Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa
File: GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa (raw, json)
Hash identifier: XcS1ZuCgKYC4lujI/f/yKgFd5if0KehDM2OJ7bBb2dY=
Subject key identifier: 1A:05:04:FD:72:F8:4A:AD:FD:5F:17:FC:CC:85:BF:26:E9:89:18:63
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0194228E2B9685FE67FA2571D891274245AF
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 45.132.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:96:85:fe:67:fa:25:71:d8:91:27:42:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a0504fd72f84aadfd5f17fccc85bf26e9891863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:a7:86:66:a7:e6:c5:b8:c8:ea:f2:be:44:
6d:6a:5d:5c:f7:9e:81:ef:20:85:cd:93:86:0e:48:
69:d4:c5:b7:26:12:c5:f6:e7:57:18:c6:38:0f:4c:
8a:a7:70:31:28:1e:56:05:6c:0c:fd:af:70:38:73:
92:eb:5f:92:a8:aa:cf:16:31:00:22:84:20:b1:6e:
b4:5e:16:fd:1a:7a:3e:71:7a:5f:db:5b:18:d4:e8:
42:6f:19:bb:30:40:95:f8:17:29:5b:3d:3e:90:63:
ec:1d:fc:ee:a2:9a:98:6d:a5:5f:6a:5d:39:85:2d:
3d:70:b5:b2:a2:fc:aa:09:38:0c:13:ac:96:83:47:
eb:3d:9c:6f:c4:5f:ea:10:42:37:cb:ac:16:4e:b1:
d5:79:c2:bc:73:0a:56:50:28:ae:60:1f:ef:0f:e7:
47:ba:51:51:93:f8:77:8f:af:66:37:69:09:0d:dc:
79:11:51:0e:a5:bb:4e:58:4e:1d:68:6d:c8:ee:a2:
d0:2e:77:09:25:f5:30:86:d5:6f:64:84:fe:15:2a:
05:95:53:a7:40:9f:57:38:be:4a:d8:f7:88:cf:59:
e8:dc:30:26:9b:fb:51:24:fb:63:23:d4:05:58:8e:
ba:87:73:e8:3c:23:aa:ea:87:62:41:37:dd:3b:be:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:04:FD:72:F8:4A:AD:FD:5F:17:FC:CC:85:BF:26:E9:89:18:63
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.26.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3f:20:ef:70:78:c9:55:72:99:23:10:e2:62:06:bb:ce:2e:
1c:77:99:ac:b1:8d:32:bd:4e:ca:97:f7:3c:44:05:d9:ae:ef:
03:85:98:d5:36:b7:d6:60:98:c6:96:ab:8e:9a:db:0a:0d:3a:
d0:a8:fb:9e:98:e2:60:c1:29:5d:58:60:64:ac:59:ac:ce:af:
2a:70:31:56:24:26:d5:0b:c3:68:e6:3f:77:20:94:f4:7a:d4:
a0:36:4c:10:cb:73:66:42:19:bb:17:f1:6a:8c:23:75:54:62:
07:79:37:39:92:b5:fb:97:58:d1:76:4a:7c:3b:5f:be:21:53:
88:a7:fb:86:4f:ea:a5:bd:3e:e3:73:e7:ef:6d:2d:5f:d1:01:
5c:8a:ae:df:0b:b5:77:bf:f2:0a:9e:c1:63:1c:d5:3a:e6:44:
13:96:24:90:50:c3:1b:72:e1:a6:68:d5:35:7d:78:ff:27:7a:
99:ad:1a:20:48:1c:ba:1f:f8:6d:71:93:4a:43:d7:f9:fd:36:
26:a1:e4:73:6c:79:d9:2b:e5:05:12:b0:d4:24:b4:f3:e8:bb:
77:b2:47:24:20:db:d6:da:44:fe:4c:c6:a5:42:2e:4a:bc:4e:
d5:cc:57:bf:1c:03:74:39:9c:51:d4:a6:3a:f5:a4:0b:5a:05:
b6:97:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:50 2025 by rpki-client