Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/GM-nD-6172VEPq_FseVNUoR1mBk.roa
File: GM-nD-6172VEPq_FseVNUoR1mBk.roa (raw, json)
Hash identifier: cSxcSnCoqMaYZECdosHXtpC4h+JghoAaWJALsqr4QuM=
Subject key identifier: 18:CF:A7:0F:EE:B5:EF:65:44:3E:AF:C5:B1:E5:4D:52:84:75:98:19
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2E1A51D2CCE9E0F6FC90AA3D9458
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/GM-nD-6172VEPq_FseVNUoR1mBk.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49659
IP address blocks: 195.168.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2e:1a:51:d2:cc:e9:e0:f6:fc:90:aa:3d:94:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18cfa70feeb5ef65443eafc5b1e54d5284759819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:65:9d:aa:3c:43:e7:3d:3c:92:ff:ab:35:
e7:63:1a:fa:92:a2:df:ce:97:3c:39:0f:56:5e:9b:
2c:42:11:f5:3f:22:d7:cb:a2:68:f8:db:24:3d:f4:
31:ec:af:3f:64:d1:e3:31:9e:46:4c:41:2f:58:5a:
4d:e1:81:6d:76:f0:a3:63:83:f7:93:a9:6c:30:8d:
6f:a7:98:09:41:84:79:2d:88:4a:af:57:db:66:05:
32:3d:c7:2e:16:c8:73:8a:60:11:71:da:2b:04:3c:
bc:89:65:ea:37:ff:bd:4b:65:c2:38:74:84:bf:e7:
c9:1f:18:10:7c:9b:d0:b7:7f:79:14:30:2c:24:2f:
82:88:40:a4:80:aa:ed:45:0c:77:9c:82:50:ed:90:
41:9a:89:7c:56:5a:06:70:c3:e6:b7:99:4e:bf:f9:
0b:2e:86:f2:0e:5d:bd:6f:85:99:b5:d5:5d:e3:3c:
06:04:88:c2:42:2a:83:7c:58:e8:a9:36:11:3a:47:
14:5a:1d:f5:bf:e4:5f:5d:0b:80:49:b8:5f:e0:82:
4e:64:7a:90:e6:9b:60:dd:7d:d8:88:f7:d5:f6:18:
b6:28:41:6a:db:91:2a:9d:26:37:2d:9b:1f:62:f2:
10:9b:a0:55:f5:be:b2:b6:03:37:76:35:2e:de:ce:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:A7:0F:EE:B5:EF:65:44:3E:AF:C5:B1:E5:4D:52:84:75:98:19
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/GM-nD-6172VEPq_FseVNUoR1mBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ee:63:32:4d:4e:70:5f:b8:3f:06:51:96:d5:c0:db:b4:72:
03:2a:c9:fa:28:2c:81:79:e6:51:7d:33:d9:55:96:77:c4:f6:
b1:76:7f:68:f5:db:4c:8d:5d:8a:df:fc:a6:8f:f3:f7:e1:ce:
79:f1:f8:cc:fe:2a:22:a0:da:37:e7:fe:99:21:fc:2d:cd:e3:
25:8c:91:83:8e:f4:e7:83:9e:a9:27:d0:39:30:5e:f4:4e:3e:
55:1e:31:c2:ad:11:2c:61:49:94:83:b1:af:f6:d2:f7:25:3a:
f4:26:0a:8f:ec:d8:3f:0f:6e:ea:89:31:b6:23:dc:2d:e7:7b:
61:a1:56:4e:e9:de:22:b8:42:3a:cc:9f:15:ab:b2:5a:99:56:
b4:28:83:dc:58:7e:70:6a:62:40:2f:42:a2:c3:a5:4e:2d:4e:
02:58:d3:1b:6c:37:17:a3:69:e5:d1:89:4a:c9:05:51:b5:d4:
86:fc:8a:9e:bd:5b:ac:42:8d:69:6e:f2:23:68:9b:f7:a6:5e:
8e:ef:87:c8:d3:0f:ac:4e:13:1d:c8:b3:d9:53:4e:a0:74:d4:
5b:77:3e:46:e2:ee:83:cf:b9:3f:e5:7f:14:80:0b:7d:29:e2:
bb:d2:65:d9:1e:2e:25:db:d4:9d:1b:f3:3b:53:7c:a4:fe:48:
85:12:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:17 2025 by rpki-client