Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/GPRnxVZYbgXJj70_iEKvlXgPN24.roa
File: GPRnxVZYbgXJj70_iEKvlXgPN24.roa (raw, json)
Hash identifier: 4zWTgka5oRO1IFS4EYqUZybX548raJeNOyBzsRKEzd0=
Subject key identifier: 18:F4:67:C5:56:58:6E:05:C9:8F:BD:3F:88:42:AF:95:78:0F:37:6E
Certificate issuer: /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial: 019425FCD4678D047C0F7294B4A84A6BA425
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/GPRnxVZYbgXJj70_iEKvlXgPN24.roa
Signing time: Thu 02 Jan 2025 07:48:33 +0000
ROA not before: Thu 02 Jan 2025 07:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43133
IP address blocks: 185.102.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d4:67:8d:04:7c:0f:72:94:b4:a8:4a:6b:a4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Validity
Not Before: Jan 2 07:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18f467c556586e05c98fbd3f8842af95780f376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:4a:e2:af:34:64:84:47:1a:71:28:1c:89:
a4:3a:ab:a6:3f:42:cc:ef:e1:2c:23:77:14:58:8e:
c6:5a:9e:bd:12:82:4f:ec:3c:77:43:91:04:bf:34:
9d:34:4a:d7:c6:00:48:65:5a:65:ae:7a:04:52:d7:
51:ae:5e:cf:6e:c1:ed:88:78:a3:ce:ed:05:3f:1b:
cc:0a:e6:52:f6:dd:61:95:6e:91:af:06:17:00:2d:
49:af:4d:f2:9d:56:91:63:94:73:19:5e:58:c0:03:
ac:81:82:8b:de:0b:80:f0:30:63:d0:2f:59:27:c7:
20:83:7f:57:c0:5b:60:f0:ff:c1:e8:e9:45:13:5a:
20:50:b6:14:cd:84:e0:20:69:d6:17:12:5b:b0:e7:
a1:31:6b:a4:b7:0e:00:78:98:dc:65:e5:fe:70:38:
c1:4d:f8:f2:cd:05:7c:6b:51:5e:99:04:3b:6f:87:
0a:71:a2:28:78:fe:a6:0b:88:d5:b0:5e:ca:65:3b:
ff:62:02:8d:36:9f:5a:a9:21:c7:e3:0b:b5:fa:54:
4d:55:5c:ba:f9:4f:a3:e5:6f:ec:f9:91:ee:39:76:
70:5d:b9:cf:24:54:ad:bc:b0:5e:19:b0:01:c7:05:
57:51:e1:8c:f3:01:32:6b:f3:ae:02:bd:0f:7a:67:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:67:C5:56:58:6E:05:C9:8F:BD:3F:88:42:AF:95:78:0F:37:6E
X509v3 Authority Key Identifier:
keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/GPRnxVZYbgXJj70_iEKvlXgPN24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.85.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f6:f4:15:36:cd:ec:cb:0d:48:36:d5:7a:df:be:bf:18:18:
26:29:c4:f7:ec:63:2c:49:44:38:45:61:e8:4f:03:7f:2d:84:
de:5a:50:f1:76:b0:00:fd:6a:e4:be:ea:79:ea:73:15:3e:90:
c6:cb:a4:18:52:d6:46:48:7c:93:20:bb:22:45:84:bc:0f:2b:
6a:0d:78:b8:5a:d6:24:be:77:a4:20:ac:77:1e:7d:22:76:1b:
23:c0:71:a4:3a:45:22:32:c9:91:6d:dd:6e:a9:fa:6c:1d:3c:
8a:2e:b1:d8:d4:20:58:86:b0:15:46:3e:06:7c:6b:13:fc:3d:
a8:20:d5:90:25:16:0d:78:0b:e5:da:40:49:17:47:4f:c0:dc:
41:d6:30:c4:8c:8a:6b:b1:6e:ae:42:55:40:89:82:b3:8f:6b:
5a:df:be:dd:3d:ac:de:bd:e8:96:b6:77:7b:35:7d:6b:34:00:
54:bd:c6:59:92:76:a5:c8:27:e7:96:bc:40:2e:05:11:80:03:
ee:2d:b6:bd:f0:35:f4:6b:ce:1f:53:08:44:40:33:01:4d:c5:
21:68:eb:d7:f6:e0:0f:ab:28:c6:6d:d8:82:81:a0:31:7b:90:
55:cb:b2:3c:1f:61:cb:7c:df:de:38:1b:68:e8:20:a8:79:83:
3e:d5:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:31 2025 by rpki-client