Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/GubWrSpsvwtlLEae4UHiAsutEoY.roa
File: GubWrSpsvwtlLEae4UHiAsutEoY.roa (raw, json)
Hash identifier: n793IJaZtYb7kFI91vOe99OdY+67voZw84jN5+6OamY=
Subject key identifier: 1A:E6:D6:AD:2A:6C:BF:0B:65:2C:46:9E:E1:41:E2:02:CB:AD:12:86
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 0185730C98786D8A923AC84BAF554C7C778D
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/GubWrSpsvwtlLEae4UHiAsutEoY.roa
Signing time: Mon 02 Jan 2023 15:14:43 +0000
ROA not before: Mon 02 Jan 2023 15:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200852
IP address blocks: 212.46.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:98:78:6d:8a:92:3a:c8:4b:af:55:4c:7c:77:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: Jan 2 15:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ae6d6ad2a6cbf0b652c469ee141e202cbad1286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:ff:39:26:3d:0d:4f:b7:a3:77:b4:c7:a3:
a5:e8:28:00:5d:71:0e:76:49:ba:2b:e5:18:ec:8c:
c9:77:1e:7c:85:6e:01:26:64:8d:f9:0d:e2:1d:55:
a4:75:66:2a:bb:cd:3c:f8:d0:ad:08:7d:d4:d5:63:
dc:49:9d:de:f3:39:f4:90:76:c5:54:d8:a5:53:0a:
08:39:ad:55:b8:e0:82:47:15:78:e8:f3:88:56:2a:
f4:ab:5c:b9:5b:08:c3:5e:90:24:40:06:5f:ff:7e:
45:66:88:a9:70:b4:29:c6:92:83:bb:ed:8b:11:d1:
ba:c3:ff:2c:c3:e3:de:bf:1b:28:21:cf:b6:5a:f7:
b1:10:70:b5:6c:4b:57:16:58:7b:8e:42:43:c5:52:
a2:79:4c:f6:bf:ba:98:da:2a:13:ab:d5:98:91:ae:
3c:65:39:f1:eb:6b:a2:19:aa:33:22:9f:5a:8a:a3:
4a:27:2c:98:3f:ef:11:16:3c:42:93:5d:4f:36:a2:
2d:83:5b:7d:58:9f:b7:3b:86:b2:6c:17:2f:3b:cf:
fa:8b:cc:33:4b:2a:5b:13:29:3d:44:d2:92:9d:dd:
b6:a5:99:7d:c4:ea:df:fa:cf:ba:3a:25:e1:11:8b:
67:bb:96:93:48:df:de:d6:23:d5:21:08:35:f5:fb:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:D6:AD:2A:6C:BF:0B:65:2C:46:9E:E1:41:E2:02:CB:AD:12:86
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/GubWrSpsvwtlLEae4UHiAsutEoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e9:65:37:52:79:65:62:65:52:67:a0:e4:2c:b4:bf:30:2f:
f8:10:ee:36:82:02:53:8f:c4:ac:b7:b3:0a:5e:43:3a:eb:de:
92:f2:be:bf:82:8b:79:3c:0d:0e:44:7a:8d:83:51:2c:5f:8b:
2c:24:b1:a0:ab:25:78:9a:f2:58:e6:e2:b3:c1:64:48:b1:b8:
94:40:85:7c:eb:3e:e5:e6:63:ea:f8:3d:f2:a2:d4:d7:3d:0a:
e6:0c:2f:ff:8b:bf:33:04:11:7d:c9:f0:38:1c:64:d2:ae:8b:
bb:88:96:90:a1:f6:3b:75:dd:73:df:b7:31:de:ed:78:37:37:
b3:1b:6d:33:e1:e7:1e:c5:16:7d:dd:6c:d7:a0:d2:36:5a:d7:
6b:30:bc:1b:3b:22:a7:ce:ac:c9:1b:68:de:ac:ed:e9:03:db:
12:9d:03:03:5a:4d:7c:5d:4b:08:da:02:fb:b7:df:d0:40:3c:
c3:fb:ed:07:2f:c9:96:25:70:2f:b8:44:ba:ea:2b:29:9e:d2:
8e:34:b5:de:6b:a7:cb:c6:d4:53:87:9f:54:40:7a:07:9b:a9:
ad:26:f6:04:d0:3d:96:91:ed:0f:e8:25:c8:82:d5:00:42:7a:
66:e2:db:94:ca:75:c6:11:83:2f:17:4c:3d:d0:59:f6:e1:2a:
01:32:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:11 2025 by rpki-client