Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/GP8_YBYF7mzoAtBK3dgbW8PpNVg.roa
File: GP8_YBYF7mzoAtBK3dgbW8PpNVg.roa (raw, json)
Hash identifier: Adan9M0sCORPZBM0M06VPRSh6tc9334owGYoZlOMV5k=
Subject key identifier: 18:FF:3F:60:16:05:EE:6C:E8:02:D0:4A:DD:D8:1B:5B:C3:E9:35:58
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018FAAD51682E0DB0EE6B84DA265844AA559
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/GP8_YBYF7mzoAtBK3dgbW8PpNVg.roa
Signing time: Fri 24 May 2024 13:40:42 +0000
ROA not before: Fri 24 May 2024 13:40:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.15.211.0/24 maxlen: 24
45.86.188.0/23 maxlen: 24
62.68.76.0/24 maxlen: 24
80.94.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:d5:16:82:e0:db:0e:e6:b8:4d:a2:65:84:4a:a5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: May 24 13:40:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ff3f601605ee6ce802d04addd81b5bc3e93558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:52:85:c7:f2:9f:0c:08:c5:3d:72:bb:67:
8d:13:43:9a:9d:65:8e:50:4e:1b:dd:88:5e:c7:57:
3c:2e:8c:ae:bd:7f:26:d3:66:44:3a:03:61:8f:f1:
07:c4:e9:7a:7e:95:6d:3f:49:e0:0a:0e:6c:ac:4c:
72:53:17:7e:7c:3f:81:18:7c:a8:c5:b7:b8:87:13:
83:3b:40:91:ad:bf:5c:cc:fb:b4:41:48:83:82:94:
7e:b1:c7:c3:46:cd:62:ed:c9:be:1d:06:f0:79:bf:
7a:a4:5a:f8:a3:63:a0:62:27:8d:68:e4:4e:9b:89:
27:c2:ae:ec:d7:98:4e:3c:a0:9a:f4:ad:c0:a0:1e:
c9:74:0e:7f:74:81:47:f3:bb:85:ff:ab:87:7b:52:
84:62:3e:29:6d:4c:25:3f:e3:01:c4:e6:08:3f:99:
e1:dd:24:7a:e2:0b:e1:e9:d3:42:03:59:89:63:3f:
bb:80:48:f2:94:ab:bc:95:c5:14:42:61:58:29:b2:
d8:56:86:ef:99:b0:44:c5:93:b9:9d:d9:5e:f7:e1:
c9:82:b8:5b:35:1d:dc:ab:08:90:f6:81:6e:ad:4e:
9e:ad:5d:ed:0d:e0:f2:17:7a:9f:0e:91:fe:9b:c4:
26:bc:7a:4d:55:81:bd:30:d4:f2:fd:bb:6a:bd:5e:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:3F:60:16:05:EE:6C:E8:02:D0:4A:DD:D8:1B:5B:C3:E9:35:58
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/GP8_YBYF7mzoAtBK3dgbW8PpNVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.211.0/24
45.86.188.0/23
62.68.76.0/24
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
32:17:65:cb:37:10:42:0f:f7:c5:ed:af:b6:74:44:70:0e:f2:
a0:a8:b5:50:e8:8e:8b:67:d4:8d:54:75:8c:52:b7:8f:62:05:
ce:4c:fd:e2:ed:d0:dd:d0:fb:b1:19:e2:7b:d3:a6:a2:c8:f0:
87:b6:93:d0:c0:45:b5:74:9c:55:d0:29:a5:54:d5:34:6b:0f:
c1:8b:b3:e6:a6:d4:af:4c:37:ea:f6:97:3b:69:09:ea:16:f7:
a0:7c:7e:a2:e4:11:c1:7d:fb:f3:4c:96:91:33:1b:51:4e:1a:
08:b0:bd:57:22:dc:dd:87:19:29:0c:42:96:40:e8:bc:de:6e:
17:68:49:80:9f:9a:48:fa:ca:13:f9:3d:3f:09:03:10:06:fe:
bb:64:22:23:97:7a:93:25:0e:fc:74:f0:24:77:c7:7f:da:65:
fb:d1:bd:34:33:80:3c:b7:ac:49:6e:57:3a:9e:6e:76:86:ac:
6e:ba:12:44:c9:a7:39:3a:01:0e:2e:d6:63:1e:33:e9:90:bd:
45:93:42:bd:ed:37:9d:0f:69:0b:dd:c2:f5:ca:75:0e:5c:18:
bf:b8:cf:ba:e5:7e:28:59:d0:40:82:08:a4:fd:69:c8:d3:0b:
87:c9:8a:f4:93:28:0c:e0:bd:6a:ff:90:b2:88:fb:32:1c:a3:
6f:02:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:01 2025 by rpki-client