Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/GP_ZbjZDpTJnCxO4Rw4h-aAv7a8.roa
File: GP_ZbjZDpTJnCxO4Rw4h-aAv7a8.roa (raw, json)
Hash identifier: 9DN4Y7iAqqwcXDoghhhKiaskaDt8xEMGOOsQ9ZLuMIk=
Subject key identifier: 18:FF:D9:6E:36:43:A5:32:67:0B:13:B8:47:0E:21:F9:A0:2F:ED:AF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CD182EF98DF9862FC3BA8476D53C52DB3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/GP_ZbjZDpTJnCxO4Rw4h-aAv7a8.roa
Signing time: Wed 03 Jan 2024 22:47:48 +0000
ROA not before: Wed 03 Jan 2024 22:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 79.172.224.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
213.181.217.0/24 maxlen: 24
213.181.218.0/24 maxlen: 24
213.181.216.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
79.172.192.0/24 maxlen: 24
79.172.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d1:82:ef:98:df:98:62:fc:3b:a8:47:6d:53:c5:2d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 3 22:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ffd96e3643a532670b13b8470e21f9a02fedaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:d7:d3:b2:59:61:a5:55:05:26:e0:43:35:
63:ac:05:10:90:2b:59:63:87:a5:dc:c3:84:a4:81:
fe:ec:cb:94:f0:c5:09:e3:d6:d1:ac:e7:50:3b:af:
b0:cb:29:35:c3:1d:08:57:a7:2d:b2:e6:ef:09:50:
3d:5a:32:bf:89:07:b0:01:4f:ad:3f:f5:3b:69:87:
89:f6:15:c9:6e:04:ea:80:90:8f:c2:7e:63:19:27:
22:d7:6c:a4:59:e1:ca:d1:71:52:d8:93:29:97:ce:
06:ba:6c:e7:c3:69:fb:d5:16:e4:49:af:0b:74:42:
8a:86:f3:6a:1e:39:c5:34:52:71:da:dc:d1:6c:63:
e6:16:af:5a:68:97:de:48:58:77:62:d6:ea:72:a7:
40:35:e6:e6:a1:2c:dd:59:b5:37:7b:60:74:60:1f:
06:05:22:86:97:be:e8:8a:80:f6:21:ae:cc:3b:ec:
86:7e:1f:32:75:83:15:9a:6f:fa:23:1e:3d:dd:c9:
2c:a6:05:6b:8d:94:51:7d:44:e1:00:8d:a3:ee:ab:
1f:f8:0e:b3:00:7e:71:e8:52:7c:c8:fb:e0:2e:af:
f1:e0:84:ba:1d:21:ab:68:72:01:17:5c:43:ce:d2:
a7:b3:e6:51:b4:f4:32:b6:f5:2b:8a:ba:a2:64:f2:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:D9:6E:36:43:A5:32:67:0B:13:B8:47:0E:21:F9:A0:2F:ED:AF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/GP_ZbjZDpTJnCxO4Rw4h-aAv7a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
79.172.207.0/24
79.172.224.0/24
79.172.228.0/24
213.181.216.0-213.181.218.255
213.181.221.0/24
217.144.59.0-217.144.60.255
Signature Algorithm: sha256WithRSAEncryption
7b:7a:0e:1b:3b:29:12:ef:c4:48:e6:71:90:b2:b2:2a:f1:b5:
40:8b:9f:84:4d:b6:c5:80:bd:fe:ef:3a:5e:e9:5a:a9:b7:36:
f3:61:9e:66:71:04:10:b1:d4:dd:bd:52:56:66:39:95:82:3b:
d9:a2:22:86:a8:9a:9e:af:20:81:80:3a:e5:a6:5a:a8:c0:79:
fe:dc:b1:7a:a4:cd:1c:5f:bd:af:89:f4:f0:d0:51:74:3c:92:
15:68:31:c1:5a:de:9f:26:eb:fb:0e:bd:5e:7e:99:7e:4b:25:
6b:84:33:b1:05:9c:bc:d4:d4:00:1b:49:77:bc:32:df:be:06:
be:e2:f8:0a:ff:56:b4:80:88:11:59:90:b2:a2:7b:8f:6b:3a:
b3:bf:0a:86:e7:28:c9:2b:0b:9d:f0:95:1a:bd:a2:91:1e:fd:
95:72:af:03:23:b7:56:e5:45:2a:28:c2:6c:e6:3b:06:2d:ca:
ec:10:c2:d4:e1:60:23:c9:24:b9:fd:7d:26:ef:f7:d9:33:90:
57:44:2f:91:3e:39:c2:41:d2:0c:e0:6a:da:28:ad:e1:23:ae:
a2:ee:c4:43:41:b4:d4:df:e8:30:31:d0:ff:7e:fa:76:6c:90:
e1:25:eb:4f:60:59:3e:f9:00:e0:ae:08:21:56:d9:74:ca:43:
12:44:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:48 2025 by rpki-client