Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GGElDu46D3-NvLVFK7p7vcKCYJs.roa
File: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (raw, json)
Hash identifier: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=
Subject key identifier: 18:61:25:0E:EE:3A:0F:7F:8D:BC:B5:45:2B:BA:7B:BD:C2:82:60:9B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B3887C235920EFBD0326C2B6232F01
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GGElDu46D3-NvLVFK7p7vcKCYJs.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210474
IP address blocks: 213.176.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:88:7c:23:59:20:ef:bd:03:26:c2:b6:23:2f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1861250eee3a0f7f8dbcb5452bba7bbdc282609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:df:c7:67:78:16:c8:d4:34:25:ba:ed:c4:
6b:86:8b:0b:a6:d3:d1:cf:a7:24:dc:df:5e:27:2b:
64:87:04:29:f0:44:79:79:5c:33:76:99:48:01:88:
08:12:38:1a:83:cd:85:38:ac:8f:8b:0c:68:63:16:
1a:b9:2c:ac:64:39:c3:99:f3:b8:ba:50:cf:77:fd:
ed:8e:37:6a:9b:7b:76:20:a1:ac:c5:1c:df:63:d3:
57:da:84:ed:2a:e3:4b:44:6c:c4:9a:77:72:47:84:
72:26:6f:17:ef:cb:b3:4f:84:0e:5e:c3:f3:8f:88:
ac:9f:7b:85:76:20:28:6b:88:00:f1:ac:84:34:d0:
64:50:25:d4:52:7f:fa:de:da:d9:fa:a7:5d:20:ca:
b4:09:9b:00:71:44:96:3a:92:a9:9f:6d:6b:47:a9:
73:7b:53:36:1a:11:03:a7:fa:66:28:fa:c9:79:2e:
cc:09:a6:03:7f:28:0d:4c:b6:81:12:18:8c:a3:ae:
69:e1:c6:7f:8a:45:06:16:fa:75:32:2a:26:cc:41:
6f:7b:3d:68:81:ef:f2:e5:aa:64:97:a2:1f:d1:75:
99:23:e6:7e:5e:17:24:d8:ae:32:ce:37:2c:e5:91:
bc:67:35:fe:f2:4b:5e:45:9b:24:85:81:79:53:2f:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:25:0E:EE:3A:0F:7F:8D:BC:B5:45:2B:BA:7B:BD:C2:82:60:9B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/GGElDu46D3-NvLVFK7p7vcKCYJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:25:13:49:76:4e:25:ea:53:1a:39:ff:bb:28:6d:7e:2f:be:
8e:5a:a6:98:a4:5e:ad:b5:7b:c8:c1:36:f3:48:9d:09:9e:bc:
95:b7:64:19:d4:d8:a9:91:17:2f:0c:97:96:3a:6f:9d:7e:37:
5b:73:d3:ec:15:d6:ea:10:a2:e5:18:50:1d:01:bc:5f:fb:1b:
26:dc:a3:62:c6:ed:b1:56:2f:a5:32:e7:f8:2e:ac:eb:e8:45:
37:3d:59:cf:a6:01:78:61:e8:0c:18:4f:3f:73:5c:28:66:9a:
be:82:11:44:0c:8f:8e:47:b6:69:27:0b:f9:46:7d:97:33:ae:
cf:6b:d5:37:1f:64:79:0b:20:11:5c:99:a9:01:cc:ba:ce:44:
bf:58:30:ef:03:e8:c2:5b:55:f1:94:14:b5:42:b2:2a:64:7f:
37:f0:e8:ad:78:f4:c7:ba:8a:7c:66:32:ae:34:f0:91:92:c2:
0f:59:8a:0f:5d:2e:9c:62:b5:ea:df:82:34:7f:21:63:3a:3d:
3c:22:d1:28:5c:80:23:17:01:ae:31:36:91:ca:ce:4d:65:4a:
fb:59:e8:01:6c:63:24:00:ba:db:5d:08:ea:db:db:44:83:3e:
1d:b2:c2:f1:bb:bf:dc:d2:18:aa:f9:f2:66:4d:ef:0c:cf:53:
57:90:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:01 2025 by rpki-client