Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/GGhN4e0mC_gl1F95oySlVacOQ00.roa
File: GGhN4e0mC_gl1F95oySlVacOQ00.roa (raw, json)
Hash identifier: M1NC85ZKX3vmUS+bkiJEuBFCJwvgQDT7IrbEKPDpn+c=
Subject key identifier: 18:68:4D:E1:ED:26:0B:F8:25:D4:5F:79:A3:24:A5:55:A7:0E:43:4D
Certificate issuer: /CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Certificate serial: 018570C2B9D470A62D953744444D4E701142
Authority key identifier: 3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/GGhN4e0mC_gl1F95oySlVacOQ00.roa
Signing time: Mon 02 Jan 2023 04:34:47 +0000
ROA not before: Mon 02 Jan 2023 04:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2595
IP address blocks: 193.43.137.0/24 maxlen: 24
2001:848::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:b9:d4:70:a6:2d:95:37:44:44:4d:4e:70:11:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Validity
Not Before: Jan 2 04:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18684de1ed260bf825d45f79a324a555a70e434d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:49:9e:5a:97:ea:6f:35:fb:6b:d6:14:ed:
de:ba:6c:1e:0e:8a:f3:e0:67:84:e5:a4:8b:b6:4a:
95:2d:4e:f0:4b:2a:1c:12:97:a6:b8:de:b8:7e:0e:
87:a1:24:4b:29:6a:e1:92:ac:73:83:c4:e8:0e:60:
77:98:21:c8:c1:14:4c:bc:38:ce:f2:da:33:6f:bb:
6e:44:3f:56:99:ce:9d:1f:69:5f:e6:1a:be:60:cd:
5b:3a:f8:3e:9b:3a:00:80:ec:04:e7:db:d3:a0:b1:
b1:67:50:ba:67:5c:36:91:f3:de:48:cd:f2:00:86:
10:8c:b0:f2:c6:31:86:b1:6f:93:3c:a4:d8:28:d9:
da:f8:24:7b:f2:4f:3b:8e:6f:0e:23:b6:42:38:77:
d2:21:9c:b0:34:7a:8b:9b:b1:6f:24:a4:89:f5:c8:
0b:15:b6:64:a1:c4:ac:e9:f7:bd:30:31:19:98:d0:
12:38:b5:84:9d:6e:3a:38:0a:84:b9:bf:a2:ba:3c:
18:43:5f:9a:40:0c:f5:82:ff:6f:84:66:43:5d:80:
fc:b7:67:85:0a:19:44:5f:74:0f:1d:ec:e0:54:07:
4a:bf:47:73:8d:c1:42:27:ba:74:3b:7c:34:0b:52:
d5:89:f8:d3:5b:21:ef:f7:d1:85:09:ff:89:99:d0:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:4D:E1:ED:26:0B:F8:25:D4:5F:79:A3:24:A5:55:A7:0E:43:4D
X509v3 Authority Key Identifier:
keyid:3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/GGhN4e0mC_gl1F95oySlVacOQ00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.137.0/24
IPv6:
2001:848::/32
Signature Algorithm: sha256WithRSAEncryption
1d:52:4a:b3:b0:c3:19:bc:65:47:7d:6d:07:ee:6c:db:cc:7e:
39:b5:5a:f8:b8:b1:a7:15:48:6c:94:2e:95:14:f0:bc:e5:bc:
9f:22:1e:27:df:3c:bb:2f:9f:70:a5:ba:c1:9e:93:f1:e6:55:
6e:47:a1:97:25:35:ed:6b:51:8f:ce:1e:bf:0a:6d:64:01:06:
22:d9:dd:6f:1b:28:b8:0f:c9:5b:59:7d:8f:a9:14:d0:36:10:
5e:78:c1:12:fa:50:2c:02:68:af:d2:a2:27:b0:39:92:be:54:
17:f2:8f:fd:e2:79:8d:1b:65:df:e9:db:f0:ad:2f:b3:c0:ff:
b5:d8:f5:18:04:a7:1a:41:a9:5a:62:c2:b6:44:6f:90:43:9d:
03:d8:b6:b6:93:4b:ee:7a:12:c9:ab:e6:9d:45:99:dc:0a:38:
d4:16:d0:7c:5e:82:91:38:19:66:f9:c9:ad:f8:85:3d:08:ce:
23:bc:6a:30:d1:8f:1d:aa:56:f5:8f:75:54:fb:65:1f:72:f5:
bb:b1:ca:57:27:56:39:57:af:89:e1:9f:91:fd:64:5d:ba:db:
f6:bd:c6:42:03:ee:23:f7:0b:5b:f0:7f:f5:cd:79:39:74:dd:
31:0e:c4:f7:66:77:06:7d:4c:0a:ed:4a:09:dc:14:7e:43:8d:
69:19:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:30 2025 by rpki-client