Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/GDQ7YbwZY-fC2ITVqgiuBVX4eKU.roa
File: GDQ7YbwZY-fC2ITVqgiuBVX4eKU.roa (raw, json)
Hash identifier: pDPBlIEkPkf7bK0/ubsfg5Rz/0OTfECbp3dpjfHbGaw=
Subject key identifier: 18:34:3B:61:BC:19:63:E7:C2:D8:84:D5:AA:08:AE:05:55:F8:78:A5
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 0185714C0A5EE7A91B6CD11D68B3DB1D58B2
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/GDQ7YbwZY-fC2ITVqgiuBVX4eKU.roa
Signing time: Mon 02 Jan 2023 07:04:46 +0000
ROA not before: Mon 02 Jan 2023 07:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.54.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:0a:5e:e7:a9:1b:6c:d1:1d:68:b3:db:1d:58:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Jan 2 07:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18343b61bc1963e7c2d884d5aa08ae0555f878a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:32:8e:34:d2:bc:1f:fd:00:3e:ae:98:fa:
72:36:d0:1c:57:b4:4e:a7:fc:bd:e7:7d:58:64:75:
36:6c:2d:5f:a3:7b:8f:e8:50:b6:7b:3e:a2:b0:f0:
9a:96:ee:9b:f5:86:15:3c:59:83:7e:cb:81:8a:20:
bf:26:0c:16:05:4d:c3:2b:4f:21:60:df:ee:b9:04:
19:c9:3e:86:b0:a5:e2:3c:ad:5c:12:85:cb:59:c0:
cf:2f:f0:11:c5:aa:f3:7e:f7:d6:06:ed:cd:42:0b:
eb:8c:07:99:f7:47:b0:a9:f4:34:a0:63:e0:e9:b2:
f7:41:ce:59:a0:d2:ac:60:9f:43:42:09:f9:b6:f8:
87:0c:32:e3:c7:af:5f:4b:c7:b7:a1:6b:3e:37:5e:
13:06:b5:fb:ec:3e:ac:56:ab:c2:b4:e8:dc:59:8b:
5f:bb:55:e1:9c:0f:ad:36:dd:fd:b2:f7:e4:88:37:
0e:5f:2b:b2:43:4e:2f:1c:63:98:75:24:5c:07:d7:
ca:88:03:3d:f9:03:8d:d3:0c:8f:17:3b:95:aa:52:
db:a2:71:af:07:e8:ba:c5:65:af:51:f5:9e:9c:95:
2e:aa:74:d5:be:0b:40:48:76:b2:00:8d:4e:80:16:
07:c4:c1:48:e9:0e:eb:e5:cc:72:1b:f9:fd:4b:5c:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:3B:61:BC:19:63:E7:C2:D8:84:D5:AA:08:AE:05:55:F8:78:A5
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/GDQ7YbwZY-fC2ITVqgiuBVX4eKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:69:7e:96:00:70:2a:b2:59:cf:a9:4c:c4:a6:c9:6f:7e:05:
f8:05:24:53:fe:ab:6b:12:ce:3e:bf:50:b1:1c:12:e8:4f:80:
48:0b:82:02:4c:6b:15:49:d0:e2:ce:73:97:02:df:fa:7f:17:
67:ce:e2:5f:b7:b5:50:34:90:19:fb:30:d0:7b:8d:c8:84:5a:
d9:49:ce:a9:47:3a:85:5c:85:97:4b:a5:ad:54:16:a1:5c:01:
a5:69:7d:d7:88:15:4c:de:d2:83:cb:c2:f2:72:0c:9f:45:be:
77:fd:12:3b:3e:b5:05:a1:e0:f6:df:81:8f:74:1d:ea:85:c6:
42:e8:74:ae:cc:24:a7:fd:c5:89:20:be:6d:54:20:65:75:c4:
50:92:98:37:00:27:1f:75:4b:ba:d7:74:c0:9e:0f:4d:e8:2c:
72:b1:cc:e8:b8:15:a7:a5:41:74:46:0e:6f:c5:17:3d:e3:66:
8c:60:28:3e:f7:57:7e:71:c5:a0:ea:01:03:c6:13:67:15:18:
11:4c:fc:44:55:52:21:85:ba:a8:84:7d:52:0d:a8:45:fb:2b:
a1:bc:39:d7:41:d6:17:1b:c0:1f:99:b9:3b:4b:e2:44:f9:26:
03:bc:e3:46:73:b4:db:65:48:84:e2:e1:c3:02:0d:cc:7d:12:
a4:47:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:43 2025 by rpki-client