Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/GhnDGEgDOhOuu2Bz2p8x9xfrIEk.roa
File: GhnDGEgDOhOuu2Bz2p8x9xfrIEk.roa (raw, json)
Hash identifier: duB9Io5OhbZEdzVZTqJI4mOgNl+GvHnaKazpl3IdsjA=
Subject key identifier: 1A:19:C3:18:48:03:3A:13:AE:BB:60:73:DA:9F:31:F7:17:EB:20:49
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0195CD6A97DCC12B2425E721223B624E1C35
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/GhnDGEgDOhOuu2Bz2p8x9xfrIEk.roa
Signing time: Tue 25 Mar 2025 13:07:49 +0000
ROA not before: Tue 25 Mar 2025 13:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14114
IP address blocks: 91.195.242.0/23 maxlen: 23
194.39.131.0/24 maxlen: 24
194.39.133.0/24 maxlen: 24
194.45.236.0/24 maxlen: 24
194.55.88.0/24 maxlen: 24
194.55.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:6a:97:dc:c1:2b:24:25:e7:21:22:3b:62:4e:1c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Mar 25 13:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a19c31848033a13aebb6073da9f31f717eb2049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:03:23:34:f1:89:9c:ed:6a:e4:ce:ca:1a:
53:3d:32:a9:4e:b7:5e:27:3e:05:1d:5c:76:57:76:
bb:2c:74:5b:87:ce:d4:52:b4:80:3a:3c:2c:41:d7:
9e:1e:05:e1:7a:74:2b:42:43:2b:c1:29:e7:5b:08:
9d:3f:d4:f7:44:8c:c3:8d:27:9b:3a:21:db:b2:25:
4f:7b:ad:81:a1:65:07:9c:a4:57:ca:c3:76:2f:72:
aa:f6:f3:a6:da:eb:37:83:1c:1e:a0:f8:f0:f9:05:
26:eb:50:a0:9e:2e:de:2d:43:e6:4b:75:8b:6f:c9:
96:77:76:77:63:17:cc:27:22:8d:f8:9f:c8:6b:ca:
94:9c:cc:63:58:f9:29:38:b8:18:b3:e8:11:7f:0b:
16:7e:49:da:a5:a3:47:57:e2:db:85:f6:31:bf:6b:
5c:67:43:3e:a4:4b:8d:42:51:9b:29:cc:56:d3:9f:
27:99:66:8d:93:4a:4f:7a:41:45:24:4e:c5:4f:a4:
19:78:f8:87:eb:92:09:21:ac:f2:38:0e:91:c5:1e:
05:b2:e4:ce:88:75:d4:ac:e5:42:19:f3:c6:20:06:
09:67:63:62:ba:0f:4a:c6:71:65:ad:1f:e0:c1:ba:
58:50:75:53:2b:28:70:0b:75:b9:57:ea:ce:61:3d:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:C3:18:48:03:3A:13:AE:BB:60:73:DA:9F:31:F7:17:EB:20:49
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/GhnDGEgDOhOuu2Bz2p8x9xfrIEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.242.0/23
194.39.131.0/24
194.39.133.0/24
194.45.236.0/24
194.55.88.0/24
194.55.90.0/24
Signature Algorithm: sha256WithRSAEncryption
45:77:8d:14:9c:78:7f:91:51:c6:8b:13:f4:10:15:f0:a1:a7:
ba:ba:cf:e1:0b:b0:d5:43:e1:16:c6:59:be:6a:07:95:45:59:
72:19:7f:b5:61:db:c0:89:33:15:c8:4a:93:29:76:53:f7:8a:
36:5e:f0:2a:6a:1f:b0:54:72:0f:05:79:75:e8:aa:7f:20:72:
aa:a0:f9:ca:0d:c9:68:d4:48:6a:dc:3b:67:45:26:3d:bb:c9:
fe:d5:b6:fd:2f:86:a9:df:cd:7e:13:ab:e6:5c:c7:ca:78:67:
fe:49:42:ea:91:21:4b:82:48:cc:38:60:20:df:51:de:53:8d:
73:fd:da:bb:61:78:69:28:8a:98:bf:c6:0b:25:ef:6e:59:3b:
20:65:f8:f4:ab:18:f1:f5:a3:71:5a:09:37:27:e5:ae:f6:89:
1f:81:97:2d:84:67:84:89:fd:3c:4c:2a:e7:83:5e:35:1b:5a:
f7:f5:58:06:42:bc:86:2c:a4:1a:00:01:5f:22:5a:73:d4:26:
3f:26:3b:08:d8:a8:dd:51:0e:a5:14:76:88:63:e6:a0:2c:e7:
28:79:25:72:a6:ae:00:57:d2:47:a1:58:b5:ca:b6:68:77:de:
4d:b3:5d:2a:fa:ee:89:61:7b:a8:2b:c3:24:58:3b:e3:f1:4d:
58:b7:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:15 2025 by rpki-client