Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/Gu_0Ohrc92-n2PdFrG0Y0d1hnSk.roa
File: Gu_0Ohrc92-n2PdFrG0Y0d1hnSk.roa (raw, json)
Hash identifier: hwVaiYGbd2YOEDFAX1JbOdN7x3CJU0AbYTKOdDy5R0w=
Subject key identifier: 1A:EF:F4:3A:1A:DC:F7:6F:A7:D8:F7:45:AC:6D:18:D1:DD:61:9D:29
Certificate issuer: /CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Certificate serial: 01856C25D33181C50D21680C8FA57EF6EB47
Authority key identifier: 6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/Gu_0Ohrc92-n2PdFrG0Y0d1hnSk.roa
Signing time: Sun 01 Jan 2023 07:04:56 +0000
ROA not before: Sun 01 Jan 2023 07:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:d3:31:81:c5:0d:21:68:0c:8f:a5:7e:f6:eb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Validity
Not Before: Jan 1 07:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aeff43a1adcf76fa7d8f745ac6d18d1dd619d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:b1:85:38:88:d6:b8:b9:e1:b3:e2:b6:83:
e4:be:27:27:04:6e:cf:11:ce:a6:6c:cf:9e:86:4d:
22:32:d2:90:ff:2c:6c:d1:d8:11:b1:6a:73:2f:f4:
9a:ce:e2:fb:71:2a:59:a5:73:bd:75:49:a7:ed:89:
fb:df:31:2a:e0:19:07:3c:7e:d5:76:df:b8:96:9b:
88:e7:80:96:d5:a1:58:96:50:a1:d6:52:f7:1c:68:
41:01:21:36:71:ed:3b:2b:2e:8c:bd:d6:43:32:6f:
8f:71:aa:dd:59:4b:de:26:ca:2a:07:24:04:f7:92:
56:2a:7b:c9:30:f3:10:f1:9f:8b:c7:c0:75:56:ae:
4a:ef:97:09:67:3f:72:b2:0c:fd:07:29:7d:d6:98:
98:47:09:02:94:e7:d4:cb:a3:18:75:69:25:17:e7:
d5:86:2b:6a:4d:ea:cf:34:53:ce:d6:25:2b:c1:7a:
c6:91:2e:65:a6:f4:b5:a7:db:b8:00:1e:57:76:80:
f8:00:45:2d:0e:c0:0b:ea:c7:3a:1c:fd:6f:a9:37:
f8:f7:92:83:3a:08:6b:f3:14:92:b4:fc:05:d1:ce:
34:9c:3f:c9:51:07:b7:21:d1:e7:2c:11:2e:2f:a4:
87:e5:c0:87:46:22:3f:ad:07:53:22:ed:6a:4b:75:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EF:F4:3A:1A:DC:F7:6F:A7:D8:F7:45:AC:6D:18:D1:DD:61:9D:29
X509v3 Authority Key Identifier:
keyid:6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/Gu_0Ohrc92-n2PdFrG0Y0d1hnSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b1:34:7e:5a:71:9c:68:b5:05:f6:39:27:2d:bb:22:ab:af:
b4:37:e6:40:59:e6:5d:4c:1f:17:5f:8b:23:d8:5b:e4:d9:a8:
95:be:3c:31:a1:af:29:cb:fd:83:03:f4:df:55:92:09:a1:34:
5b:c1:5a:c9:30:80:68:91:fd:98:10:b6:4e:88:3e:eb:8c:d3:
8a:11:9d:9e:eb:fb:3a:bb:9f:15:99:75:54:53:d9:de:85:2f:
16:a3:6c:ea:0d:22:fc:44:0d:45:e1:45:21:41:ed:35:fe:8e:
a4:50:96:96:77:97:50:75:e9:e5:48:a8:d8:34:5c:6c:f5:9c:
d3:6f:6d:a4:56:79:26:51:ef:5f:78:76:82:dc:22:85:d6:31:
29:f1:23:c6:88:d0:ed:a7:29:33:c6:c1:a3:2c:80:27:72:ac:
ca:3b:12:dd:59:96:5b:ae:ec:36:49:71:3b:24:8c:06:08:45:
03:b4:70:1d:0c:c5:ac:2e:d1:d2:03:2b:7a:29:e8:f3:f3:09:
59:68:65:11:1b:9d:ad:82:cc:2c:0e:6a:90:77:51:8c:d1:20:
fe:61:c8:5e:e4:3c:c3:1d:ea:60:51:54:70:5f:82:99:e8:81:
aa:96:6a:f4:21:56:1c:b8:3b:9d:c4:ce:52:df:51:fb:f3:61:
9a:0f:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:15 2025 by rpki-client