Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/gwp5niXb2n6kZ0Mq0bpku5SIvP8.roa
File: gwp5niXb2n6kZ0Mq0bpku5SIvP8.roa (raw, json)
Hash identifier: /emCX8fFJ82IKSnaJ3WhnFd0eFSX5hHN32PEtlHldBE=
Subject key identifier: 83:0A:79:9E:25:DB:DA:7E:A4:67:43:2A:D1:BA:64:BB:94:88:BC:FF
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C8B0BCF5BE34A7F43D3B6FC7B907A
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/gwp5niXb2n6kZ0Mq0bpku5SIvP8.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215633
IP address blocks: 109.122.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:0b:cf:5b:e3:4a:7f:43:d3:b6:fc:7b:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=830a799e25dbda7ea467432ad1ba64bb9488bcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:c4:b7:f5:8d:c2:5a:02:aa:03:14:8a:07:
0c:34:5d:d2:3d:9d:12:35:6f:50:56:e7:39:ef:3e:
20:1d:0a:c2:c9:8b:4a:0c:3f:5a:6f:03:08:ce:69:
10:cd:78:a1:22:0c:29:d3:57:48:e1:1a:d9:13:17:
b8:a0:44:27:87:b9:23:23:ff:ee:9f:fe:3f:ac:3b:
e7:a9:1e:f1:a8:36:61:e3:36:08:fa:2a:1b:6b:d5:
67:03:de:4c:e4:7b:71:1d:df:ea:b7:0d:b6:c8:ea:
4d:67:56:95:69:7e:1d:9f:45:50:d0:3c:0b:b2:de:
95:1c:d2:4f:1c:3b:d0:3b:2d:31:44:ad:d6:dd:89:
09:cd:ad:e8:7e:12:6c:b5:04:58:e2:5b:45:11:6b:
52:a0:17:f4:81:45:89:f3:7a:66:6c:38:e7:ac:9b:
db:00:81:8a:f9:01:82:f9:59:b6:bc:bf:f7:f4:66:
6e:17:01:c8:ea:f5:ac:27:0e:74:36:2a:c5:42:65:
8c:ce:5d:76:a4:6d:84:83:42:b9:be:90:56:f7:1c:
51:55:b7:32:b1:df:32:e5:85:8e:13:68:62:6e:35:
19:cc:71:52:b8:21:3d:d1:84:ab:a1:50:58:53:65:
89:91:f5:86:9a:ab:b0:6b:a9:ea:91:63:bb:a3:92:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:79:9E:25:DB:DA:7E:A4:67:43:2A:D1:BA:64:BB:94:88:BC:FF
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/gwp5niXb2n6kZ0Mq0bpku5SIvP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.244.0/23
Signature Algorithm: sha256WithRSAEncryption
65:be:42:a6:6e:04:5c:08:eb:4a:cd:b3:d1:0d:06:f9:da:64:
09:6a:ef:68:84:6a:f0:50:53:3c:65:fd:ba:d2:e9:9f:32:e1:
f6:e1:5b:a1:b0:40:a2:e3:0a:7e:a9:a4:ee:ed:a5:37:85:1b:
b6:02:2f:04:81:d3:cc:ee:73:fb:2d:f4:83:0b:1c:82:16:34:
6e:63:d3:81:0b:f1:c2:ca:55:e9:04:9b:a1:98:77:44:40:3f:
e7:cc:3a:50:62:b7:c4:78:b9:3f:20:b8:f9:a9:7e:8e:8d:1b:
84:54:19:ee:cd:18:c3:d8:3d:a4:61:30:93:19:14:00:b7:ba:
36:de:0f:6e:28:f3:d5:73:99:28:70:93:67:d0:54:14:21:10:
90:dc:54:6b:de:c9:2e:02:7c:31:9c:0a:c1:4b:2d:6f:1d:e9:
98:7b:ee:6c:ea:63:41:ac:93:a8:67:f6:f0:0f:68:e5:e7:0d:
f5:7e:f8:f8:1f:07:ca:44:e9:ab:39:c0:f1:df:0b:c5:d2:31:
49:6f:75:cc:d1:a6:63:12:03:6b:d4:41:af:61:05:ce:a7:88:
b8:58:e8:64:0a:dd:92:db:d7:b8:4b:b9:a4:e8:0b:4a:33:45:
9c:1f:22:09:3a:08:00:87:32:d8:73:06:af:ed:c9:81:25:a0:
36:29:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:54:26 2025 by rpki-client