Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2860f0-7fba-4019-b425-bb403386308f/1/Gg17DHVkgm6G2jMOr-rOWneQ1D8.roa
File: Gg17DHVkgm6G2jMOr-rOWneQ1D8.roa (raw, json)
Hash identifier: Chnmq5tmLUk1OMqdsEkSoHd2+QTq42QVuyHGhcKObqk=
Subject key identifier: 1A:0D:7B:0C:75:64:82:6E:86:DA:33:0E:AF:EA:CE:5A:77:90:D4:3F
Certificate issuer: /CN=8deae7f55136eb27be5c53ebfa8d4eb950464f3d
Certificate serial: 37FDEB30
Authority key identifier: 8D:EA:E7:F5:51:36:EB:27:BE:5C:53:EB:FA:8D:4E:B9:50:46:4F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jern9VE26ye-XFPr-o1OuVBGTz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2860f0-7fba-4019-b425-bb403386308f/1/Gg17DHVkgm6G2jMOr-rOWneQ1D8.roa
Signing time: Sat 01 Jan 2022 10:59:17 +0000
ROA not before: Sat 01 Jan 2022 10:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12399
IP address blocks: 185.247.40.0/22 maxlen: 22
212.211.128.0/17 maxlen: 17
212.75.32.0/19 maxlen: 19
2001:a78::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939387696 (0x37fdeb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8deae7f55136eb27be5c53ebfa8d4eb950464f3d
Validity
Not Before: Jan 1 10:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a0d7b0c7564826e86da330eafeace5a7790d43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:87:2f:15:65:23:9e:9a:41:a8:0d:75:1a:
2f:51:4f:7a:ae:27:db:62:a9:b6:fb:ee:ad:6f:7a:
f6:b4:b9:64:52:34:ed:9e:15:28:24:00:34:99:b3:
b7:29:cb:40:1e:64:cb:07:19:2d:b7:e0:5a:f6:c1:
e7:97:61:88:9a:a9:66:51:da:0d:7b:2f:57:83:3a:
08:6c:40:71:62:6d:a7:4a:e8:fd:b5:9e:d0:3f:d8:
4e:9a:fb:8d:cd:76:2f:be:0b:2c:2a:f5:de:b8:67:
11:bf:47:d7:6c:4e:af:f1:bb:16:a5:ff:bf:76:a2:
ea:57:fb:1a:f3:1d:da:3a:0b:69:87:7e:c3:fb:1a:
7c:24:93:61:e9:e5:3b:48:28:20:60:cb:81:9f:68:
8b:2f:de:90:42:20:c2:ce:2c:9b:10:29:4e:b6:f4:
45:70:61:c9:e6:d2:8a:e9:5d:7e:84:63:b3:86:12:
76:35:be:44:28:5c:8f:60:38:b0:d5:24:82:97:90:
10:a6:56:0e:ba:43:21:ac:96:d5:b6:04:fd:b8:9b:
ed:20:ed:b8:b5:1a:d9:2e:57:8d:7e:86:3e:27:4d:
34:1e:13:dc:a5:8d:5c:a7:54:f9:1b:8c:b2:1f:61:
13:9c:bc:20:46:b9:c9:4a:c0:10:df:c7:2a:fe:df:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:7B:0C:75:64:82:6E:86:DA:33:0E:AF:EA:CE:5A:77:90:D4:3F
X509v3 Authority Key Identifier:
keyid:8D:EA:E7:F5:51:36:EB:27:BE:5C:53:EB:FA:8D:4E:B9:50:46:4F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jern9VE26ye-XFPr-o1OuVBGTz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2860f0-7fba-4019-b425-bb403386308f/1/Gg17DHVkgm6G2jMOr-rOWneQ1D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2860f0-7fba-4019-b425-bb403386308f/1/jern9VE26ye-XFPr-o1OuVBGTz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.40.0/22
212.75.32.0/19
212.211.128.0/17
IPv6:
2001:a78::/29
Signature Algorithm: sha256WithRSAEncryption
e2:d2:fc:bb:69:73:84:31:c5:fb:4a:46:46:2a:47:d2:c7:f1:
cd:14:ee:ad:68:ec:39:1c:cd:fc:a8:4b:17:b0:0a:08:63:c8:
14:8e:9a:00:88:6c:bc:85:e0:bc:c4:01:8a:cb:24:27:20:41:
90:7a:b7:79:5b:3b:cf:ef:6e:6d:b0:bf:91:4c:1d:36:9d:88:
20:7b:c1:3c:d5:62:2d:fd:93:9f:4d:5b:ae:12:ac:a5:38:ea:
20:51:de:52:19:4a:df:21:86:83:df:06:a6:df:74:33:76:41:
4e:17:be:7c:ab:4d:26:b5:4a:8a:3a:91:61:e3:fc:08:5a:1d:
e0:f6:7c:53:b6:25:b9:67:ee:a9:e0:76:b9:72:3d:e6:32:38:
69:87:e0:d6:e9:77:1b:9c:09:0e:48:44:f5:78:1f:67:b1:42:
cf:94:c8:8f:69:49:4d:f1:34:42:ad:02:0f:33:dc:ec:ff:d3:
08:9f:31:0e:6f:99:83:20:e9:90:9b:c3:e6:f3:8b:3f:8a:f5:
ce:29:ed:5d:f2:1a:e7:78:f4:47:9e:0c:86:cc:c6:f8:48:cd:
ec:8c:0a:58:5f:b7:35:97:3a:88:f1:99:3e:85:78:54:a4:20:
d0:34:4c:dc:f8:27:2c:f7:01:eb:42:b6:d7:b4:60:70:2d:90:
69:cc:39:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:13 2025 by rpki-client