Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/GbfU3sLMppEtdewqDLMaWBubw0E.roa
File: GbfU3sLMppEtdewqDLMaWBubw0E.roa (raw, json)
Hash identifier: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=
Subject key identifier: 19:B7:D4:DE:C2:CC:A6:91:2D:75:EC:2A:0C:B3:1A:58:1B:9B:C3:41
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0194221F4CE71EE7718F1A1D0A4B32D105B3
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/GbfU3sLMppEtdewqDLMaWBubw0E.roa
Signing time: Wed 01 Jan 2025 13:47:44 +0000
ROA not before: Wed 01 Jan 2025 13:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60798
IP address blocks: 45.88.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4c:e7:1e:e7:71:8f:1a:1d:0a:4b:32:d1:05:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 13:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19b7d4dec2cca6912d75ec2a0cb31a581b9bc341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:0d:06:f6:9f:6f:43:14:cd:99:74:95:18:
92:0a:59:a6:82:0b:d9:cc:31:8d:43:3a:65:20:a8:
4d:0d:94:20:e8:9b:87:56:aa:52:4f:0d:4a:30:f0:
e1:fc:0e:b6:f1:bd:e0:9f:31:28:67:65:6b:1a:72:
6b:24:d4:83:cc:cf:bd:eb:90:16:ec:b2:5e:ad:05:
c0:4f:88:06:3e:fa:12:9e:0b:26:a8:38:c0:97:60:
9c:37:ae:8e:23:58:65:17:da:11:14:be:31:f8:13:
ec:05:bb:bb:db:17:37:e8:d1:36:8d:dd:fc:d7:86:
8e:34:f6:2b:bc:c2:72:6c:ed:ad:3a:59:45:63:fc:
42:75:e5:27:5b:0f:49:3a:b5:e7:41:52:31:a4:5b:
82:a9:eb:07:4e:ba:ce:1e:75:f4:f3:fc:94:86:a0:
f2:d0:d6:94:eb:13:f6:92:9c:bd:58:8d:58:73:a7:
79:36:42:19:eb:9b:d1:ff:f4:72:d1:ef:14:f1:69:
9f:ca:5d:4e:5a:ea:64:52:05:d2:5e:40:40:85:7b:
cc:57:93:28:69:90:21:ba:12:f5:fd:f2:eb:32:e8:
da:09:89:c3:d6:3f:41:13:47:47:f1:ed:7d:2a:84:
1a:d3:40:7c:f6:e3:75:b0:78:82:63:57:44:05:02:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:D4:DE:C2:CC:A6:91:2D:75:EC:2A:0C:B3:1A:58:1B:9B:C3:41
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/GbfU3sLMppEtdewqDLMaWBubw0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:88:e8:66:a2:5e:37:eb:72:b8:6e:c4:16:1a:85:0a:9e:ae:
35:74:9c:41:4e:6a:2d:71:bf:16:fd:7f:18:2f:da:8f:3c:5b:
10:55:6b:7e:05:fd:83:e3:fb:57:2d:a7:b0:f5:6d:d0:85:77:
ca:63:6c:4a:7b:7e:24:bf:fe:4c:1d:17:8f:8c:57:cd:c1:98:
33:a4:ff:f0:18:18:54:4f:29:00:8b:6a:ef:94:5e:72:c2:a1:
3c:8a:43:f2:21:2d:4f:ac:83:eb:77:9e:eb:e9:d9:e3:c5:25:
3e:07:97:02:99:66:9b:20:3b:3b:ef:37:4d:de:ef:9e:a9:a4:
5e:da:7d:f9:33:f3:4c:fe:4e:cb:b4:d8:20:05:e8:ca:b2:16:
0f:25:11:9a:83:52:28:6d:d4:74:4f:01:fd:43:c4:81:72:c0:
1c:25:21:bf:bc:df:11:92:4e:98:af:a9:84:3d:7e:46:de:96:
9e:24:d3:55:d9:1c:8b:e1:16:fb:48:a4:b6:ac:e2:6c:52:d4:
c7:60:a0:29:d4:0f:77:0c:56:6b:aa:b6:c7:ee:9e:92:13:2d:
fb:65:8a:47:47:e1:72:92:3b:60:91:44:77:f7:6d:d7:6f:9e:
ee:a6:9a:0b:81:57:3e:8f:11:f9:79:0a:16:45:b8:22:77:18:
95:65:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:24 2025 by rpki-client