Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/GgSaUOqKN1qNrQgM7YBc4IA4oKo.roa
File: GgSaUOqKN1qNrQgM7YBc4IA4oKo.roa (raw, json)
Hash identifier: D2h17AQiSINz7RvrowJKKe8qQ9VTJ7axSdmx7wHWgwo=
Subject key identifier: 1A:04:9A:50:EA:8A:37:5A:8D:AD:08:0C:ED:80:5C:E0:80:38:A0:AA
Certificate issuer: /CN=823c757e5ffbde563f27a95d6d97a498c312252e
Certificate serial: 1487E72D
Authority key identifier: 82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/GgSaUOqKN1qNrQgM7YBc4IA4oKo.roa
Signing time: Sat 01 Jan 2022 03:01:48 +0000
ROA not before: Sat 01 Jan 2022 03:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43531
IP address blocks: 31.217.130.0/24 maxlen: 24
31.217.128.0/24 maxlen: 24
31.217.128.0/19 maxlen: 24
31.217.129.0/24 maxlen: 24
185.55.16.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
46.18.168.0/21 maxlen: 24
2a02:27f0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344450861 (0x1487e72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823c757e5ffbde563f27a95d6d97a498c312252e
Validity
Not Before: Jan 1 03:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a049a50ea8a375a8dad080ced805ce08038a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:bb:23:13:10:72:45:e3:19:bd:d5:84:3b:
5c:de:63:db:79:87:02:50:ac:9d:28:15:79:4b:56:
71:72:92:f9:12:cc:aa:c0:d9:33:ff:1f:65:5b:80:
78:a8:41:8b:e5:b2:ad:6e:2a:c6:84:c8:f6:5c:4a:
fc:b5:09:ab:5e:00:7d:01:3f:2c:e2:3d:ee:03:30:
bf:41:ea:0c:f4:82:94:7b:ca:20:54:7e:ae:9d:bc:
79:87:80:1f:cd:32:ae:a3:28:71:d9:6a:24:86:52:
c4:06:c9:55:5b:2f:97:e7:dd:ab:1e:3b:a2:96:2d:
59:d3:62:f6:24:7f:c4:0b:82:11:43:7e:58:85:40:
4b:cf:e4:d5:4d:cc:9b:17:3a:65:45:ea:fa:6a:5c:
4e:43:38:50:d0:70:91:6a:6f:ca:7d:b5:71:bf:92:
b2:9b:ce:5a:b0:c7:83:77:5e:4b:de:5a:bf:52:21:
c2:6b:8b:ca:2d:e4:2d:90:83:20:4f:9a:fc:fe:52:
37:6b:d3:8d:40:57:ad:81:aa:76:e1:dc:3c:93:bc:
a3:b2:a8:3b:c8:98:01:e2:71:b6:62:1f:c8:53:f7:
c9:b9:31:03:ed:5b:e7:ec:6a:31:26:dc:8c:76:fc:
60:35:40:4d:60:4e:60:93:ce:14:f7:a4:0c:e1:35:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:04:9A:50:EA:8A:37:5A:8D:AD:08:0C:ED:80:5C:E0:80:38:A0:AA
X509v3 Authority Key Identifier:
keyid:82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/GgSaUOqKN1qNrQgM7YBc4IA4oKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
91.196.184.0/22
185.55.16.0/22
IPv6:
2a02:27f0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:92:a8:ef:11:a6:e3:45:9c:62:95:27:48:4b:68:80:2b:cd:
aa:aa:5d:86:a4:8b:df:83:22:14:bb:0b:61:53:87:96:d4:bc:
e8:a8:01:72:42:08:3f:95:b9:66:d3:92:53:de:8d:f6:e6:4a:
60:18:91:be:f3:ef:00:05:b0:db:79:d8:54:0f:39:3d:0e:8b:
36:cf:db:4a:00:3c:8f:3f:4b:67:de:20:bc:17:74:0a:4f:a3:
5d:52:6b:2a:47:5e:0f:0a:51:63:13:9a:5c:f6:65:c0:c6:44:
51:3a:49:39:cb:b8:c2:49:fb:cd:93:d5:5a:64:89:4c:c6:71:
b6:c8:8c:48:d3:17:d3:05:fd:0b:ef:74:59:33:49:87:a5:25:
16:ed:69:bd:59:0a:9b:8f:f4:60:6c:51:2b:62:d4:70:af:82:
e4:dd:4f:cd:61:2f:aa:65:5f:5c:d8:d6:d5:9a:54:a3:92:fd:
83:52:6a:a4:d3:98:22:c0:33:86:3f:09:8c:fc:12:48:39:41:
49:0c:70:48:cf:8a:33:38:47:ef:07:bc:60:bf:86:ca:72:c4:
b8:b0:c8:c5:3f:b6:e4:2f:9d:e4:f9:ce:66:61:3d:00:a8:41:
7a:a8:46:01:78:4e:03:69:b8:f2:1e:ff:c1:4b:4b:81:51:fb:
b3:52:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:06:33 2025 by rpki-client