Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GujVnYJoAkzfCvxrFRrdm3vJm2A.roa
File: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (raw, json)
Hash identifier: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=
Subject key identifier: 1A:E8:D5:9D:82:68:02:4C:DF:0A:FC:6B:15:1A:DD:9B:7B:C9:9B:60
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 01941FFA6998045501CA32FA4A52B5160726
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GujVnYJoAkzfCvxrFRrdm3vJm2A.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 37.143.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:69:98:04:55:01:ca:32:fa:4a:52:b5:16:07:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ae8d59d8268024cdf0afc6b151add9b7bc99b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:64:73:fc:74:b0:7b:ac:c2:19:87:a4:73:
89:f5:5a:fc:39:d5:fc:db:ef:f2:f0:ed:f3:c7:4d:
a5:6e:bf:f7:2f:aa:3c:8b:91:b1:74:d7:43:8b:cc:
f1:6a:da:5b:d1:f0:8b:7f:ba:db:4b:0f:14:a1:69:
6d:91:cc:e7:49:ac:59:5b:f5:ab:eb:e1:91:ba:5b:
b8:65:74:1b:b5:ba:6e:99:eb:59:b2:57:45:9f:fd:
f2:39:ea:ba:c2:c5:0e:0d:39:1b:77:ec:a0:30:ca:
2c:e7:30:b5:91:fe:a3:07:37:d6:bd:25:63:61:30:
8f:b0:2d:be:bb:d2:7a:94:3f:64:09:ab:db:14:19:
d9:73:bd:1f:7e:57:e6:a5:36:fd:6d:12:4c:05:f7:
0a:22:40:c5:8a:42:fb:64:cd:c7:2f:55:80:e4:23:
ae:f1:62:26:79:8a:ac:ca:8c:b9:7e:ff:c0:22:eb:
55:09:88:c4:c3:24:b8:e1:b2:af:e1:b2:56:f9:08:
e2:a0:04:31:71:b4:cf:ce:50:3a:c8:2c:3e:78:29:
ec:05:2b:b8:b6:c5:cd:64:9a:fc:bd:02:88:1b:51:
cb:b5:92:97:3e:4e:9e:69:46:bc:4d:03:83:c4:bd:
58:17:8a:ac:cf:7d:95:e9:60:14:95:a9:ac:6b:6b:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:D5:9D:82:68:02:4C:DF:0A:FC:6B:15:1A:DD:9B:7B:C9:9B:60
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GujVnYJoAkzfCvxrFRrdm3vJm2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.129.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5c:43:78:9c:7f:d8:ab:2f:1c:a5:89:a4:54:c9:68:e6:0c:
c6:5c:5b:06:66:c8:72:b6:46:a9:2b:d2:18:01:ee:ba:98:c4:
d2:ce:27:51:e2:64:e4:5f:88:e3:88:fe:3d:f6:bc:bd:de:70:
80:9a:4b:e4:e0:2b:56:b6:1b:61:a3:2c:42:57:c1:37:e6:dc:
56:43:a8:c1:81:cd:2a:50:cb:81:a2:96:34:5d:fe:7c:67:26:
37:86:5f:47:a1:9f:1a:9c:5a:a5:0c:3a:37:f9:66:68:ff:ca:
2a:79:93:a0:5b:85:18:53:56:e8:b1:d4:03:83:12:7e:f1:7f:
3a:25:91:a5:18:8e:60:69:58:6a:13:73:73:e4:14:e1:f4:71:
8e:e2:32:b1:df:b8:a5:03:2c:ad:c4:ea:67:65:bb:8b:8b:03:
f0:5f:31:35:e6:d7:c7:ce:c1:75:89:f7:55:a5:97:b2:ec:76:
d0:0a:b3:37:8c:42:4a:ee:b7:43:68:b9:20:0b:ea:a5:b6:88:
09:6a:c9:d4:ca:0b:29:21:b6:bb:52:0c:57:1c:de:70:83:d0:
5d:d3:e6:60:9c:a7:d4:10:18:52:5f:fe:e0:94:fd:30:db:b0:
42:8e:b9:e6:81:93:ce:91:eb:76:92:18:55:99:a8:2b:ca:40:
b0:58:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:57 2025 by rpki-client