Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/gBswCa4NNC-_QjGqzYhxXhfJfNM.roa
File: gBswCa4NNC-_QjGqzYhxXhfJfNM.roa (raw, json)
Hash identifier: r4P7TSP3VrNOEI7pYdNhzK4mHDAPrdGG1nk2I6gLdP0=
Subject key identifier: 80:1B:30:09:AE:0D:34:2F:BF:42:31:AA:CD:88:71:5E:17:C9:7C:D3
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22DEBB2491CF6FD2FAD0EF2F2EA12
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/gBswCa4NNC-_QjGqzYhxXhfJfNM.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203389
IP address blocks: 82.177.184.0/22 maxlen: 22
82.177.210.0/23 maxlen: 23
88.220.62.0/23 maxlen: 23
88.220.96.0/23 maxlen: 23
88.220.100.0/22 maxlen: 22
195.136.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2d:eb:b2:49:1c:f6:fd:2f:ad:0e:f2:f2:ea:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=801b3009ae0d342fbf4231aacd88715e17c97cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:80:a1:ef:38:bb:78:bc:ec:09:8a:dd:d6:
39:7b:13:4e:51:c0:3e:cb:37:b0:a1:03:33:a2:13:
0e:2e:f2:7a:41:15:76:4b:04:ef:39:81:0d:9a:e8:
f3:dc:ba:b7:8c:20:c4:36:1d:54:9a:df:88:7f:ec:
d2:3f:ab:eb:d2:ad:bf:71:b0:f8:b5:a3:e5:e5:1a:
8a:78:0e:1f:58:b5:94:15:b3:cf:f9:0b:ba:77:2f:
5e:5a:69:ee:1a:10:68:8f:61:0a:e2:11:18:e6:0e:
80:d2:ae:7b:59:3e:82:4a:aa:70:34:b5:59:db:6c:
07:4f:f1:5d:a8:ec:ed:51:12:47:8b:7b:90:ec:d3:
94:72:d2:eb:cf:97:28:1b:24:df:06:75:b2:42:e3:
83:ca:7f:94:96:19:b4:aa:38:ff:49:01:88:f6:86:
d0:ff:83:62:b2:15:8f:3e:a4:f5:01:93:9b:26:4b:
4d:ee:4b:cb:72:77:f8:77:8b:93:8d:5b:ed:9a:66:
fc:49:4a:f1:bf:5f:6d:4e:a9:af:dd:cc:49:7b:f6:
38:8e:00:e2:67:87:53:b2:aa:97:4d:94:2a:f7:64:
6a:ea:c5:7d:ef:08:f1:00:28:d2:82:6f:cf:46:16:
2d:66:f0:9d:ef:c3:80:84:3f:77:ed:4c:13:a1:9e:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1B:30:09:AE:0D:34:2F:BF:42:31:AA:CD:88:71:5E:17:C9:7C:D3
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/gBswCa4NNC-_QjGqzYhxXhfJfNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.184.0/22
82.177.210.0/23
88.220.62.0/23
88.220.96.0/23
88.220.100.0/22
195.136.124.0/22
Signature Algorithm: sha256WithRSAEncryption
43:5c:b8:79:72:ff:b8:28:f3:2a:c8:2c:e0:77:46:fd:8c:54:
69:f3:8c:d7:67:83:9b:87:87:67:05:a3:19:dd:57:f5:23:ab:
a9:17:c3:cd:8a:52:5d:ba:b3:ab:b9:2d:ee:04:40:85:39:e5:
a4:d1:5d:99:ae:8f:dd:50:71:90:0f:65:68:b7:f7:12:fb:86:
d9:5b:d1:c0:2a:f6:4d:65:6f:e4:2e:19:54:6b:8b:26:e6:7c:
91:1f:7d:09:2b:2d:55:72:98:f4:2d:0c:c9:fd:7c:ec:e9:4c:
cd:08:3f:09:e8:69:12:6c:3d:11:0f:ae:39:87:9e:67:3f:ea:
2a:40:2b:f8:61:65:b0:ad:76:0a:a7:d0:cf:24:e7:35:9c:8e:
4c:41:09:ff:34:26:d9:e0:f7:34:82:fa:38:37:d5:46:33:29:
6c:b7:ab:db:92:30:39:a2:d3:db:d6:ea:4e:59:ab:2f:44:f2:
23:e3:50:59:e8:bf:62:3a:26:c8:05:5f:8b:0c:40:77:1b:ea:
99:fd:5d:45:83:fb:3a:d2:7b:3e:70:9e:75:ff:74:1a:17:51:
03:8c:73:ed:3d:55:06:1f:80:2b:81:c0:e6:20:53:54:9c:cb:
3d:33:ba:57:7e:5d:35:f6:9c:f1:e5:12:7a:f5:9b:1d:8e:53:
2d:61:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:15 2025 by rpki-client