Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/GqMB-YW4Czpf4WVd1waNgVvkg04.roa
File: GqMB-YW4Czpf4WVd1waNgVvkg04.roa (raw, json)
Hash identifier: 1liYf0h/2XAMKOby/ji2oVSVWgomi76EDdQExMiHFow=
Subject key identifier: 1A:A3:01:F9:85:B8:0B:3A:5F:E1:65:5D:D7:06:8D:81:5B:E4:83:4E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A353BB7CBE45F043813CDBDDB6A6E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/GqMB-YW4Czpf4WVd1waNgVvkg04.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54641
IP address blocks: 109.111.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:35:3b:b7:cb:e4:5f:04:38:13:cd:bd:db:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aa301f985b80b3a5fe1655dd7068d815be4834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:1a:9d:eb:3f:76:3b:d9:5a:54:47:b8:b3:
08:bc:88:e5:dd:fb:e2:23:f5:1a:d9:67:eb:25:c6:
77:b5:29:2d:9f:ec:e2:a0:9f:63:0f:d8:c5:f6:ac:
c8:82:19:0d:77:da:4b:f2:49:7b:d0:03:a4:04:27:
b9:9a:0d:eb:68:c0:76:91:ae:ef:37:d5:ad:25:57:
bb:39:cc:9a:dc:c4:f9:50:65:55:da:ff:88:74:9d:
c6:00:44:c6:35:9f:63:70:a1:5c:e7:c3:39:60:e9:
eb:95:de:ec:0c:f0:ba:d5:94:16:ac:7e:f0:32:1c:
c2:a5:7d:ae:61:4d:30:b7:ea:ce:6b:42:9d:05:08:
7c:e5:1a:97:21:3a:cc:4a:36:30:ef:5e:6b:86:4c:
40:54:b2:8d:d2:57:cd:56:81:3a:48:43:04:6c:d2:
d8:a3:fa:14:49:11:4c:e3:6e:b7:c1:6e:23:e8:05:
5a:b7:54:a4:7b:17:b6:9c:1d:f5:4e:e5:fb:8a:49:
7d:f7:bc:dd:1f:ea:c1:77:60:26:a4:b3:b3:dd:16:
74:bb:4f:ce:bd:a9:fd:9f:50:a2:2e:b6:ce:8a:ff:
8f:b7:00:79:4e:94:ca:0e:09:31:09:da:74:dc:49:
1d:df:4c:d6:92:81:99:29:41:5e:8c:c8:3c:63:8f:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:01:F9:85:B8:0B:3A:5F:E1:65:5D:D7:06:8D:81:5B:E4:83:4E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/GqMB-YW4Czpf4WVd1waNgVvkg04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:a8:e0:92:ed:83:75:85:dd:ec:a8:82:41:49:65:58:c1:c9:
3b:d8:47:3c:f7:5b:0a:ab:06:68:6b:1b:15:c1:a4:45:96:79:
a7:5e:7e:0d:60:94:2d:00:7e:aa:bc:be:c4:e1:36:ee:ad:37:
85:af:4f:62:45:15:0a:dc:d7:bf:9e:23:bb:ab:fc:2d:88:94:
27:55:67:67:83:c6:bc:a5:05:66:76:38:49:c6:c1:e5:d2:22:
72:44:99:e1:e9:d2:4c:35:50:e9:59:d2:b4:a3:42:41:a9:f7:
93:e5:5c:71:e3:94:b3:94:1b:88:cb:15:ac:83:f7:d4:99:e8:
1a:b7:84:84:e0:f9:b2:92:b5:c2:58:8b:ec:58:b5:ab:8b:30:
23:06:c8:3c:86:13:ab:03:ba:77:35:1c:03:77:db:1a:d6:9e:
f3:3f:e3:27:3a:0e:8b:f8:0c:1d:9b:0f:78:e0:34:ca:bb:c1:
8e:c1:34:47:ed:ce:ca:18:3c:fb:3a:c0:11:0f:99:f9:79:38:
21:73:55:00:1c:dd:b3:4f:62:99:c1:30:00:04:b3:19:b7:27:
1e:39:0e:a7:dc:c9:d3:a1:20:e5:68:59:58:d3:fd:ec:64:49:
69:f2:2a:43:8c:e8:55:89:b1:59:51:d5:d4:26:27:1a:88:63:
05:53:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:38 2025 by rpki-client