c7:c1:01:42:08:24:ca:24:0e:58:
4b:c1:c5:49:02:4e:ac:51:31:2a:46:ce:74:a6:66:
ca:41:28:1c:7f:c8:f4:7c:65:df:69:1e:62:0c:8a:
0e:e2:04:63:64:f1:ef:88:7f:1c:ac:0e:db:d1:b7:
b2:76:eb:9e:b5:e5:b5:a8:4d:78:3c:19:ac:8b:62:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:DD:55:CA:6E:51:BB:2E:5F:C4:F4:AE:BD:3C:EE:AE:D1:51:F8
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/gqzdVcpuUbsuX8T0rr087q7RUfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a0:c8:eb:40:3a:39:aa:61:c1:67:fc:00:6d:e5:a8:fc:4a:
79:16:7f:6a:87:4f:4b:c6:54:f2:c4:b1:14:92:56:80:f8:a6:
b5:e4:50:b1:2d:e2:76:cc:c5:a7:4e:91:d7:f6:d5:6e:cd:b3:
a9:32:07:33:2c:25:0d:b4:95:ad:d8:89:c6:1f:5c:dc:df:c6:
5c:59:07:28:23:a6:76:b9:12:4a:56:f6:a8:24:62:78:2a:28:
74:c7:32:7a:db:ef:25:2a:80:3f:e3:79:41:d9:61:16:4a:57:
08:de:05:7e:a5:c6:eb:61:90:b7:32:0e:41:c3:7c:47:ae:ce:
a8:f9:79:d9:06:6b:c6:e3:a9:bb:7f:d8:6a:13:59:7d:41:a7:
01:06:24:86:74:76:1b:cf:9d:df:5b:24:6f:b9:d8:96:7b:5a:
7b:26:58:30:f5:7f:ab:fa:7d:47:a8:9d:02:19:f1:2a:8f:60:
e9:1b:49:65:27:aa:fa:68:d8:ca:87:98:16:28:79:2b:45:69:
a6:6a:59:1a:19:e5:cf:c6:09:1b:fd:72:15:a9:32:ae:e1:23:
ad:95:d2:99:80:e0:5f:c8:be:69:74:99:f3:56:4c:0c:0e:f5:
6b:5d:e2:93:e1:50:7c:7e:c2:0d:86:ff:03:c2:51:22:5b:9d:
1e:86:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:51 2025 by rpki-client