Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/GAg0poe00EJ96oVazZoMXbSeKCA.roa
File: GAg0poe00EJ96oVazZoMXbSeKCA.roa (raw, json)
Hash identifier: 4QBwa59GY+2lC9orR9CgIj4/3XwnhJvvHTMzFyyFVZU=
Subject key identifier: 18:08:34:A6:87:B4:D0:42:7D:EA:85:5A:CD:9A:0C:5D:B4:9E:28:20
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0195A03F7B76AB329069DF91294BBF94391D
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/GAg0poe00EJ96oVazZoMXbSeKCA.roa
Signing time: Sun 16 Mar 2025 18:37:49 +0000
ROA not before: Sun 16 Mar 2025 18:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 213.18.224.0/20 maxlen: 24
217.181.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:3f:7b:76:ab:32:90:69:df:91:29:4b:bf:94:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 16 18:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=180834a687b4d0427dea855acd9a0c5db49e2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:d7:53:5a:2a:9f:96:a2:6e:46:ed:7d:f0:
80:17:38:04:e7:d3:9e:2b:89:dc:9f:1a:54:0a:e6:
09:02:62:a3:62:5b:3f:ac:e1:17:a6:17:0f:a5:70:
09:1b:e4:36:b9:9d:48:74:3c:44:17:ae:70:49:70:
01:2a:92:49:88:dc:45:d2:50:42:2d:12:14:45:a4:
b5:9d:73:94:6e:04:40:95:ba:0e:4d:f5:39:58:e2:
74:e1:eb:df:ef:42:6e:59:39:02:1f:c7:a8:6c:81:
7c:64:08:37:43:c8:78:3a:d3:b7:e5:9f:2d:c4:b0:
d7:a5:cb:b9:27:a5:05:01:63:1d:e8:bb:b6:5f:a7:
b4:c1:aa:bf:36:45:02:22:2a:19:04:98:dc:91:b0:
2c:2b:ab:22:6f:64:ec:a7:0d:61:5f:31:5a:3c:fd:
cc:6b:14:4a:cc:a9:f1:6a:ae:58:e0:b5:4a:99:33:
f5:c8:eb:b4:d3:91:9f:31:ed:e6:6f:60:b1:fe:15:
06:ee:41:36:a3:19:25:0f:4a:fb:f6:62:fa:2f:a3:
60:9e:1a:92:72:9a:9e:89:e9:8d:53:e8:22:fc:96:
80:34:59:cb:6f:31:0a:c0:87:97:fb:02:be:45:f3:
19:6c:6a:8b:68:da:ca:99:df:26:06:84:05:ee:12:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:34:A6:87:B4:D0:42:7D:EA:85:5A:CD:9A:0C:5D:B4:9E:28:20
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/GAg0poe00EJ96oVazZoMXbSeKCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.224.0/20
217.181.72.0/22
Signature Algorithm: sha256WithRSAEncryption
69:71:c1:19:51:55:a6:65:e6:3f:77:0b:5f:70:cc:4d:37:43:
06:81:52:fb:26:18:cb:1a:6e:c2:de:54:7e:f6:eb:3c:0e:f9:
01:7c:ff:b3:fb:ed:bd:16:9a:da:f9:ac:83:48:46:4b:46:d8:
cb:fb:6d:ca:f0:24:f2:8b:4c:2f:eb:45:46:e3:13:6b:6a:78:
b0:9a:13:e3:40:5d:ed:ad:d6:c7:8d:e2:e6:79:de:21:06:0e:
de:dd:13:a8:ac:2d:ab:db:52:36:11:d8:48:d4:59:1d:25:d8:
7f:e7:28:31:e3:a4:69:0b:62:ba:01:33:c2:5a:08:9b:30:a4:
dd:43:ac:d6:94:d0:c0:c6:7a:66:98:cf:79:05:d8:06:23:fe:
44:e5:ee:c9:a0:3e:df:a8:e2:98:6f:ea:6d:14:63:04:00:48:
9a:28:d5:8e:f6:70:78:23:a4:55:19:15:ea:8e:1c:4b:cc:35:
df:9e:aa:1f:69:7b:4a:00:21:85:4c:5e:76:9e:95:64:38:34:
eb:fb:2d:82:59:08:31:b4:82:f7:af:88:fe:9c:7d:7d:a2:70:
62:e6:24:ce:d6:7b:f1:63:9c:d0:c6:b2:9a:2d:6f:0d:9c:34:
fd:27:4a:0f:ca:44:f7:9b:6e:2a:9e:59:0b:6f:22:5c:8c:89:
89:02:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:30 2025 by rpki-client