Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/gCt2TDRup_ZZFgUNyB3Jes8YGx0.roa
File: gCt2TDRup_ZZFgUNyB3Jes8YGx0.roa (raw, json)
Hash identifier: 0nTOrNuh0VXXO6EYK6FdZsvD+bdcCf/gxCV/SEzdthA=
Subject key identifier: 80:2B:76:4C:34:6E:A7:F6:59:16:05:0D:C8:1D:C9:7A:CF:18:1B:1D
Certificate issuer: /CN=bb09489b611085b902f15b78e597ba914337acf5
Certificate serial: 0187C96CC5EE0FDB9C8B795EF2250E66C3D6
Authority key identifier: BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/gCt2TDRup_ZZFgUNyB3Jes8YGx0.roa
Signing time: Fri 28 Apr 2023 19:52:41 +0000
ROA not before: Fri 28 Apr 2023 19:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47576
IP address blocks: 89.207.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c9:6c:c5:ee:0f:db:9c:8b:79:5e:f2:25:0e:66:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb09489b611085b902f15b78e597ba914337acf5
Validity
Not Before: Apr 28 19:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=802b764c346ea7f65916050dc81dc97acf181b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:a0:e9:68:2f:9d:b1:20:f3:b6:18:d2:48:
4f:92:4a:f0:58:51:47:fd:70:18:ec:db:a4:96:c4:
27:30:44:57:52:d4:d0:15:34:c5:62:9e:6e:03:92:
34:d0:27:41:7e:af:a5:89:c7:0d:a3:c9:0f:47:07:
7d:fd:80:b2:55:38:2b:01:18:aa:5d:3a:d8:c0:3d:
3f:c7:76:b6:da:c0:f5:92:d5:30:a1:f8:aa:dc:40:
98:58:77:8e:4d:55:ca:e8:d1:00:bd:7b:1c:8e:f4:
c2:df:ea:d0:fb:76:27:d2:b2:d5:57:d2:5b:32:6d:
d2:aa:40:75:c3:d4:88:2f:0f:9a:63:e5:cc:50:24:
6a:dd:45:a1:58:0b:57:de:02:4c:32:d7:8a:0a:ad:
36:c4:8b:0a:dd:ed:cb:0d:b4:f7:b3:16:8a:4b:7a:
e3:7e:ce:8d:16:4d:3a:ae:c8:e2:45:00:90:b2:75:
48:b7:b5:0a:ff:9c:da:64:bf:40:b4:f5:0b:92:7f:
7f:f3:15:2e:f2:94:c6:19:fb:f9:96:b3:df:23:ff:
71:7a:96:c8:af:e0:87:d7:e0:0d:dd:0c:f1:0b:d6:
d7:79:7a:a9:12:f6:ed:0f:b6:54:ab:48:c4:73:18:
8e:be:cf:b8:74:fb:b2:60:57:2b:df:db:28:08:a5:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2B:76:4C:34:6E:A7:F6:59:16:05:0D:C8:1D:C9:7A:CF:18:1B:1D
X509v3 Authority Key Identifier:
keyid:BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/gCt2TDRup_ZZFgUNyB3Jes8YGx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c8:04:35:b6:0a:b2:12:09:bc:28:8e:cf:74:d5:84:53:12:
ee:98:d6:2f:54:7d:e6:03:3c:f8:45:46:cf:07:62:e5:de:93:
79:25:9e:b0:08:81:ab:3d:79:1c:78:ac:e8:80:6c:32:17:d3:
52:fd:f9:5d:5f:d4:71:d0:44:aa:31:3d:7d:56:e4:d2:eb:c8:
12:31:d7:3e:d1:ed:51:fd:48:84:61:71:f6:a3:be:fd:e6:54:
7d:27:23:f8:1a:2b:b5:3b:78:99:82:82:1e:1b:93:13:08:23:
28:42:26:0e:7b:17:65:b2:7b:9d:ce:f6:2f:2e:60:4b:01:50:
46:e7:53:d6:d6:82:30:9f:f9:2a:e9:b1:35:47:01:b3:62:c2:
1d:68:6a:29:c3:a5:fa:f5:1f:31:fb:8e:ae:14:8e:1d:76:d8:
03:17:8c:43:a7:82:15:2f:98:42:ca:c9:a7:1c:52:d3:25:4c:
0c:e7:24:d0:b7:79:15:ca:1a:92:1c:99:6f:ba:b7:0f:3c:2f:
78:c0:a0:4f:41:34:cc:de:ef:eb:3a:13:b9:db:52:6b:f7:7e:
f8:4e:e7:a0:cd:e5:3e:f0:d0:78:00:f9:bd:0c:64:5a:a3:08:
7e:57:bb:1e:6e:d3:d2:1a:54:54:0b:af:0b:cb:6f:b5:98:68:
4d:01:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:23 2025 by rpki-client