Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/gcJogo5IQaYQB_87wgqMuGGyb6c.roa
File: gcJogo5IQaYQB_87wgqMuGGyb6c.roa (raw, json)
Hash identifier: B4sab2Gog+KhfGCkIwn+W5mbGVs8m3t2MKnP7GHKVyI=
Subject key identifier: 81:C2:68:82:8E:48:41:A6:10:07:FF:3B:C2:0A:8C:B8:61:B2:6F:A7
Certificate issuer: /CN=176ded804d7511b4728ca3cc8b1cb7352711abe6
Certificate serial: 018CC64AFBAA131034CBD7CB1EDAC5251886
Authority key identifier: 17:6D:ED:80:4D:75:11:B4:72:8C:A3:CC:8B:1C:B7:35:27:11:AB:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F23tgE11EbRyjKPMixy3NScRq-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/gcJogo5IQaYQB_87wgqMuGGyb6c.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.128.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fb:aa:13:10:34:cb:d7:cb:1e:da:c5:25:18:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176ded804d7511b4728ca3cc8b1cb7352711abe6
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c268828e4841a61007ff3bc20a8cb861b26fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:1c:25:e8:82:33:70:5c:58:48:9e:8e:b3:
cc:d6:80:4d:9f:ac:35:f7:8e:00:a7:8b:0b:c0:14:
9a:e8:82:02:d1:cc:70:c7:9f:25:b3:df:36:49:3c:
d6:25:be:a8:4d:4b:61:7a:dd:5c:78:c9:ce:2f:32:
7a:b2:e8:d9:5f:95:85:c4:a0:2c:7d:f3:5f:1f:42:
13:f6:2d:06:be:40:c5:09:99:00:29:21:6e:ba:e5:
b8:22:1d:c7:82:80:c6:dc:6b:c1:0f:0d:c6:67:19:
f3:f1:06:6d:37:80:4a:79:00:10:cc:1b:ac:82:5b:
d8:d6:46:e4:f0:a4:5d:b3:cd:e5:44:9d:19:76:fc:
d2:5a:0f:ee:7d:81:af:37:ba:8a:77:3b:d1:98:00:
cf:66:4e:e1:66:05:81:76:6d:f0:bf:bb:d7:5b:20:
73:bc:a1:d7:10:29:6c:87:65:34:8b:c6:28:fd:40:
cc:d8:2c:04:1f:44:26:97:9d:d0:7a:e7:98:c7:f5:
f7:91:c4:f1:54:b5:9c:d0:ba:c0:71:d4:59:84:4e:
43:db:e4:13:58:0b:14:99:94:97:7d:73:af:f7:2b:
ab:5d:ab:37:60:b1:18:ee:3e:63:3a:02:41:b7:42:
31:db:88:62:81:f7:71:b9:49:32:68:50:1f:f0:f1:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:68:82:8E:48:41:A6:10:07:FF:3B:C2:0A:8C:B8:61:B2:6F:A7
X509v3 Authority Key Identifier:
keyid:17:6D:ED:80:4D:75:11:B4:72:8C:A3:CC:8B:1C:B7:35:27:11:AB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F23tgE11EbRyjKPMixy3NScRq-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/gcJogo5IQaYQB_87wgqMuGGyb6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/F23tgE11EbRyjKPMixy3NScRq-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.224.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:b5:23:1e:b1:42:b7:5c:98:33:8c:a1:f9:0a:eb:14:fe:51:
87:fa:bb:ff:17:ee:74:8f:e4:1b:85:79:90:ef:34:15:e9:a0:
34:ea:fd:4f:f5:b0:a4:28:a3:00:98:6d:97:e8:8c:66:c2:be:
ec:60:c9:7e:41:ff:63:81:6c:35:dd:33:2d:93:35:fd:7f:14:
2c:ea:28:d6:1e:2f:d0:19:3a:de:12:40:32:80:15:4d:a8:b4:
5a:83:f0:b6:ea:7b:0c:ca:f5:5b:1f:ec:75:52:ea:14:ce:15:
df:8c:b7:37:2e:dd:24:83:fe:eb:a7:8a:26:a8:cd:8b:73:52:
8d:9e:2d:03:fe:1a:25:89:9f:d9:59:4a:a3:0f:f4:31:bd:99:
5e:2e:7f:e7:83:31:e3:cc:f5:38:cd:50:cf:3b:08:2e:79:23:
57:00:41:6e:50:d6:17:2c:38:67:e4:4f:16:e4:b7:eb:15:4d:
6f:3d:1a:40:bf:7b:25:b5:54:7e:eb:e3:a7:98:f9:a4:26:24:
ff:60:64:83:74:38:83:fa:22:f2:9f:6e:49:37:c1:b9:5e:8f:
3c:cf:75:a9:91:e6:50:dd:be:dc:4c:2c:96:67:b5:86:b0:6a:
74:e6:e3:ed:fa:80:64:f0:d1:ef:b2:79:d0:47:90:3e:2d:ba:
1e:a3:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:54 2025 by rpki-client