Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/GR60Ca6JzYbO9QyazVygj_5EvkA.roa
File: GR60Ca6JzYbO9QyazVygj_5EvkA.roa (raw, json)
Hash identifier: 5Z/qznAffX6vBunD+YATGq6yv3qTNT1qM1UlHOsBVgo=
Subject key identifier: 19:1E:B4:09:AE:89:CD:86:CE:F5:0C:9A:CD:5C:A0:8F:FE:44:BE:40
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 0194228DC704105F0096D3CCE7FA1639AA45
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/GR60Ca6JzYbO9QyazVygj_5EvkA.roa
Signing time: Wed 01 Jan 2025 15:48:24 +0000
ROA not before: Wed 01 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39647
IP address blocks: 185.160.74.0/23 maxlen: 23
193.164.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c7:04:10:5f:00:96:d3:cc:e7:fa:16:39:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=191eb409ae89cd86cef50c9acd5ca08ffe44be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:67:31:f5:f6:69:7f:9c:06:33:31:08:86:
db:aa:1e:27:ea:a7:22:7d:07:ac:b2:37:1f:6a:54:
9a:a1:82:17:cc:ed:3d:c9:c9:68:00:94:ea:5d:29:
6d:18:39:9f:83:62:8c:af:21:85:34:88:f6:1c:a9:
90:16:28:ab:61:ad:fe:55:67:90:83:e1:41:54:a5:
2e:61:a3:b4:fd:6e:55:8a:3e:db:fc:07:88:5a:07:
82:b5:d9:e7:30:b1:db:6d:14:36:d0:b4:be:d3:eb:
28:bd:24:75:2c:fd:58:8d:ef:4b:1a:fc:7f:1e:d3:
b6:9f:7f:09:64:3f:00:fd:42:5d:b2:d7:f6:b0:b3:
4e:12:44:5c:b6:68:7d:7b:66:52:11:ff:6c:3b:f5:
62:45:70:dc:ed:a9:46:0f:c0:be:a5:1a:f5:9b:37:
5d:81:ed:9d:90:5a:58:fc:2b:a4:3c:cc:81:be:d5:
bd:3c:66:c2:ee:2a:de:51:29:21:05:92:98:51:5e:
3c:bf:5e:0b:06:65:b4:db:87:62:2c:d7:89:3a:1b:
24:68:66:b2:e1:73:3a:42:2f:75:1a:a0:fe:91:59:
35:7e:83:28:4c:cf:13:61:28:c2:c3:5b:54:48:2b:
23:8a:83:6f:01:47:72:24:8e:e8:3a:cc:94:fb:34:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:B4:09:AE:89:CD:86:CE:F5:0C:9A:CD:5C:A0:8F:FE:44:BE:40
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/GR60Ca6JzYbO9QyazVygj_5EvkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.74.0/23
193.164.216.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:83:3e:0f:f8:37:42:30:ff:e7:a0:04:87:5e:b8:64:20:f5:
34:28:58:71:5a:ef:c5:be:f2:69:cf:a2:66:7d:30:27:bd:69:
cb:3f:43:0c:78:d8:c1:95:73:4e:a6:d4:93:4a:87:61:b1:d4:
13:4c:13:1f:ed:e5:db:5c:e0:b8:5a:18:d4:76:24:51:0e:03:
7c:80:ca:eb:5d:28:f4:c6:6b:b1:32:53:6d:81:a6:ba:e0:dc:
0b:a6:3c:92:8c:8a:15:e1:da:ae:86:a5:53:6e:d3:61:1a:11:
ab:d0:c2:03:68:5d:f4:52:ca:bf:1d:a9:26:16:7f:2b:24:98:
e9:ce:8d:ee:26:5e:56:bc:20:c2:23:ac:2c:42:69:eb:b4:c9:
44:05:46:63:b1:77:d9:53:72:02:8a:9e:24:8d:49:1d:3d:93:
de:5c:21:29:f3:43:c5:fd:60:0a:e1:37:cb:7e:50:55:07:ab:
4f:65:73:be:65:7b:76:2b:70:42:41:16:14:bb:dc:3f:cc:f9:
f0:18:42:e2:04:6a:8b:a3:2a:99:3e:d0:7d:fa:23:fe:e1:00:
08:73:ad:1d:32:49:b6:ce:27:7e:04:29:38:d6:69:dd:dc:6c:
e4:88:e6:be:32:9d:87:88:c9:db:77:b4:29:2e:f9:de:fe:2e:
9e:77:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:08:43 2025 by rpki-client