Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GbOZJLPBx36_wT9chMLjKDqFfDA.roa
File: GbOZJLPBx36_wT9chMLjKDqFfDA.roa (raw, json)
Hash identifier: bWOEUQG1n9PNLMfxVS2Mgj1JGsKlBjxGUGgkqrqC3M0=
Subject key identifier: 19:B3:99:24:B3:C1:C7:7E:BF:C1:3F:5C:84:C2:E3:28:3A:85:7C:30
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095BCA4E2A08D38D03CA94AF571BB7A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GbOZJLPBx36_wT9chMLjKDqFfDA.roa
Signing time: Mon 02 Jan 2023 03:45:39 +0000
ROA not before: Mon 02 Jan 2023 03:45:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212118
IP address blocks: 93.171.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:bc:a4:e2:a0:8d:38:d0:3c:a9:4a:f5:71:bb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19b39924b3c1c77ebfc13f5c84c2e3283a857c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:28:9c:5a:a8:60:06:42:81:ef:e9:cd:11:
52:3a:91:99:e7:c4:b7:69:21:cc:48:9d:5e:da:f3:
92:71:d7:81:ff:0e:38:6f:98:6b:b5:87:8e:54:b4:
95:ba:a4:ae:1c:ef:cc:a3:db:5a:7f:53:9c:69:a6:
39:9f:6e:45:19:6d:5f:6b:47:a3:76:f6:c7:5e:3d:
15:5d:80:a7:b4:b8:f6:6e:ab:7d:15:9c:0b:e6:53:
0b:63:eb:c1:bb:4f:89:2a:50:e3:e4:a5:1d:d9:b7:
c0:58:95:e0:01:91:c9:a4:0e:14:b5:28:d8:25:b0:
4a:39:c6:0d:5c:48:34:94:13:23:d7:3f:1d:55:b7:
c4:de:ba:69:96:57:a1:41:89:92:9a:77:02:77:fa:
93:68:36:61:41:fa:8a:ea:0a:82:dc:ed:48:e1:98:
ad:2d:7c:5c:b9:c4:fd:85:fe:54:3e:9b:2f:f7:c8:
19:7d:17:a0:70:7c:36:6d:e6:91:09:8d:61:bf:35:
0c:be:63:19:8f:23:1d:7c:45:7c:07:dc:e7:4b:7b:
e1:8b:b0:f5:0b:7d:95:5c:aa:01:55:d2:7e:a4:f4:
52:f5:e9:db:86:d9:d9:6d:04:71:e0:bb:8b:f0:00:
60:45:04:a8:ff:1c:cf:2d:75:64:c7:e7:22:77:02:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:99:24:B3:C1:C7:7E:BF:C1:3F:5C:84:C2:E3:28:3A:85:7C:30
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GbOZJLPBx36_wT9chMLjKDqFfDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d1:4e:86:65:dd:0c:cd:68:9c:2a:da:be:3b:03:fd:b9:d5:
66:1e:31:35:4e:ba:f9:3c:23:9d:91:51:1f:6b:76:99:38:af:
e8:20:77:a8:67:24:e0:d1:b9:ba:c5:0c:b9:c7:b3:a0:99:10:
1b:b6:8c:d2:57:72:5e:a8:88:2e:cc:21:a3:73:bf:88:2f:92:
c6:90:21:67:22:18:d8:35:6a:68:f6:18:51:af:53:4a:d0:a7:
ee:56:fc:b8:9c:bc:55:8b:04:6c:ea:9f:01:b2:8a:69:ba:2a:
bc:32:96:7c:6b:d8:d2:8c:6b:00:03:2f:d1:34:a6:5b:97:3e:
5d:82:d2:1b:f3:fa:42:c3:0c:20:64:f9:0c:42:18:a9:8d:70:
22:a4:a0:c0:3d:01:bc:32:6b:34:54:9d:3b:c6:21:c4:4f:88:
e9:9e:e3:9f:92:bb:fa:42:79:92:34:6d:6e:9a:a5:14:16:fe:
67:a4:ce:04:59:9c:53:fd:0d:e5:ba:ea:79:25:91:51:24:72:
b2:25:78:a5:a0:f5:86:c3:74:10:25:3e:07:ad:1e:be:1a:2e:
03:70:e0:9d:c5:91:8a:d5:99:a1:2b:ff:12:7e:51:81:c2:f6:
11:b3:cc:18:83:d4:97:b5:81:34:7f:a6:6b:47:44:f8:c8:1e:
a9:d2:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:49 2025 by rpki-client