Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/gsSb57KAtHAv6U1ztlgKop_gCUA.roa
File: gsSb57KAtHAv6U1ztlgKop_gCUA.roa (raw, json)
Hash identifier: DpNQG9QfhKpd35Xn4b8u0n/5OzorPBkYCI9QARVYKIo=
Subject key identifier: 82:C4:9B:E7:B2:80:B4:70:2F:E9:4D:73:B6:58:0A:A2:9F:E0:09:40
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 08CF3D0C
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/gsSb57KAtHAv6U1ztlgKop_gCUA.roa
Signing time: Sat 01 Jan 2022 15:59:53 +0000
ROA not before: Sat 01 Jan 2022 15:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47381
IP address blocks: 195.5.177.0/24 maxlen: 24
5.159.232.0/21 maxlen: 24
80.77.112.0/20 maxlen: 24
188.227.224.0/21 maxlen: 24
2001:950::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147799308 (0x8cf3d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Jan 1 15:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82c49be7b280b4702fe94d73b6580aa29fe00940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:b1:2e:2d:5a:a4:02:da:4c:2b:a4:d9:82:
de:0c:65:3b:62:db:fb:ad:4b:6a:b4:32:82:4e:90:
31:81:88:ad:97:8b:ae:9f:2f:25:71:5e:e5:14:c6:
0b:78:70:3f:0c:26:37:1c:79:06:a8:f6:7b:8b:9f:
ac:94:32:9a:74:6e:c1:d8:6a:7e:31:05:f9:eb:fb:
df:e4:87:08:0d:e9:25:a0:40:b7:df:30:4e:79:30:
a5:69:28:40:56:c8:96:2a:27:40:fd:4c:7f:73:52:
1e:f4:82:f6:41:ed:7c:af:bb:7a:64:53:b7:28:07:
48:56:96:26:05:ca:2b:e3:80:b7:4a:b5:60:66:fe:
84:24:81:4d:4b:9b:50:d2:b5:15:f7:44:9f:19:cd:
3a:5a:8e:95:63:ce:6f:60:e3:54:a1:66:06:b3:88:
d6:d1:13:eb:83:9e:61:4b:43:9e:b8:2f:15:7f:46:
f5:13:0f:9c:aa:e9:f0:4b:38:d8:dc:c0:1f:21:9b:
e2:22:6b:14:b2:04:d0:ae:60:83:f4:44:85:fa:71:
ba:e8:c6:08:66:80:c2:bf:7b:cb:35:a2:98:cd:c5:
08:2c:51:66:09:a1:96:ab:3b:99:4e:e6:95:79:45:
ed:64:2d:f3:d8:8a:37:51:ab:cf:04:78:3f:20:b4:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C4:9B:E7:B2:80:B4:70:2F:E9:4D:73:B6:58:0A:A2:9F:E0:09:40
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/gsSb57KAtHAv6U1ztlgKop_gCUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.232.0/21
80.77.112.0/20
188.227.224.0/21
195.5.177.0/24
IPv6:
2001:950::/32
Signature Algorithm: sha256WithRSAEncryption
a2:58:cd:f9:c5:ab:a1:09:97:df:d7:b0:9c:ed:fd:6c:09:f3:
4a:e4:ef:04:83:d5:58:fe:b6:57:48:2f:cd:aa:f1:30:91:e2:
f4:44:48:56:1c:0e:48:bc:60:5f:37:69:ef:9a:88:a0:c2:63:
c4:2d:15:ec:1c:73:f4:5a:23:bb:d7:d7:d6:9f:eb:8c:6a:59:
ab:73:13:c9:7e:78:ac:dc:eb:44:0b:29:0e:39:93:17:82:99:
fa:a7:d5:76:47:fd:14:ec:f2:92:c4:fe:73:65:f2:cb:21:ec:
49:19:9d:4e:c6:40:ab:74:aa:de:d7:17:42:dc:02:82:09:7c:
5d:29:b1:84:17:94:5c:74:f0:80:5a:76:45:c1:b2:8b:3f:77:
ea:bf:df:98:da:eb:06:b2:5e:e1:2e:ad:49:e0:35:67:4b:68:
33:ce:75:bc:73:92:a0:9b:64:60:5f:85:1e:0f:c5:bf:6c:1d:
c0:07:0a:21:81:9f:d3:31:ce:1a:49:45:e3:d3:46:5b:47:1e:
9c:75:81:c4:46:ae:a7:18:31:78:63:12:06:65:15:02:4a:c9:
3d:23:1d:9d:cc:22:bd:e6:d6:8c:7f:da:98:41:92:87:8e:f9:
aa:a2:6c:9d:66:7a:74:71:55:ee:1e:f8:83:94:b5:eb:93:b6:
2c:a6:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:42 2025 by rpki-client