Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/GWpwzd8qmyoEUkPBFPX--GdbtEI.roa
File: GWpwzd8qmyoEUkPBFPX--GdbtEI.roa (raw, json)
Hash identifier: 9fXVvcMIDq3eW1xQvNIcZK/FydH1K3x1xsFLTnAajyY=
Subject key identifier: 19:6A:70:CD:DF:2A:9B:2A:04:52:43:C1:14:F5:FE:F8:67:5B:B4:42
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 131F8E88
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/GWpwzd8qmyoEUkPBFPX--GdbtEI.roa
Signing time: Sat 01 Jan 2022 11:56:21 +0000
ROA not before: Sat 01 Jan 2022 11:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200852
IP address blocks: 185.93.199.0/24 maxlen: 24
185.93.196.0/22 maxlen: 22
185.93.196.0/23 maxlen: 23
185.93.196.0/24 maxlen: 24
185.93.197.0/24 maxlen: 24
185.93.198.0/23 maxlen: 23
185.93.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320835208 (0x131f8e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jan 1 11:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=196a70cddf2a9b2a045243c114f5fef8675bb442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:3b:35:63:55:9d:e6:bf:33:c3:e6:1a:2f:
7a:f6:61:9e:78:4b:13:3a:f8:fb:2d:82:f3:c4:82:
8d:a5:97:92:d0:1e:4e:70:9f:1e:db:2f:df:45:ae:
25:8c:28:94:94:e4:dc:42:79:8a:95:ae:ee:b2:49:
7c:00:72:ec:c2:c0:d0:29:dd:eb:90:9b:82:9e:9d:
ff:89:75:0c:af:ee:02:dd:50:84:ff:e8:35:fa:98:
46:c1:a4:71:ee:40:08:06:05:ba:02:62:27:f8:2f:
e2:04:31:d8:9e:23:18:ed:e7:be:af:97:14:9e:37:
e2:66:60:b1:8f:8e:e4:1c:04:f8:07:03:18:74:fc:
30:72:bc:f5:85:7d:a7:d0:63:53:40:8a:f9:b8:41:
b4:d8:74:a8:f7:53:1e:ee:4d:0b:a2:78:88:d0:13:
46:bb:93:8d:9e:77:e7:a3:2e:9e:fe:fd:e5:a6:d9:
e5:89:83:ce:04:a7:20:82:9e:9a:eb:8c:32:84:c6:
e0:2b:89:e9:ab:6d:89:2a:fc:a8:b1:38:b4:2c:5a:
33:47:54:1b:5b:0d:e7:8a:ce:12:c2:96:cc:ec:b3:
8c:b0:b0:4d:fb:26:02:ed:d6:6e:73:29:ab:95:14:
c9:a2:85:f9:d1:15:0e:1d:14:f9:98:03:ed:89:f2:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:70:CD:DF:2A:9B:2A:04:52:43:C1:14:F5:FE:F8:67:5B:B4:42
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/GWpwzd8qmyoEUkPBFPX--GdbtEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:1b:08:de:8a:86:d3:7c:a0:45:26:3b:bc:9f:48:aa:03:b1:
d3:2f:23:4a:f7:aa:01:dc:d9:ee:65:62:e4:20:96:9f:57:a8:
e6:a2:cd:c7:d6:5f:11:7a:c9:0e:e2:39:96:85:52:af:e7:a5:
00:3f:4a:8c:c0:99:f3:83:63:82:bf:29:dc:6e:c6:53:a2:07:
1d:63:6d:ea:a9:2a:80:e3:b4:b7:5c:07:10:d4:c3:c5:b6:4d:
e3:a6:dc:cc:a4:9a:5b:9c:dd:cb:75:bb:cb:3d:36:b6:22:85:
45:df:75:6e:2c:71:33:c6:80:28:22:f7:82:a8:f5:68:d8:98:
5f:d1:c9:c5:d3:9c:bd:66:98:b9:f2:1e:43:d9:26:c1:e4:2a:
50:8f:8c:8d:96:d4:47:8d:2b:db:5e:3e:ab:68:0e:9a:f5:ef:
a5:5a:6c:26:7c:a0:51:6a:b9:f7:dc:bb:b2:26:61:62:ff:0a:
b3:8f:cb:ba:7b:09:58:bf:b0:87:39:d2:ff:a7:e5:6f:2c:d6:
26:c4:0c:ed:92:46:df:38:d1:9d:08:b7:3f:a4:a8:7d:73:4c:
e8:94:16:23:10:86:75:ad:2c:93:eb:51:77:4e:4f:a2:85:b0:
fb:cb:da:e7:c9:72:a1:10:f5:57:63:50:04:3c:fb:05:6c:ed:
6e:bd:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:32 2025 by rpki-client