Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GVXWLtfjGtIYLv8uyv4QX2GB9I8.roa
File: GVXWLtfjGtIYLv8uyv4QX2GB9I8.roa (raw, json)
Hash identifier: BUbwmJX9C66AHUBO9BR1ln+RnBvJrqUkbxr6NNWaOKM=
Subject key identifier: 19:55:D6:2E:D7:E3:1A:D2:18:2E:FF:2E:CA:FE:10:5F:61:81:F4:8F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA96F23E9274C4C0E776E2E1662DC
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GVXWLtfjGtIYLv8uyv4QX2GB9I8.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204720
IP address blocks: 37.18.14.0/24 maxlen: 24
37.18.15.0/24 maxlen: 24
46.243.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a9:6f:23:e9:27:4c:4c:0e:77:6e:2e:16:62:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1955d62ed7e31ad2182eff2ecafe105f6181f48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:bc:f9:61:74:5e:30:01:a1:66:c3:69:3e:
c7:88:d2:e1:79:90:70:65:72:d0:f3:88:7d:9f:ce:
c4:80:94:7c:11:66:26:73:23:c8:38:6c:f2:20:4b:
f5:d2:3d:9f:4a:cd:b4:d7:6b:b1:72:28:46:77:9f:
5a:1a:e6:11:e5:f5:97:ae:22:21:5e:52:d2:b3:24:
48:6b:7e:27:c3:ee:22:f7:23:3e:1d:c5:0c:6c:78:
20:04:db:11:3c:07:09:5d:37:0e:8a:c9:6d:62:b8:
7d:4b:0d:9d:0f:3b:28:8c:94:a7:c6:c1:e8:3f:71:
d6:40:e3:e3:b9:ab:12:3a:e6:f0:8d:6c:81:a0:3f:
02:a4:75:8c:db:84:78:e4:46:53:ae:90:4c:1e:d4:
62:9f:d8:7b:9d:8a:8a:fc:41:c1:79:03:9c:81:c1:
5c:88:52:ff:39:9f:74:31:45:4a:01:ff:69:6a:7a:
a4:67:89:18:2f:d9:67:b4:7f:e1:d4:bd:f5:0e:28:
24:31:e0:25:a3:db:3c:dd:ce:21:b9:41:9d:32:bb:
bc:64:cc:c8:4b:39:71:e0:cf:bb:fb:2c:98:4f:e9:
e9:b8:cd:58:c3:eb:40:10:ae:95:61:70:89:c5:ab:
e8:08:c3:0b:8c:be:90:54:2f:77:c4:9e:d8:15:28:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:D6:2E:D7:E3:1A:D2:18:2E:FF:2E:CA:FE:10:5F:61:81:F4:8F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GVXWLtfjGtIYLv8uyv4QX2GB9I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.14.0/23
46.243.232.0/22
Signature Algorithm: sha256WithRSAEncryption
17:29:78:d9:ca:69:d0:2e:dc:5f:70:d0:f0:f5:45:64:2b:dd:
ba:0c:1e:54:93:ef:7e:75:1e:d8:4d:5e:c4:e5:63:48:20:2e:
95:3a:00:c4:9c:c7:31:e1:48:1b:2e:93:a4:58:a6:e7:ba:ae:
dc:36:c4:ec:d3:6d:2d:d5:e2:ee:71:18:eb:12:25:92:43:ba:
d2:ba:50:76:b5:bd:e3:f2:bb:41:93:34:c6:6c:c0:2b:ec:67:
9e:7e:00:5e:18:85:9d:c1:73:08:2e:fd:c7:34:ef:01:f2:68:
0d:73:32:e2:2f:3b:b2:ff:49:1d:9b:f0:3d:77:7d:01:02:ec:
88:3f:e2:03:6d:39:2f:f6:65:0f:f5:dd:51:f9:24:8c:f4:67:
e3:37:f5:87:21:99:31:d4:47:a2:67:2c:79:1b:54:0b:d7:78:
3b:b0:07:05:11:62:5b:25:74:ae:d8:bf:24:11:78:75:52:62:
c4:3c:60:71:51:47:a6:13:3c:58:0f:1e:99:f5:1c:d6:60:99:
f6:ee:77:29:4f:21:23:04:b0:b1:56:be:79:52:46:39:a9:10:
16:09:4d:2a:d4:1f:61:88:66:11:b5:06:dc:bf:c9:56:f2:aa:
18:31:9b:40:32:8d:80:5c:e4:88:f1:f1:f4:54:3a:94:ca:b2:
1a:bf:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:31:26 2025 by rpki-client