Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa
File: GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa (raw, json)
Hash identifier: q+xSJMcbTKpowxU7QHIFpGoYjDWd2eTHceMvN5t2SgQ=
Subject key identifier: 18:56:8D:BC:7A:C4:BF:9A:07:80:0A:3E:3D:3E:F0:AE:AC:C1:3B:3F
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 019427B3C3B4AFE0BEA4DC94353AC278592D
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa
Signing time: Thu 02 Jan 2025 15:47:59 +0000
ROA not before: Thu 02 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200533
IP address blocks: 185.225.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:c3:b4:af:e0:be:a4:dc:94:35:3a:c2:78:59:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 2 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18568dbc7ac4bf9a07800a3e3d3ef0aeacc13b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:f9:20:10:c2:fd:80:5c:c7:51:3a:8d:3a:
b1:12:55:24:ea:9d:6d:9d:f5:e2:bb:c1:61:34:71:
99:24:ac:cc:aa:b7:54:ae:61:3c:15:78:58:22:a0:
aa:00:da:3c:ad:01:71:41:e6:fd:87:70:b4:6e:e9:
42:bc:de:dd:dc:48:79:56:94:96:06:90:4f:fa:19:
de:e0:5c:56:43:09:15:81:fe:e9:fd:e4:e3:3d:f2:
2e:5e:f2:27:20:96:14:49:9e:d4:22:4e:dc:1f:5b:
6e:02:4a:f9:7b:5d:55:49:a6:72:dc:c5:c5:4c:af:
02:6b:3e:e8:ec:5e:03:a5:53:57:97:e0:af:7d:a2:
b7:d9:e2:d2:65:78:a2:24:66:99:85:10:03:23:fc:
43:44:06:63:b8:36:8a:ba:0b:00:13:04:b9:0f:a5:
d9:58:d1:15:67:a4:15:b0:43:b3:38:95:6d:49:06:
70:7d:bc:a6:69:a7:ad:f4:75:f5:d9:2b:a6:0c:f8:
84:f9:45:1d:39:76:12:6a:3d:2e:cd:09:34:8c:e3:
38:a3:2e:e9:b4:5f:89:83:1a:d2:9a:c8:f4:fe:04:
ae:e1:55:df:76:96:95:86:1a:82:c3:bb:72:ee:7c:
94:5e:1a:d5:a2:1f:46:3f:1f:5f:2a:4f:75:69:30:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:8D:BC:7A:C4:BF:9A:07:80:0A:3E:3D:3E:F0:AE:AC:C1:3B:3F
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a9:18:cd:77:1f:15:30:7e:f7:f2:b0:8d:d0:18:43:0d:0d:
2d:58:46:f0:34:69:5d:f7:d7:7e:45:52:26:80:fe:7d:3a:a2:
53:14:2a:96:72:ad:6d:d6:2f:7e:25:60:91:08:30:c6:7b:3d:
d4:93:63:1d:73:29:e9:55:d3:df:20:2a:c4:31:f7:7f:55:91:
e7:78:d1:aa:f0:72:30:58:fe:2c:c5:70:29:ce:d9:d1:82:31:
43:b5:b2:d2:dc:d1:0d:97:55:4b:18:8b:8d:79:25:7e:90:0c:
28:94:5a:0d:15:6a:1d:7b:71:c1:05:4f:57:58:10:28:8c:03:
f7:99:c0:3e:6f:8c:2a:ec:73:75:2f:b9:9d:a8:76:18:91:1e:
8c:6b:8d:f3:d2:a8:9a:85:14:80:25:f7:e9:d3:2d:aa:cd:ec:
cd:da:b8:5f:cf:69:dd:b5:38:ed:9b:e6:9c:3d:f4:b4:26:40:
43:c9:c9:19:ed:60:ed:c8:21:3a:a9:b0:c9:6e:d1:7c:51:fe:
97:33:39:a1:e4:2a:d1:d4:3d:b0:85:6d:ca:a9:18:d0:67:0f:
3a:58:60:96:07:41:68:66:43:e9:f5:04:94:68:79:cf:e8:cb:
0a:42:b4:c3:c4:e7:83:f2:8e:27:9e:27:62:03:00:0e:2b:2d:
e6:63:7f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:57 2025 by rpki-client