Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GXKOVJMi-iCp79LOL8ZJwypaKNc.roa
File: GXKOVJMi-iCp79LOL8ZJwypaKNc.roa (raw, json)
Hash identifier: Of4MDZISR6b2I1yioSfnZZ7Rf6dyDQpPTcdb0iFgFNs=
Subject key identifier: 19:72:8E:54:93:22:FA:20:A9:EF:D2:CE:2F:C6:49:C3:2A:5A:28:D7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D9CCC9E549AFE27A2A151ADA75A4F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GXKOVJMi-iCp79LOL8ZJwypaKNc.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204890
IP address blocks: 77.67.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9c:cc:9e:54:9a:fe:27:a2:a1:51:ad:a7:5a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19728e549322fa20a9efd2ce2fc649c32a5a28d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:ab:9f:73:6b:b9:ba:1a:52:b3:08:7e:5f:
8e:87:8e:ee:87:f6:07:12:fb:bf:27:0f:a9:30:1e:
18:ca:67:0f:ed:3c:c9:9e:0b:50:7c:2d:35:79:f1:
4c:56:25:cf:31:09:bb:43:ae:56:27:bc:bc:cb:a9:
17:76:fe:fe:a6:30:2f:7e:67:7d:4b:26:83:47:88:
e1:4e:4b:4a:7c:3f:69:a0:81:e9:97:ae:a8:44:9f:
cf:2f:5b:b8:52:7e:1e:f7:46:69:b6:00:80:bd:0a:
c9:1e:76:6b:49:6b:6b:5f:67:b5:0f:70:a5:b1:b7:
80:91:7b:97:d4:d8:b6:d8:d0:26:d2:6c:3b:fc:3e:
dd:0d:db:36:d8:51:92:62:49:0b:79:61:fd:0f:df:
91:28:7f:41:63:6b:e6:ce:0f:87:78:c3:29:c3:69:
1a:8d:fb:24:22:df:a1:d1:bb:c1:07:56:9f:58:6e:
12:4d:46:23:80:96:67:5f:70:b5:0e:5a:d6:0d:4d:
b8:25:44:a5:3d:c3:88:98:ff:f8:0a:05:01:2a:73:
42:19:4f:d1:8b:36:ef:71:9a:77:17:24:88:72:8e:
f0:58:74:1a:ff:19:91:56:d6:e6:0b:1c:99:05:d7:
e7:e5:e1:f7:99:db:73:50:51:36:47:a7:98:70:54:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:8E:54:93:22:FA:20:A9:EF:D2:CE:2F:C6:49:C3:2A:5A:28:D7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GXKOVJMi-iCp79LOL8ZJwypaKNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:09:36:85:25:28:26:ef:53:b0:2d:de:71:e8:7a:94:d6:44:
10:2f:57:0a:4b:92:84:75:ee:56:1b:45:7a:1d:e9:a6:f6:66:
3c:43:79:16:1e:51:63:90:4f:65:97:a9:62:a8:31:60:4f:63:
db:b7:fb:61:1b:8c:cf:3f:c5:53:c3:e2:3a:e2:8b:e3:3e:d1:
80:5f:fc:15:ac:d2:53:94:6b:85:6d:71:5d:4f:75:73:81:4b:
71:4e:84:50:b3:2b:20:cc:66:57:ff:9b:f8:72:f3:c2:1c:de:
88:13:ef:7f:84:32:77:76:a6:a4:13:0a:a9:dc:08:c1:28:34:
d5:ee:31:b7:dd:09:ff:87:23:66:d5:05:4a:0c:3c:1a:bd:cd:
db:cd:a0:dd:66:47:c9:62:99:21:8d:4a:a6:4b:d1:25:32:6c:
17:ec:70:02:10:c1:7f:25:ff:74:c5:ce:c1:af:d6:7e:52:19:
e5:56:7d:7c:1f:cb:5f:a1:50:6f:21:e5:49:2a:f4:72:83:27:
76:d2:bb:69:89:07:a7:9d:21:87:7d:e5:dd:32:37:bd:5b:6f:
ed:ff:6a:68:fb:82:e1:e3:9c:d0:3f:e6:51:c8:e2:66:84:1c:
55:b0:f0:d2:b9:6d:a8:db:7d:2b:35:b1:a5:12:bf:00:ce:ab:
d1:c3:a5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:15 2025 by rpki-client