Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/gjJFL-VdxWl-RA6Y1Z132cKTLlA.roa
File: gjJFL-VdxWl-RA6Y1Z132cKTLlA.roa (raw, json)
Hash identifier: TPomTGVwiDbp1QKkgAELMUdLCBjOP6Zi1Gwg+zuHYpA=
Subject key identifier: 82:32:45:2F:E5:5D:C5:69:7E:44:0E:98:D5:9D:77:D9:C2:93:2E:50
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 0FA1130E
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/gjJFL-VdxWl-RA6Y1Z132cKTLlA.roa
Signing time: Sat 01 Jan 2022 02:53:55 +0000
ROA not before: Sat 01 Jan 2022 02:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5394
IP address blocks: 81.29.184.0/21 maxlen: 21
81.29.180.0/22 maxlen: 22
194.183.0.0/19 maxlen: 19
77.39.224.0/20 maxlen: 20
77.39.224.0/19 maxlen: 19
194.183.16.0/24 maxlen: 24
77.39.240.0/20 maxlen: 20
77.39.160.0/19 maxlen: 19
77.39.160.0/20 maxlen: 20
77.39.176.0/20 maxlen: 20
195.250.224.0/19 maxlen: 19
195.250.224.0/24 maxlen: 24
195.250.232.0/24 maxlen: 24
217.72.96.0/20 maxlen: 20
195.94.152.0/24 maxlen: 24
195.94.160.0/24 maxlen: 24
195.94.128.0/18 maxlen: 18
194.79.208.0/20 maxlen: 20
213.233.27.0/24 maxlen: 24
213.233.32.0/19 maxlen: 19
213.233.36.0/24 maxlen: 24
194.79.192.0/20 maxlen: 20
194.79.192.0/19 maxlen: 19
213.233.0.0/19 maxlen: 19
213.233.0.0/18 maxlen: 18
2a02:688::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262214414 (0xfa1130e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Jan 1 02:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8232452fe55dc5697e440e98d59d77d9c2932e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0f:a1:08:8d:e2:b1:33:86:0c:d5:56:7a:30:
a3:17:d3:2e:4c:f6:4c:03:99:dc:af:43:aa:8c:30:
37:c0:56:e2:39:61:43:cd:87:c7:51:21:4a:c7:d8:
29:d6:fc:90:b1:ff:bc:5b:d3:06:7e:39:d9:29:fa:
0f:16:8e:b2:95:ec:b7:a4:27:42:bf:6a:f4:bf:51:
84:18:a1:9f:19:ea:1c:4a:0e:24:2f:7c:30:8f:89:
2b:70:fc:33:c8:fd:3c:b8:d3:05:fb:bd:84:64:6a:
79:d7:b3:9d:1d:03:8b:dc:d0:9a:85:09:b5:fe:f9:
5c:77:9a:9c:ab:ed:2b:bd:ed:55:5b:d4:18:b2:cb:
ff:c1:82:2c:86:2d:a4:cb:a5:15:f2:3c:3c:f8:9e:
30:54:62:8f:a6:77:0f:70:ee:2d:26:b8:22:7e:d4:
a5:0b:1f:d8:02:cc:d2:a9:fb:cb:f3:7c:aa:bf:4d:
f2:ec:b0:22:39:51:2a:bb:32:86:41:68:a4:3b:ba:
a1:9a:7e:97:36:35:7e:58:44:7c:96:67:20:7b:1f:
4a:61:be:e5:e0:57:a9:11:4d:9d:d3:2b:3e:f3:99:
2c:f8:43:cb:fe:41:7f:82:77:fc:37:1f:b1:b5:50:
7d:40:3a:86:13:71:5b:7a:19:3b:46:80:e9:46:f4:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:45:2F:E5:5D:C5:69:7E:44:0E:98:D5:9D:77:D9:C2:93:2E:50
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/gjJFL-VdxWl-RA6Y1Z132cKTLlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.160.0/19
77.39.224.0/19
81.29.180.0-81.29.191.255
194.79.192.0/19
194.183.0.0/19
195.94.128.0/18
195.250.224.0/19
213.233.0.0/18
217.72.96.0/20
IPv6:
2a02:688::/32
Signature Algorithm: sha256WithRSAEncryption
08:4b:c4:d3:5c:cd:41:ce:a3:aa:e6:70:83:02:41:20:2f:4f:
aa:af:6d:a4:0e:9a:d6:23:cb:ef:38:84:c5:5b:34:1c:1d:0f:
59:ac:00:b9:e5:55:5a:82:8e:30:ea:6d:99:1b:92:5a:0e:3f:
ff:47:44:bf:97:6e:23:1c:30:c1:cb:e0:e8:81:c4:b9:4b:d2:
ad:71:99:47:9c:f2:e6:96:39:bf:06:d6:81:c6:03:13:08:ba:
05:a8:f8:92:be:bd:12:68:75:ba:68:3e:e1:98:0b:fa:85:06:
e2:6a:b4:9e:c4:67:ce:f0:75:f1:f3:b2:57:e2:a9:49:7e:d9:
be:2c:7c:12:c5:20:b0:88:80:93:b7:2f:7a:2a:cf:68:cd:68:
89:6c:43:3e:0a:ff:0a:95:03:e0:81:ee:7b:81:6d:3f:e8:0d:
22:88:44:cd:ff:38:ff:b0:e2:e2:48:e8:4c:f6:b1:68:09:79:
cb:1f:bb:48:66:42:2e:e4:60:e1:79:5f:bf:5c:00:40:f9:00:
30:33:a3:af:21:0c:ed:63:40:48:2f:28:11:10:f9:34:af:d1:
20:18:52:1f:f6:06:8e:82:a9:74:00:3a:d4:ca:78:9d:44:c3:
a6:fa:67:73:68:ac:96:9c:70:45:d2:8e:9d:62:bf:27:75:ce:
b9:39:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:06 2025 by rpki-client