Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/GLDdTeZfnIrpnvYq_WpOrdjJdFI.roa
File: GLDdTeZfnIrpnvYq_WpOrdjJdFI.roa (raw, json)
Hash identifier: bRXBvbf8daz4hqhMiJ134XLX9l33SdMBXb0JlibODvU=
Subject key identifier: 18:B0:DD:4D:E6:5F:9C:8A:E9:9E:F6:2A:FD:6A:4E:AD:D8:C9:74:52
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 0188582BC9791918F651587C08F3DF4683A6
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/GLDdTeZfnIrpnvYq_WpOrdjJdFI.roa
Signing time: Fri 26 May 2023 13:07:24 +0000
ROA not before: Fri 26 May 2023 13:07:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47908
IP address blocks: 193.142.111.0/24 maxlen: 24
2001:67c:170::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:2b:c9:79:19:18:f6:51:58:7c:08:f3:df:46:83:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: May 26 13:07:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18b0dd4de65f9c8ae99ef62afd6a4eadd8c97452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:1e:72:46:60:7b:78:bb:14:68:6c:57:02:
70:e1:aa:0c:db:89:6b:75:94:e2:0f:f1:42:5b:65:
f1:8b:2a:79:98:fa:76:4c:d8:3c:ab:d5:61:39:3b:
86:97:98:6e:ab:18:e3:74:80:9e:bc:44:a1:74:8f:
08:31:5d:e3:0b:55:f9:df:b2:39:77:8e:62:be:d1:
50:65:5d:5a:aa:a2:a4:56:0f:92:56:79:e5:22:c9:
55:af:3d:a9:63:b1:5e:c2:48:c3:e8:2d:29:e9:fc:
7a:70:ec:df:d6:f8:5d:f8:e1:df:ef:cb:90:42:b8:
a5:73:82:15:ab:fd:95:e4:00:46:a2:2b:be:d4:ab:
e7:b1:ef:07:52:9f:ca:d5:4d:40:cf:cd:25:93:88:
4f:47:ba:40:4d:f0:a1:f7:ab:a5:b5:0d:73:5d:9e:
4c:14:43:35:cb:c7:57:0f:1c:4b:41:57:b3:ee:a2:
32:08:d3:00:16:95:76:1e:38:de:55:ca:fb:99:91:
fc:af:bd:06:cb:33:dc:6c:a9:c0:7e:55:67:fd:de:
07:04:75:a6:f8:67:8b:e3:a5:67:01:9d:fe:f4:ea:
00:93:0e:88:fb:1f:2d:d5:53:15:77:8c:28:67:b5:
ce:1c:df:cd:7f:c9:e0:4f:ec:de:88:5e:fc:29:2d:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:DD:4D:E6:5F:9C:8A:E9:9E:F6:2A:FD:6A:4E:AD:D8:C9:74:52
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/GLDdTeZfnIrpnvYq_WpOrdjJdFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.111.0/24
IPv6:
2001:67c:170::/48
Signature Algorithm: sha256WithRSAEncryption
94:06:f8:ee:71:11:e3:84:69:3e:52:e9:52:e7:9c:6b:51:9c:
2a:dc:63:3a:b2:cc:0b:54:f0:ee:7e:29:7e:0a:fc:9f:3e:a8:
ec:9d:73:63:3b:f6:14:f6:6a:6c:ce:89:dd:a7:50:5d:17:bb:
6c:75:8f:2b:32:5b:97:00:34:94:cc:65:26:cf:20:6f:d2:91:
b6:39:50:3c:b0:d5:ea:ff:89:43:dc:90:c7:f1:b3:4f:66:0e:
8a:17:c3:00:59:d0:51:d7:90:1e:82:14:28:1f:0c:3e:13:8f:
ae:5b:af:3d:d7:71:c2:06:06:0a:4b:21:9c:e9:1a:2f:57:ee:
38:42:32:7c:fb:22:11:19:d7:89:f5:8b:a7:f0:9d:11:6c:63:
bd:99:39:e0:40:e8:0a:4e:a8:4a:b3:ef:d8:0f:93:7e:7a:90:
c5:8f:70:13:c1:3b:cf:2e:75:bc:22:43:48:65:f4:83:31:47:
b9:a1:46:a6:e2:b2:65:07:ee:6f:ec:17:0f:99:2e:a8:47:70:
c8:b1:4e:a2:d0:68:ac:4f:eb:48:74:be:c1:24:94:89:fb:c7:
0d:12:63:dd:47:eb:ee:55:3d:22:0e:3c:96:22:79:1c:72:b0:
7f:6d:e2:b4:ff:0d:b2:d3:6b:4c:db:49:67:3c:61:98:ae:2b:
7b:e9:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:38:42 2025 by rpki-client