Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/gQqJELq1-EV3FBRQEAYd71OCUP8.roa
File: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (raw, json)
Hash identifier: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=
Subject key identifier: 81:0A:89:10:BA:B5:F8:45:77:14:14:50:10:06:1D:EF:53:82:50:FF
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 0194266AE1DC70B9B1F234455385182CD4AF
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/gQqJELq1-EV3FBRQEAYd71OCUP8.roa
Signing time: Thu 02 Jan 2025 09:48:46 +0000
ROA not before: Thu 02 Jan 2025 09:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202803
IP address blocks: 193.138.4.0/23 maxlen: 24
193.138.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e1:dc:70:b9:b1:f2:34:45:53:85:18:2c:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jan 2 09:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=810a8910bab5f8457714145010061def538250ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:22:d6:fd:a0:56:69:1f:30:6c:7f:3a:11:
30:ef:b7:4b:14:29:86:ad:4e:89:e0:c9:54:89:6b:
9b:5a:d6:33:e5:ac:1c:22:e4:70:ee:0d:34:70:a8:
63:20:1d:00:d8:e2:32:99:55:d5:88:66:0d:ab:9b:
e9:cc:53:fa:1f:1e:19:dd:b5:92:28:8b:64:9c:6a:
97:c7:00:b6:a1:3f:94:e8:4b:49:97:26:8e:8a:b7:
f0:2f:6b:ed:51:31:c7:5f:28:65:ce:1f:2a:3f:8b:
a6:94:5f:9d:14:6f:28:18:c8:62:21:42:44:9a:24:
5e:a5:b5:4c:a5:c1:eb:55:89:05:41:d1:54:17:48:
d3:9a:b4:45:a9:6a:ac:c7:15:62:46:c7:ad:25:df:
82:cd:1e:82:16:b9:c1:0c:e1:c9:36:e4:61:49:e2:
a0:57:7e:40:bc:79:d3:c2:a3:f7:b7:54:7e:40:91:
8e:99:73:42:93:51:fe:26:c4:66:f8:78:bb:c8:ed:
33:da:22:2f:4a:9e:06:cb:e5:d1:8d:ae:93:d1:d0:
24:4e:0b:46:13:7b:55:fb:d2:52:e6:bb:f7:64:0f:
ea:c5:75:c3:f5:60:69:dc:70:cd:af:e3:06:e7:bd:
65:17:00:0c:55:0c:2e:24:bc:08:9a:b1:84:3f:54:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:89:10:BA:B5:F8:45:77:14:14:50:10:06:1D:EF:53:82:50:FF
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/gQqJELq1-EV3FBRQEAYd71OCUP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.4.0/23
193.138.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:af:78:90:30:da:d5:73:54:03:66:ab:a1:54:63:e7:8a:61:
34:44:a8:a0:4e:f2:9b:a6:2a:39:ae:41:06:ba:44:de:9c:0b:
8e:76:d7:47:d7:28:46:1c:eb:eb:45:9d:19:53:de:50:4a:bd:
9b:b6:09:68:f5:91:a4:1f:b4:51:43:b6:fa:83:76:c5:9a:64:
14:ec:df:33:58:75:57:68:5a:ae:51:c2:4e:ec:85:68:4b:90:
db:8c:c5:90:a3:64:75:8f:8a:7c:71:c8:4b:ab:ed:3b:91:61:
61:37:0e:39:fd:f4:dd:40:45:21:ef:b5:41:39:4f:a6:41:d5:
bb:43:89:a5:79:31:67:97:79:15:fe:0c:60:ee:7f:5e:68:17:
dd:c8:cd:5b:1e:81:2a:c7:7b:44:cc:a3:d5:3f:cc:e1:20:8d:
d5:b7:0a:e6:0f:39:63:e3:ac:65:47:0e:56:84:8f:56:b8:fe:
45:56:3a:16:d8:a2:3b:90:20:4e:5d:46:21:38:80:7a:2c:f9:
86:0d:55:36:41:a6:61:20:b9:1c:19:45:80:70:a8:02:33:4f:
0f:68:41:dc:07:80:01:fb:88:31:ea:54:5d:9f:c1:c8:cd:07:
07:47:80:39:5b:a7:c1:bd:52:6e:0f:15:88:c1:8d:11:46:98:
46:55:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:15 2025 by rpki-client