Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa
File: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (raw, json)
Hash identifier: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=
Subject key identifier: 18:B1:13:64:F1:80:CE:01:1D:AA:BD:FF:26:ED:87:C3:97:5F:78:27
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019424B3E595DE77EDF15B323C2024F8070A
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 185.94.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:95:de:77:ed:f1:5b:32:3c:20:24:f8:07:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18b11364f180ce011daabdff26ed87c3975f7827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:8e:82:e3:14:fa:a5:96:cd:eb:14:cd:72:
08:a4:ff:1e:55:b2:91:fd:af:44:83:5c:52:bb:aa:
ce:29:cc:26:d1:31:d9:99:d3:01:38:50:19:5f:1c:
48:d8:50:b4:84:d1:9a:96:da:7a:e1:91:a6:81:30:
8a:87:1f:68:0c:70:97:8e:46:89:80:5f:d3:69:a3:
16:30:d4:cb:9c:d1:08:90:25:f1:f5:9b:be:ba:bd:
c0:69:3b:58:24:49:91:e0:19:1e:e4:4e:3f:07:1e:
8d:c2:ec:dd:3e:72:b6:a4:a8:25:de:d1:52:68:d5:
7b:f1:53:4d:c6:1a:26:fb:74:75:dc:ad:4e:93:0b:
ce:e2:79:38:a9:1a:de:77:87:1b:f3:42:8b:db:79:
db:3d:9d:e9:b6:46:9a:0c:32:2a:7b:f1:56:aa:1e:
d8:13:71:2d:00:85:4f:da:49:d1:25:97:47:6f:cf:
49:45:2f:9c:f1:73:78:69:2a:23:49:be:b2:fa:c8:
6c:bb:7e:bf:4d:8c:26:2f:51:bd:24:8a:3a:3b:13:
ea:57:21:b7:8a:3d:e3:45:81:68:30:83:e1:c7:3f:
73:0b:ad:e2:5a:8c:34:a3:02:b6:7c:fc:23:20:76:
be:8e:5f:5e:14:af:be:80:f7:d1:9e:05:3e:a8:29:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:13:64:F1:80:CE:01:1D:AA:BD:FF:26:ED:87:C3:97:5F:78:27
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f4:87:9a:8b:92:8a:ca:00:a9:a5:a3:a2:d5:0b:bc:da:1d:
ae:e4:e7:a9:a8:e5:1d:69:29:30:d4:f2:b5:b8:b6:7b:e6:34:
c9:b9:7f:a2:6f:10:dd:02:d0:7a:a1:fc:4a:0b:18:94:50:13:
b4:68:e1:2e:59:c3:32:47:0c:ae:03:c3:13:e9:4e:d4:1e:e3:
25:a4:a1:19:cd:cd:5a:ae:14:7b:96:eb:1c:5e:a8:1b:f4:5c:
e9:e1:d5:ca:85:03:84:eb:a2:7c:28:34:ca:ee:98:77:a9:00:
3e:02:26:19:ed:a8:45:8f:d4:2b:18:a3:01:29:ab:ec:ed:3a:
05:66:a3:e5:f7:93:f6:2f:0b:1d:bc:1e:eb:ba:ac:31:f2:ac:
b9:dc:da:b9:28:62:28:1d:5e:31:dc:ef:8d:74:d5:1f:dc:66:
45:ef:28:63:c1:e3:08:16:06:16:ff:c3:5c:ff:c6:db:7b:75:
c7:43:dd:b5:66:b0:88:a5:24:db:34:d2:4c:99:b8:b1:b4:a9:
f3:00:87:7d:71:f6:16:4e:d5:c1:e4:0f:e6:b0:7c:55:b5:44:
71:4e:57:85:9e:3a:c4:26:8d:07:3f:fe:d2:86:27:80:58:b1:
17:cf:e5:cf:b4:33:ed:ee:f6:f8:9c:6f:44:48:44:ea:e7:c1:
d4:05:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:46 2025 by rpki-client