Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/GNbx1AkAYLoFm6m_mtXwLVmpV74.roa
File: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (raw, json)
Hash identifier: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=
Subject key identifier: 18:D6:F1:D4:09:00:60:BA:05:9B:A9:BF:9A:D5:F0:2D:59:A9:57:BE
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 019424B3FDCEA18A07A37E62FE1D46765E11
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/GNbx1AkAYLoFm6m_mtXwLVmpV74.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48854
IP address blocks: 37.140.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fd:ce:a1:8a:07:a3:7e:62:fe:1d:46:76:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18d6f1d4090060ba059ba9bf9ad5f02d59a957be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:96:3e:06:29:e4:b5:81:e8:a8:62:91:25:
7e:fa:ad:9d:bc:a3:ee:77:7d:71:04:e6:26:1d:a8:
ca:e9:3c:ef:03:27:9f:64:ba:95:44:68:79:99:1c:
44:88:a7:12:e1:0f:07:8d:46:2c:20:8a:ce:a0:74:
89:63:d3:ac:32:ee:ff:6f:12:09:d5:83:ba:4b:29:
03:c1:e3:b9:b2:f4:6e:5a:a1:20:50:28:ac:77:a0:
73:d9:7c:cb:70:2c:81:52:92:6a:69:1a:92:f0:1b:
65:3b:99:cf:db:b5:01:a3:ba:28:67:77:e2:a7:8e:
df:2c:e8:8a:84:8c:01:c4:45:9e:bd:c5:37:93:22:
62:60:d4:b9:68:74:7c:ca:36:47:a5:a4:fa:f2:e8:
96:74:8f:92:e5:9d:65:00:d0:37:e7:8a:6d:0f:77:
d9:0c:84:61:0a:e0:90:50:c7:fc:b8:56:95:f1:a5:
59:56:7b:3d:5d:ed:5c:f3:26:c5:da:d2:ec:3e:66:
53:96:f9:db:70:53:72:8a:4a:c9:1c:46:db:ae:a0:
bd:cc:c9:ae:59:3c:bc:f4:b7:e5:f3:9d:e2:b6:dc:
90:05:ca:4f:24:34:e3:0a:f2:29:0d:51:42:2f:ce:
e9:a9:4d:b7:8d:14:84:8a:c1:1a:1a:53:61:93:22:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D6:F1:D4:09:00:60:BA:05:9B:A9:BF:9A:D5:F0:2D:59:A9:57:BE
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/GNbx1AkAYLoFm6m_mtXwLVmpV74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.219.0/24
Signature Algorithm: sha256WithRSAEncryption
63:90:6b:e6:9e:52:1a:84:52:75:a2:0c:33:9d:c6:7a:c4:76:
2b:f8:a6:fe:0b:49:53:29:d6:47:59:da:0c:a8:4f:ee:45:fa:
21:9a:e3:4c:10:32:e4:f0:06:e2:ee:a5:66:86:c4:97:8e:ab:
67:dd:da:eb:50:b9:75:f4:f3:43:fc:f4:61:1e:12:e0:06:80:
32:d7:5d:75:c4:b5:c0:4c:f4:9e:96:b5:52:0b:8f:2b:2d:22:
05:7e:55:67:32:11:c7:79:87:9c:d8:a6:63:54:78:53:f0:e9:
f6:47:7e:6a:1c:6f:60:6e:d9:28:e6:f6:11:5b:de:98:de:82:
59:a8:b0:b7:8b:a4:58:37:6b:d8:7b:24:ec:f2:f7:e1:dc:a8:
d3:ef:d6:33:99:d3:3f:70:d0:32:58:f1:f8:47:49:f4:d8:03:
04:fd:4a:64:03:ae:8e:6b:97:91:50:b0:40:28:2e:24:16:3b:
1c:e4:9c:c1:a6:bc:d4:87:7e:52:8f:ce:e1:38:50:bb:77:b6:
1a:72:96:9c:f3:20:79:0b:77:c8:1d:99:8d:b4:4c:87:4f:c3:
cb:cf:9d:ca:a6:1e:df:21:43:fa:45:c7:4f:36:e2:55:e1:8c:
a5:62:c7:ee:5b:11:27:f9:46:d4:99:66:97:50:50:62:81:a8:
2e:a6:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:33 2025 by rpki-client