Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gWN0YMhA97UPOTqYvOMM9zaPWRs.roa
File: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (raw, json)
Hash identifier: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=
Subject key identifier: 81:63:74:60:C8:40:F7:B5:0F:39:3A:98:BC:E3:0C:F7:36:8F:59:1B
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF242F8C263A0F9DEE7DF043B5F75
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gWN0YMhA97UPOTqYvOMM9zaPWRs.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24984
IP address blocks: 194.176.60.0/24 maxlen: 24
195.12.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f2:42:f8:c2:63:a0:f9:de:e7:df:04:3b:5f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81637460c840f7b50f393a98bce30cf7368f591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:f7:60:31:38:44:25:6f:76:57:b0:8a:83:
91:2f:0a:40:3c:09:26:5e:40:a7:51:99:51:dd:37:
80:8a:96:74:12:52:79:bc:28:b5:c8:79:7d:35:b2:
7d:53:5a:4f:6d:88:31:0d:0d:9c:fd:62:94:67:32:
ad:f0:2f:e2:2c:9d:43:cf:42:10:da:1b:4f:2a:95:
a2:62:7d:75:a2:54:44:e4:cc:ea:1f:9c:44:67:dd:
1b:91:d6:78:75:20:43:a6:4d:f7:fe:06:47:cb:4e:
26:64:77:fb:ba:ed:9b:54:4b:2a:30:a0:a0:0f:38:
a5:1b:ad:a5:29:d4:f8:4b:f2:08:40:2e:e5:63:be:
6c:28:79:c7:ae:73:3c:c0:c0:c0:9f:b7:f2:30:d6:
0c:b8:95:46:24:9d:f9:1b:34:da:75:f0:25:13:cc:
98:0d:4a:38:ff:e4:3b:b9:04:b0:fa:de:a8:c2:d1:
3e:56:b5:8b:a3:6e:80:f5:da:a2:c6:42:b7:44:07:
78:82:e1:b6:18:ec:07:88:99:4c:ac:b5:ff:ee:ae:
c2:3c:82:3b:d8:ca:cf:66:c7:8d:2d:be:00:63:27:
6a:49:69:95:56:c3:2d:63:0b:92:46:61:68:10:96:
28:cf:4e:95:b8:d0:c4:71:76:48:27:6f:43:50:9a:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:63:74:60:C8:40:F7:B5:0F:39:3A:98:BC:E3:0C:F7:36:8F:59:1B
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gWN0YMhA97UPOTqYvOMM9zaPWRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.60.0/24
195.12.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a6:dc:98:cd:71:17:1d:93:a5:68:a9:f4:23:72:fc:53:d9:
3a:58:be:5d:1b:b2:80:d9:a7:72:56:08:ce:b9:a0:c3:da:e4:
39:c1:ce:18:6e:04:d0:39:0a:20:06:10:d6:d1:96:02:02:ff:
19:09:df:8b:f7:89:d8:3a:b5:8d:c0:e9:0b:28:61:96:5f:f1:
98:67:c3:18:45:62:6e:c1:b1:9b:f4:74:30:cf:c0:13:02:e2:
a0:bf:56:c9:fa:70:66:6e:19:78:31:1a:06:db:9e:a9:4b:ed:
97:ef:f3:79:83:d1:81:a1:cd:f0:a9:ff:80:5d:d7:37:ff:00:
e7:1f:84:22:74:1c:c0:31:84:5c:91:3c:9c:7f:76:45:56:94:
bb:ba:c7:b0:d2:7b:bb:79:68:4a:96:34:f3:14:57:65:75:3d:
1e:c0:9a:f6:b5:dc:81:3c:a9:ae:09:f1:8f:05:9f:ee:03:02:
4f:0c:58:8b:62:f5:4e:33:4a:e3:7e:98:bf:87:96:ef:cd:75:
68:29:70:12:35:86:14:59:92:fc:6d:e4:7b:3d:ed:1c:07:c8:
6a:ef:22:ea:ea:71:67:8e:e9:ab:11:0d:ad:40:e4:9c:37:da:
da:dd:c5:f0:e9:3e:c6:1a:ec:f3:57:c7:57:91:98:05:3b:e6:
28:63:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:11:24 2025 by rpki-client