Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GQWmwq_wMbc45wnA_1sleENspfc.roa
File: GQWmwq_wMbc45wnA_1sleENspfc.roa (raw, json)
Hash identifier: mGtPTjiI/hBU36fsuGTK/74HnX85Gd6Wjm1pSRNxsZA=
Subject key identifier: 19:05:A6:C2:AF:F0:31:B7:38:E7:09:C0:FF:5B:25:78:43:6C:A5:F7
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369BA07AB05ACF83A8B63C25616CCF3
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GQWmwq_wMbc45wnA_1sleENspfc.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204157
IP address blocks: 77.81.99.0/24 maxlen: 24
89.45.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ba:07:ab:05:ac:f8:3a:8b:63:c2:56:16:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1905a6c2aff031b738e709c0ff5b2578436ca5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:2a:20:ae:4f:86:42:34:b9:50:d5:a7:90:
c0:35:d7:ea:fa:72:95:7d:7b:6c:b8:7d:d1:17:55:
49:ac:7a:55:80:a8:cb:b9:fc:d7:26:ff:20:99:18:
20:af:32:0e:49:d1:3c:5e:19:ce:2d:f6:83:0a:10:
eb:c7:37:df:dc:c0:f6:ac:f6:df:eb:66:11:86:3e:
fe:87:2d:d1:4b:3b:ba:55:54:9e:bc:75:a4:90:aa:
a1:a9:36:ca:27:41:ad:56:59:6d:e5:ba:86:aa:fb:
bf:2b:79:93:8d:66:f3:99:99:f0:e7:8d:c4:3a:d9:
c1:2d:2e:52:ba:ed:83:aa:41:67:98:34:e0:e9:e0:
6a:f5:6a:05:d3:79:94:db:fb:78:02:89:01:f7:58:
88:0d:d0:a7:23:27:47:75:a9:7e:ed:d0:e7:ff:93:
ee:cc:89:08:53:fa:53:a8:2a:b1:4e:ca:24:24:05:
3a:85:a0:74:83:25:60:9e:8a:c2:46:72:35:af:52:
12:5a:cc:cc:00:d7:b3:f1:6f:2c:07:a6:90:4a:aa:
0b:71:1e:3f:f9:04:33:b6:69:cb:e6:8a:91:68:be:
2b:f8:ee:0f:62:f5:06:c6:14:ff:15:b0:e3:5c:78:
8c:9d:9e:c3:c8:33:d3:a0:34:b3:8b:15:96:e6:26:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:A6:C2:AF:F0:31:B7:38:E7:09:C0:FF:5B:25:78:43:6C:A5:F7
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GQWmwq_wMbc45wnA_1sleENspfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.99.0/24
89.45.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f4:b1:58:9e:fc:ff:83:bc:6d:78:c0:72:fc:38:1c:3c:e2:
9f:4d:dd:5a:7c:f8:19:bb:3e:00:f9:c1:63:2f:38:35:e7:14:
c2:94:c4:6c:96:14:25:43:a1:60:65:5a:23:19:8a:b7:22:0b:
61:44:5a:d8:a4:7a:dc:6c:2d:88:69:8e:27:0e:35:fa:d7:00:
a2:9f:9f:95:50:3f:c6:67:f1:01:19:5b:a5:c0:71:43:af:d8:
9a:69:79:2a:05:c9:59:1a:d6:2e:24:a3:79:a6:b5:e8:85:eb:
fc:a6:95:9e:a4:24:81:42:77:5d:75:fe:51:a0:88:ef:d1:de:
39:39:45:d0:84:4c:0a:9e:05:8c:47:bb:cf:c8:3f:2d:cb:11:
c4:9e:19:f2:47:8c:37:2a:8c:c6:ba:3a:51:81:98:ca:e7:5f:
25:52:29:7d:c3:02:87:e3:af:88:c2:b3:6f:bc:98:f9:a9:8e:
83:b7:24:e9:6f:1c:a1:78:87:81:1b:bb:89:a6:0e:03:e2:04:
74:be:0d:2f:d5:e4:a7:20:01:73:c5:a4:78:bf:2e:62:b5:28:
b8:53:21:bf:82:0e:89:9b:49:46:cf:24:5f:df:8c:8b:3c:b3:
6a:f5:a1:58:f6:f1:1e:15:18:84:48:c7:6a:76:97:cb:6d:6b:
35:11:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:49 2025 by rpki-client