Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GFiph6DLLjHUXIvzZkHWUmNmws8.roa
File: GFiph6DLLjHUXIvzZkHWUmNmws8.roa (raw, json)
Hash identifier: Bk9sCIXs1thYHHFUKITPL+Xr+R4enKEjhKNS7JASylg=
Subject key identifier: 18:58:A9:87:A0:CB:2E:31:D4:5C:8B:F3:66:41:D6:52:63:66:C2:CF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747DA187CB6E49A609B5EEE969F8429
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GFiph6DLLjHUXIvzZkHWUmNmws8.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 46.8.5.0/24 maxlen: 24
188.130.196.0/22 maxlen: 22
188.130.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:da:18:7c:b6:e4:9a:60:9b:5e:ee:96:9f:84:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1858a987a0cb2e31d45c8bf36641d6526366c2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:c3:47:43:b1:bb:64:e1:e2:29:d5:bf:59:
e2:e9:a9:06:2d:1b:82:48:ff:d9:1a:12:eb:fe:06:
76:86:12:92:e3:4d:d8:32:56:d3:16:a1:ae:54:de:
51:41:57:0c:d9:b9:b6:b0:b7:63:60:b0:2a:0a:cd:
c4:aa:90:64:3b:c0:1d:99:23:93:9d:af:92:a6:39:
64:74:47:2a:f2:e3:dd:f2:30:ff:02:7a:3c:9a:ea:
6f:83:94:3f:e2:94:cf:b6:8a:1d:d0:4b:8d:57:17:
49:b4:82:38:8b:f9:af:e5:07:c8:12:e0:fa:4f:95:
cf:2e:01:10:22:11:18:8e:a4:aa:96:44:b2:78:c9:
e1:d6:31:75:78:cf:76:c6:22:b5:6f:1d:a7:76:1b:
2c:1f:8c:b8:6f:9d:dc:b7:26:29:14:f0:04:9d:67:
6f:5a:d0:85:ac:14:5e:c7:e6:1b:09:8b:6a:e9:1e:
bd:63:2b:ef:8b:57:11:02:19:33:4c:00:b7:1d:3f:
22:2b:93:98:da:85:30:5d:8e:bf:40:f7:98:62:7f:
df:79:e8:d7:c1:a2:aa:ce:c3:b8:92:66:fe:7a:ea:
71:13:ef:91:cd:d7:96:7d:9b:11:7b:7b:06:67:8d:
f2:96:32:d2:f0:76:47:2a:dd:cc:4e:2b:95:c1:a7:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:58:A9:87:A0:CB:2E:31:D4:5C:8B:F3:66:41:D6:52:63:66:C2:CF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GFiph6DLLjHUXIvzZkHWUmNmws8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.5.0/24
188.130.196.0/22
188.130.205.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a7:14:6e:fc:12:55:99:88:82:8d:5d:ab:d0:59:39:5c:bc:
0c:15:d7:6b:2c:b6:71:91:3f:35:75:c4:c6:94:f8:ef:81:57:
ba:c4:3a:d1:35:b1:5b:79:d0:f3:2b:2e:f9:45:fd:e4:52:28:
54:0c:40:44:aa:3a:12:93:b9:87:20:26:89:8e:ba:b8:9a:0a:
02:0b:f1:5a:37:ac:f7:86:80:21:30:55:f3:f6:eb:a2:9e:4a:
63:91:e6:95:c8:52:7e:e0:43:7c:c2:09:b9:36:9e:a0:56:c7:
39:1a:f3:b5:f8:bf:64:ae:01:42:4a:ab:f1:8c:49:b1:3d:3e:
ef:d2:42:d6:7c:ec:ce:90:5d:89:1f:8c:ec:7d:93:8f:c2:6e:
6f:02:d4:1f:4f:4e:88:4e:da:ae:ae:0a:17:b0:94:f4:b2:9a:
53:ec:15:94:24:92:3a:fc:5f:8f:5e:e8:12:f8:3b:1e:b6:51:
9c:8e:8e:a7:30:a3:01:27:84:29:f4:a9:da:37:ac:6f:f0:b8:
e3:b7:94:ca:82:9c:b3:72:d2:8f:4d:c4:1d:77:a0:b3:fa:21:
33:43:14:d1:f7:8c:04:76:30:41:49:5a:e3:16:ef:11:62:12:
e6:b6:52:02:ec:4a:83:18:cd:90:be:38:88:78:cc:33:6b:1e:
65:ae:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:44 2025 by rpki-client