Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/GzsHZiR2L5z34hlU58GjHyHGhHk.roa
File: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (raw, json)
Hash identifier: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=
Subject key identifier: 1B:3B:07:66:24:76:2F:9C:F7:E2:19:54:E7:C1:A3:1F:21:C6:84:79
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 019422FB4E2B5363646877803B9778954A23
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/GzsHZiR2L5z34hlU58GjHyHGhHk.roa
Signing time: Wed 01 Jan 2025 17:48:02 +0000
ROA not before: Wed 01 Jan 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214525
IP address blocks: 83.219.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4e:2b:53:63:64:68:77:80:3b:97:78:95:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jan 1 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b3b076624762f9cf7e21954e7c1a31f21c68479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:ef:2f:9a:a2:8e:05:3d:68:5d:f1:4b:2a:
f4:b8:6c:0d:d3:51:49:85:86:e4:60:9e:eb:21:75:
0d:d0:17:3a:27:7f:9e:f1:54:73:37:44:58:dc:86:
62:1b:65:00:77:a4:39:fe:df:69:88:e1:b4:02:2a:
20:60:bb:65:99:0c:33:61:0f:47:6d:47:c7:07:c6:
f2:41:f6:c4:ae:37:0b:28:9d:b3:47:43:97:cf:f9:
70:c0:0d:85:bc:63:a3:48:29:ac:ec:49:d8:ed:29:
f3:05:db:fc:e0:7c:b3:60:ea:6c:e9:8e:0b:23:fe:
6d:e4:f3:8a:31:09:61:22:a5:d1:e6:f1:a6:c1:95:
e1:b4:18:db:39:9c:34:83:42:c8:28:50:9c:73:df:
f2:5a:e5:87:48:ba:12:68:f7:74:ae:f9:dc:96:4d:
5c:b8:7e:25:3c:db:47:75:60:1b:16:2b:b0:ce:96:
53:3d:a3:7b:d8:9c:9f:a2:d3:a9:86:24:24:9c:c8:
ea:af:0b:a7:53:73:5f:c0:ef:6f:a8:b9:32:3f:58:
f0:f7:1e:34:e6:65:b8:40:b1:cb:b9:7a:01:43:7c:
e0:ad:ab:68:20:31:bf:1e:06:93:0f:bd:e1:40:0c:
50:96:23:80:45:0d:42:52:cf:8b:2b:4f:c8:cd:ef:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:07:66:24:76:2F:9C:F7:E2:19:54:E7:C1:A3:1F:21:C6:84:79
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/GzsHZiR2L5z34hlU58GjHyHGhHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.251.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4f:bd:cc:c9:6b:fd:55:31:14:8a:d1:f7:cf:54:c6:59:0f:
2a:d0:a2:8c:5a:4a:3c:89:5b:dc:78:2c:ff:ed:28:e8:26:d2:
0a:40:60:d2:f5:ab:b7:5c:6b:04:0f:a4:a0:60:b5:c9:aa:2d:
67:2d:42:4b:c0:79:b6:03:15:c8:0c:57:3a:8a:65:cc:1d:83:
fa:6f:fb:09:11:9b:6b:ec:29:95:42:69:0e:c7:35:33:ce:8c:
82:01:69:13:4b:2e:82:0f:ed:2b:a6:0c:74:b3:80:c9:7c:97:
7a:6f:2f:f9:18:61:23:49:22:84:98:07:43:4e:91:89:db:f7:
4e:da:b3:2b:04:19:62:8c:62:0c:f8:2b:46:c0:09:d8:51:9b:
a1:5c:5a:fc:60:df:9c:27:4c:75:2f:89:25:51:2e:94:0f:d1:
2e:3e:f1:f6:06:6d:c9:e5:6c:ce:76:c9:2d:47:c9:b6:13:3c:
d4:1d:c6:24:25:d9:0b:43:4b:48:ea:4b:ac:d8:17:fb:1d:1d:
70:0c:db:41:a6:19:b7:4a:16:7d:27:0c:b7:a1:b2:a4:3c:38:
48:82:63:be:9a:bd:9c:73:79:f7:69:4e:64:fe:fd:3a:bd:d7:
1e:2b:75:8e:8a:18:be:74:36:43:ec:55:55:93:57:fd:52:bb:
9d:3b:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:13 2025 by rpki-client