Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa
File: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (raw, json)
Hash identifier: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=
Subject key identifier: 82:FC:A0:08:94:4D:89:98:C0:CC:50:87:CC:51:21:F8:9B:E7:F2:9E
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207CC7883A0F9189B43391AD8950C8
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa
Signing time: Thu 02 Jan 2025 03:47:53 +0000
ROA not before: Thu 02 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198294
IP address blocks: 84.47.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7c:c7:88:3a:0f:91:89:b4:33:91:ad:89:50:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82fca008944d8998c0cc5087cc5121f89be7f29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:6b:a9:92:a0:52:00:26:93:8a:25:c1:4d:
34:84:6f:30:7e:d9:b2:d0:8a:d6:dc:b4:aa:bc:2e:
55:d9:a8:b1:ac:c7:80:aa:a8:c1:9a:8f:a7:2b:4d:
04:ca:2c:9d:e0:d7:a5:4a:a2:39:09:eb:73:7c:6b:
70:94:7a:2e:b7:84:e2:b7:e0:ce:bd:c9:ce:e8:34:
8c:ae:df:c6:fb:d4:5a:ad:46:e7:aa:a7:ad:5e:59:
73:12:d9:3b:0a:41:47:f7:ad:fc:04:6d:c0:f7:0c:
10:b8:86:b1:dd:a8:9c:e3:68:41:7c:57:76:6b:a4:
02:dd:0e:43:fd:ce:7b:2f:e7:6f:f8:f6:b7:90:5e:
cb:79:a9:f3:2f:c6:be:d1:f7:82:20:51:d3:82:b5:
19:e2:f1:fb:0f:63:2f:8d:43:5e:10:a6:4b:37:01:
2b:36:5b:c1:9d:f0:ee:63:17:e8:aa:8c:af:d2:db:
fc:b4:cd:ba:0f:55:66:db:11:4c:fb:8d:14:94:d3:
5d:c3:c2:23:a2:19:fe:8c:92:36:30:71:11:5c:f0:
f1:60:d0:f0:83:51:ad:e6:2b:a9:e9:ca:79:5a:ed:
ff:7b:1f:b7:24:cb:f5:86:c0:ce:4b:af:86:57:7a:
ed:e3:42:a4:71:c3:19:f0:40:0e:f8:fa:3c:a4:bd:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FC:A0:08:94:4D:89:98:C0:CC:50:87:CC:51:21:F8:9B:E7:F2:9E
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.181.0/24
Signature Algorithm: sha256WithRSAEncryption
34:34:b4:eb:b6:9c:01:33:c5:ea:50:08:b3:c8:ac:d6:39:7d:
86:7b:cf:51:98:f5:21:23:78:2a:ee:02:f3:a2:29:7d:4d:73:
8f:26:23:d6:ee:95:55:9d:ed:da:17:d2:02:51:48:e6:d7:f1:
1e:7a:8e:66:f2:d1:4f:6d:d5:cb:27:96:db:6c:2d:b1:20:15:
8e:d5:91:89:33:74:ff:fe:04:db:78:43:dc:b3:be:92:4a:35:
d2:22:07:2c:ad:14:28:1b:a6:66:f0:e1:7c:f7:42:2f:03:de:
6a:60:39:2c:bb:81:33:89:9c:73:0b:85:42:59:fc:89:89:7c:
8a:fe:13:69:da:04:64:54:21:d6:a9:95:00:9b:da:72:b2:f4:
7c:9b:f9:e3:5d:20:84:9d:c9:01:52:47:77:44:7d:c1:84:25:
dc:5b:96:80:c8:c0:7a:67:d9:1d:1c:ad:ef:4c:dd:3b:10:76:
4e:13:f5:69:0d:a8:a6:d0:70:e4:bb:05:cf:5c:b3:27:60:f1:
0e:5f:ce:8c:1a:f2:dd:f5:3c:25:28:69:e5:fd:45:6d:21:d3:
7f:06:a0:e5:e9:6b:89:84:fa:d6:fd:8e:a0:af:bf:a6:86:e3:
97:7a:70:e5:1d:a7:25:aa:86:48:4d:af:51:fb:a4:49:0c:4d:
4f:cb:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:51 2025 by rpki-client