Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/gTUTUe8INbi9OsidaQMQFYIqJoE.roa
File: gTUTUe8INbi9OsidaQMQFYIqJoE.roa (raw, json)
Hash identifier: XsXgrLIlj7Np0u7CXLkRvr8FJVujd44bCe8XT3BV+T8=
Subject key identifier: 81:35:13:51:EF:08:35:B8:BD:3A:C8:9D:69:03:10:15:82:2A:26:81
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019599E2C2F2FE49B716BC40FCC42231AACB
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/gTUTUe8INbi9OsidaQMQFYIqJoE.roa
Signing time: Sat 15 Mar 2025 12:58:49 +0000
ROA not before: Sat 15 Mar 2025 12:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.230.0/24 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.220.0/22 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.32.0/24 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.124.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:99:e2:c2:f2:fe:49:b7:16:bc:40:fc:c4:22:31:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 15 12:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81351351ef0835b8bd3ac89d69031015822a2681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:4d:e1:c5:a2:2f:70:ae:95:db:35:c0:5b:
c9:fe:4f:66:94:f8:24:e1:fb:f0:2f:92:e9:71:ab:
8b:ca:77:a7:d9:37:42:63:5b:07:1d:17:45:32:61:
80:b9:88:4f:aa:ae:2c:50:0c:78:c8:45:c5:e8:f5:
e6:04:1f:00:7e:c3:b4:db:7a:73:52:3f:3a:82:ed:
64:68:b5:c2:c8:ee:25:dc:09:3c:36:f3:af:b7:5d:
e9:e0:bc:03:b3:e5:83:28:64:e6:f4:e0:65:43:78:
85:87:ad:62:53:79:c4:2b:6e:c8:3f:3b:5f:2a:f8:
e9:72:6d:cc:9d:19:ad:bc:e1:65:8e:d7:59:24:49:
8b:a9:b5:d5:01:4c:7e:11:3b:04:aa:fd:23:51:a6:
91:82:14:ef:66:9f:f2:1b:d7:5e:6c:ad:c1:a0:fc:
43:6f:48:68:08:68:c0:16:47:29:80:bb:e4:46:c5:
b6:44:2b:c8:c7:43:4e:d9:c1:c3:43:d8:a9:6f:fc:
ab:ef:00:ac:26:46:5e:8a:b6:be:d9:16:e4:f4:5f:
0d:9a:83:c6:4a:ae:33:7d:3f:30:c2:28:29:bd:e3:
64:b0:65:0e:f9:15:f5:6e:83:71:1b:4f:5c:17:17:
68:38:40:ea:20:b1:2c:3c:63:df:91:31:88:8d:5e:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:13:51:EF:08:35:B8:BD:3A:C8:9D:69:03:10:15:82:2A:26:81
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/gTUTUe8INbi9OsidaQMQFYIqJoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.230.0/24
194.238.78.0/23
213.18.220.0/22
217.177.0.0/21
217.177.32.0/24
217.179.56.0/22
217.179.72.0/22
217.179.124.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:75:71:cf:ba:fe:78:1e:c2:a7:5a:7d:fe:9c:22:cd:e8:d0:
a5:23:a3:2d:fb:25:b7:be:fb:55:22:ad:a1:c1:3d:a5:79:64:
34:76:9e:89:0f:84:eb:ab:f8:1f:33:7d:ad:a7:fc:8e:da:00:
0d:47:e4:fc:f9:05:08:da:78:eb:43:af:40:02:c2:7e:f8:10:
cb:b2:69:0f:b0:ff:b6:4b:06:33:e3:39:7f:8d:9c:9a:cb:46:
71:a9:1a:d1:41:ca:44:d1:e1:87:6a:ec:8a:d1:1d:94:39:f4:
08:ce:bf:9a:b8:f9:6e:d1:3e:4c:f7:bb:24:63:7f:17:ad:1c:
97:ee:a1:fe:fc:06:90:b4:a1:24:01:82:e6:ed:89:23:9a:74:
9d:1e:34:51:59:85:6b:a6:62:ba:40:ca:d6:86:51:18:86:83:
12:6b:94:95:ad:15:e2:73:a2:35:1f:1c:30:78:f4:9d:4b:90:
89:14:1d:06:a7:09:b4:73:4f:9a:bc:2c:fb:71:50:fe:02:4f:
ee:62:4d:52:b7:ce:48:ec:bf:0c:08:98:03:bb:0c:f8:72:a9:
7b:b6:2e:01:c4:f6:17:48:39:a4:48:fe:b3:fc:7e:6d:7b:a9:
ad:57:6d:b8:6e:a3:e1:56:3a:ce:ad:c2:2d:31:4f:1c:34:5c:
6c:a0:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:02 2025 by rpki-client