Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/GYodMieh8Gfbfq2hLI5KhvEaFHY.roa
File: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (raw, json)
Hash identifier: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=
Subject key identifier: 19:8A:1D:32:27:A1:F0:67:DB:7E:AD:A1:2C:8E:4A:86:F1:1A:14:76
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 019425FD4A5EBDAE09BF1228DF634BBE61E3
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/GYodMieh8Gfbfq2hLI5KhvEaFHY.roa
Signing time: Thu 02 Jan 2025 07:49:04 +0000
ROA not before: Thu 02 Jan 2025 07:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 194.33.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4a:5e:bd:ae:09:bf:12:28:df:63:4b:be:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=198a1d3227a1f067db7eada12c8e4a86f11a1476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:0b:29:b2:25:d3:f3:d6:85:7b:d3:e8:d4:
e8:ec:fe:14:36:9f:b0:4f:85:cb:14:fd:33:f1:92:
74:13:75:23:cf:d3:75:33:77:7e:6f:c2:4c:52:60:
d5:ce:ef:f7:fd:ad:37:d1:5a:dd:1e:4d:43:c0:b0:
20:b8:37:8b:56:f8:c9:39:ec:0b:72:2d:f2:b1:3f:
0e:96:de:1f:fa:ba:2a:28:62:d0:65:7d:a1:ab:8a:
a2:6d:03:ff:87:7b:94:10:a0:33:32:e2:be:26:0d:
3b:7c:cf:54:9d:1e:5b:35:d0:88:7b:d4:15:c6:62:
28:09:57:8a:32:76:84:1a:e8:f1:f7:71:4f:62:cc:
99:f7:6d:73:07:0a:e3:0e:56:18:35:1f:83:3a:1f:
d3:4c:6f:5e:c8:a9:65:b1:54:ad:2c:7d:3f:18:0c:
c6:30:41:2f:2f:18:7e:a7:85:29:57:80:4b:34:34:
9d:1a:7b:65:67:22:98:53:73:2c:13:0f:1c:55:ff:
42:05:f9:43:52:e8:01:6d:8c:93:fc:71:30:28:88:
d5:1a:a3:c8:4f:f3:8e:69:d1:a1:fe:71:9d:10:7d:
c2:76:63:aa:aa:55:39:de:d6:20:d1:3b:1d:e1:22:
91:18:4e:be:ca:0a:41:04:88:b5:65:37:96:9a:7d:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8A:1D:32:27:A1:F0:67:DB:7E:AD:A1:2C:8E:4A:86:F1:1A:14:76
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/GYodMieh8Gfbfq2hLI5KhvEaFHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.151.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5f:84:45:cd:ec:5d:f2:2b:a2:1f:50:7c:75:95:7d:c3:13:
13:7b:d2:ec:48:74:ae:86:47:f5:57:64:14:ed:16:7e:d0:b8:
5f:0c:7a:ac:76:d9:0c:17:08:e5:03:44:69:42:80:04:e1:19:
ea:53:63:d7:48:e2:7f:da:45:ca:5b:39:c1:67:ff:e4:e6:34:
b1:2c:3e:af:89:bb:08:3c:33:b3:c9:df:b1:b5:fc:71:b5:7c:
66:0a:dd:65:99:92:f3:73:0c:b3:8e:1f:4e:ca:10:9e:7d:0d:
8f:ba:01:92:9c:ab:65:91:c8:3f:3d:c2:40:d2:a8:e9:88:fa:
bf:53:95:11:da:28:e9:9c:a3:a1:79:d9:b2:94:8c:c7:e2:59:
8e:7d:12:5a:57:1d:58:d3:3d:13:fb:d9:83:fa:fa:e5:76:bc:
15:9a:84:ce:c7:c6:6a:47:0f:ee:2b:6a:a8:ba:9b:b0:fc:a3:
1a:8a:4c:ef:ec:0f:de:02:0a:d0:54:49:b8:1f:0e:c6:47:cb:
36:da:e6:68:c1:95:a6:ea:03:f8:33:df:a5:4d:a7:d2:13:43:
82:7c:20:d3:27:bd:5c:62:1c:03:4d:65:13:aa:3d:bb:b3:7e:
6d:f4:d3:ef:54:41:82:d5:9e:00:e8:58:23:3a:cb:c8:b1:0f:
6f:5e:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:30 2025 by rpki-client