Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/GsQQRCHscjcggEgU_eXHMO1sFbE.roa
File: GsQQRCHscjcggEgU_eXHMO1sFbE.roa (raw, json)
Hash identifier: /YJ5MpecwgTbXik6/5fX8jF4ZmNn1OAO9kzdXJTHsXM=
Subject key identifier: 1A:C4:10:44:21:EC:72:37:20:80:48:14:FD:E5:C7:30:ED:6C:15:B1
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70323FFFB17FFF7F58DC730B33999
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/GsQQRCHscjcggEgU_eXHMO1sFbE.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20649
IP address blocks: 213.238.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:03:23:ff:fb:17:ff:f7:f5:8d:c7:30:b3:39:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac4104421ec723720804814fde5c730ed6c15b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:bd:1b:b8:e5:1c:02:36:19:59:51:54:65:
ec:83:8b:9b:80:c7:79:7e:6a:35:cd:e9:27:ad:8c:
fb:7a:b6:aa:51:24:78:fd:a9:54:1a:32:be:a5:97:
16:6a:44:73:2f:fd:a0:49:ff:fa:a8:72:f5:42:56:
7f:dd:4f:5c:bb:80:42:38:1f:2c:2e:de:5f:c4:05:
38:04:f8:8d:ad:58:a8:c6:e7:f2:a1:09:0e:4a:8b:
5e:30:98:3b:d6:38:ec:b4:e0:0b:37:92:fb:74:7c:
44:d3:d1:d3:51:f3:b5:02:59:25:b2:98:73:2d:ec:
a6:cd:1c:64:67:9c:1a:4a:31:1e:58:f6:2e:a0:47:
52:a2:9a:b9:62:f3:02:54:39:a8:8d:c6:09:97:86:
11:20:43:3b:1e:c9:ce:fb:f7:79:10:28:b4:b2:b5:
f2:c1:79:e7:32:af:83:c2:85:32:27:f0:2d:94:cb:
2a:09:9b:09:d0:9c:94:a7:91:f4:dd:f7:61:eb:7c:
4a:36:42:a3:4b:a8:f6:62:b9:fa:a0:b2:db:de:5b:
9e:bd:51:27:8e:03:5f:e6:45:2c:50:14:6f:70:45:
05:b9:dd:5a:1a:df:ec:9e:89:93:0c:72:47:06:5a:
4e:fc:c1:fd:b6:8b:86:f1:a2:9d:87:d7:43:5d:d3:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:10:44:21:EC:72:37:20:80:48:14:FD:E5:C7:30:ED:6C:15:B1
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/GsQQRCHscjcggEgU_eXHMO1sFbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0c:3c:98:d0:37:8f:10:a7:87:51:28:e4:b3:00:be:90:ad:
b0:12:5c:a1:08:27:61:b5:0a:8f:26:e5:a5:b7:a9:4b:90:f7:
46:56:92:8a:be:de:01:21:62:cf:02:c5:65:6e:87:70:04:b4:
cb:d2:67:56:e9:91:5c:d1:f9:21:72:44:c0:11:ae:65:7e:47:
fd:f7:a0:e8:b8:84:b0:7a:e7:14:43:d5:37:94:39:59:08:b1:
d4:0c:9e:3a:83:2d:18:bf:4b:a0:0f:67:5a:15:38:3f:22:d1:
c7:98:c3:22:39:b1:0d:7d:b9:58:cd:b7:c5:73:f1:0c:cf:e1:
1c:f3:50:c3:94:8b:2c:5b:84:c5:3d:13:07:10:9e:6f:ee:54:
04:5a:7c:43:0d:20:75:4d:6d:10:63:16:8c:85:d0:e0:d4:4b:
d6:94:09:b9:97:ea:dd:ad:c5:f2:09:d4:c7:dd:e1:15:34:e5:
fa:28:72:86:a4:9e:79:a0:c5:3c:3b:f9:08:2a:a4:07:cf:6b:
f9:48:01:57:e9:1d:52:f5:78:14:c5:8b:2a:1c:0e:ba:e3:7f:
42:ad:5a:1b:60:38:25:10:60:73:66:62:70:f3:e8:25:90:4b:
4b:b8:02:a9:8a:7c:9b:ee:82:8d:30:82:77:9b:87:ee:fa:5b:
e2:68:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:14:47 2025 by rpki-client