Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/GLPMgQIVlZhyQ3tEaGI6V4QBV4w.roa
File: GLPMgQIVlZhyQ3tEaGI6V4QBV4w.roa (raw, json)
Hash identifier: UwZ5yBoQpoWEB6zAEAseDQjOJbZzXKLpk4Jmnx9Fvco=
Subject key identifier: 18:B3:CC:81:02:15:95:98:72:43:7B:44:68:62:3A:57:84:01:57:8C
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019425FD4A48DF5421491165E60AC8401C36
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/GLPMgQIVlZhyQ3tEaGI6V4QBV4w.roa
Signing time: Thu 02 Jan 2025 07:49:04 +0000
ROA not before: Thu 02 Jan 2025 07:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48847
IP address blocks: 185.176.208.0/22 maxlen: 22
185.176.208.0/24 maxlen: 24
185.176.209.0/24 maxlen: 24
185.176.210.0/24 maxlen: 24
185.176.210.48/29 maxlen: 29
185.176.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4a:48:df:54:21:49:11:65:e6:0a:c8:40:1c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18b3cc810215959872437b4468623a578401578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:61:8a:12:a8:f7:ac:f9:7a:fa:45:f5:c1:
3c:8e:78:56:3e:12:46:b9:35:c1:54:43:d7:49:1d:
5f:f3:9b:77:a2:e0:d3:7b:8b:d7:8e:05:9c:fc:e1:
f7:95:01:9d:07:29:e8:fc:10:ba:7c:0b:d5:7b:19:
9f:fe:ae:41:55:00:83:d7:b7:0a:23:56:25:5a:b0:
64:79:90:15:8a:ef:14:af:ce:5b:36:f1:2f:9a:69:
8a:d2:bc:16:23:1a:00:a0:de:82:7b:06:12:7d:3d:
2d:2a:9b:99:6a:5f:31:9c:f8:e9:dd:01:fe:08:3e:
b9:c9:a4:12:21:3f:50:ab:05:2d:ca:1d:25:5c:bd:
2f:87:4a:ec:c3:a0:99:3c:44:63:82:70:81:8c:aa:
b0:cd:6c:49:4c:bd:99:ff:09:a3:fb:eb:f7:87:34:
3c:fc:47:2f:f9:43:ed:a0:a0:95:53:b8:1a:69:c8:
59:b7:4f:10:bb:8a:2d:23:e8:38:23:d1:02:5f:c7:
11:85:db:fe:5f:b2:16:b4:04:d8:07:e5:95:af:27:
57:24:0e:b0:46:fd:aa:a1:df:32:5d:19:fc:7e:f0:
d3:e4:1a:e9:25:eb:8c:c8:66:d2:60:77:1a:18:0a:
9f:0b:11:ab:6f:82:1f:74:26:36:5d:b0:5e:d3:53:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B3:CC:81:02:15:95:98:72:43:7B:44:68:62:3A:57:84:01:57:8C
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/GLPMgQIVlZhyQ3tEaGI6V4QBV4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:f0:6b:9d:f0:fd:c5:c0:71:24:4d:ca:f3:83:c3:cd:03:4e:
99:da:cb:cf:73:67:b9:77:12:b5:54:a5:93:b9:83:92:aa:35:
37:27:0f:7b:1c:34:24:e5:6e:11:e4:0f:36:3a:8a:b4:d9:da:
ea:09:29:c6:21:bf:09:8d:2a:2d:49:72:db:92:18:1a:7d:9c:
c7:11:9f:b5:ca:15:1d:95:3f:b1:83:ff:cd:76:9e:eb:3d:5c:
f6:ba:ef:c3:75:43:25:77:30:34:36:ba:74:26:03:35:bf:5b:
18:14:77:bb:7e:56:a5:44:2b:3d:c2:ff:4c:4c:48:63:2a:a5:
5a:d0:c2:27:da:9f:7a:b0:6c:cd:60:be:ae:7d:0d:c3:fd:28:
34:56:48:be:ca:ae:c2:0a:91:87:a7:a3:da:a2:4f:0b:78:81:
a7:54:d4:17:b2:f4:f9:c2:de:13:ac:64:60:4a:d8:22:1a:05:
f4:b0:bc:65:f2:dd:b9:4a:5b:ed:ab:82:5a:11:44:ee:52:94:
29:d9:f3:5d:b7:fa:73:f8:67:31:dd:01:2b:7a:e2:b6:84:20:
12:7e:99:e6:6f:41:15:0d:52:67:59:0a:f2:d2:13:6e:68:ed:
b3:84:70:7e:57:10:39:7b:f8:fc:26:df:14:ca:01:cc:c7:d8:
72:c5:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:37 2025 by rpki-client