Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/gkYCBA0LBM2BANEqJqdmiqkxAZs.roa
File: gkYCBA0LBM2BANEqJqdmiqkxAZs.roa (raw, json)
Hash identifier: v50Tav9O9PKFTgxALp8XU+pEFsY0YTi6mMhng3A2QMc=
Subject key identifier: 82:46:02:04:0D:0B:04:CD:81:00:D1:2A:26:A7:66:8A:A9:31:01:9B
Certificate issuer: /CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Certificate serial: 01856BD35003B32F5F12B6F67765FC5C1349
Authority key identifier: 78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/gkYCBA0LBM2BANEqJqdmiqkxAZs.roa
Signing time: Sun 01 Jan 2023 05:34:48 +0000
ROA not before: Sun 01 Jan 2023 05:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211999
IP address blocks: 185.232.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:50:03:b3:2f:5f:12:b6:f6:77:65:fc:5c:13:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Validity
Not Before: Jan 1 05:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=824602040d0b04cd8100d12a26a7668aa931019b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:07:fd:ff:c3:25:89:32:03:02:5d:9b:af:
ef:85:f4:b9:79:f9:9d:a6:5d:09:7c:5c:dd:df:15:
ad:28:5f:42:7a:5c:30:4f:46:bc:50:88:17:a6:e0:
85:c2:e7:94:96:79:b1:ad:f4:d6:ce:42:01:01:61:
bc:81:30:33:2e:02:32:8a:6c:96:88:f0:d5:71:c9:
ac:e5:6a:f0:7d:22:8c:af:5e:9a:b0:cf:72:a1:6d:
a6:04:6c:da:ae:b5:2c:b7:21:10:f5:00:61:04:d5:
04:40:4d:6e:5e:22:62:4b:61:6c:d9:6d:3c:8c:71:
c9:85:99:bc:6f:cb:e0:c4:61:8e:d5:5c:6e:35:d8:
1e:19:b0:d1:93:f3:3a:06:c9:f9:64:33:22:5a:56:
06:b2:e7:8d:01:16:e4:a4:32:20:18:54:3c:bb:31:
26:04:7a:97:72:82:ee:f2:6b:a1:32:17:94:22:9a:
82:ca:84:c0:40:27:98:41:c1:93:e8:ab:5e:30:2f:
57:01:84:fc:9c:18:6e:ea:e7:95:10:6f:b8:66:ba:
12:8c:4f:10:22:8b:c0:a5:f2:9d:e9:6c:5d:bc:e0:
fd:b5:1d:48:50:a5:92:34:2b:ee:ae:2d:6d:d7:e5:
0b:22:bc:2e:78:79:01:98:4e:19:04:6c:78:18:6f:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:02:04:0D:0B:04:CD:81:00:D1:2A:26:A7:66:8A:A9:31:01:9B
X509v3 Authority Key Identifier:
keyid:78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/gkYCBA0LBM2BANEqJqdmiqkxAZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.234.0/24
Signature Algorithm: sha256WithRSAEncryption
27:18:f7:38:57:20:11:bd:3c:fa:4b:72:e0:2a:f1:27:51:ee:
15:2a:93:51:8c:f0:7b:b5:92:0f:6e:22:5b:b8:84:bb:12:e1:
0f:c2:48:6d:e2:dc:54:a4:5b:50:0f:e3:f8:90:34:1b:54:30:
ec:6f:27:ca:db:19:a8:98:f4:40:b1:c6:1a:f8:e6:cc:5a:f8:
55:02:05:d5:b8:ff:41:9f:a4:bf:4e:a3:c3:3a:74:e2:71:c2:
f8:3f:d9:5c:5f:4c:6b:6f:76:23:2a:17:10:0d:6e:f0:09:2d:
26:a2:3e:8f:9c:4a:dd:16:6c:67:b1:db:2d:24:44:92:30:f5:
3e:27:37:85:be:8a:0a:fd:86:73:2e:e4:02:72:02:a0:76:25:
f8:ae:6b:aa:3c:c4:37:f6:71:fc:fd:c1:b5:4e:57:d7:29:02:
89:2e:ad:bc:73:57:8d:31:94:d1:2b:4b:96:76:37:10:c6:a4:
5e:44:8b:f8:97:93:36:6e:88:6d:56:44:79:32:14:ea:85:d0:
ba:57:a6:b0:bf:94:89:5c:f9:11:08:3f:f6:84:a2:f8:45:32:
32:10:4b:bf:d1:31:f0:4d:0c:e5:96:f5:10:d5:8d:56:ad:75:
80:ff:00:16:61:db:57:ae:f0:51:d5:b7:4f:c7:d1:87:2c:d0:
66:d2:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:42 2025 by rpki-client