Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/GbtphNgjK0vdnL4zh4ndNFpMq98.roa
File: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (raw, json)
Hash identifier: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=
Subject key identifier: 19:BB:69:84:D8:23:2B:4B:DD:9C:BE:33:87:89:DD:34:5A:4C:AB:DF
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01942368F7CEAD9A65AC3B6160D1E517F1E5
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/GbtphNgjK0vdnL4zh4ndNFpMq98.roa
Signing time: Wed 01 Jan 2025 19:47:49 +0000
ROA not before: Wed 01 Jan 2025 19:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 185.148.104.0/24 maxlen: 24
185.148.105.0/24 maxlen: 24
185.148.106.0/24 maxlen: 24
185.148.107.0/24 maxlen: 24
185.176.24.0/24 maxlen: 24
185.176.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f7:ce:ad:9a:65:ac:3b:61:60:d1:e5:17:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 19:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19bb6984d8232b4bdd9cbe338789dd345a4cabdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:7d:d6:16:ff:a0:93:1c:30:28:7d:04:79:
95:52:db:9b:fa:3e:93:4a:06:47:cd:d7:dc:c6:2d:
d5:ef:14:d4:0d:09:03:0c:6d:93:aa:63:2d:9e:da:
01:6e:54:0f:a5:34:e4:e9:87:d9:cb:19:af:89:05:
72:ac:67:fa:bb:5b:6e:d6:99:b0:43:f4:9d:fa:99:
35:8d:8b:81:a3:39:95:32:31:c6:b5:35:71:63:48:
bb:fb:8c:c4:94:e4:5f:f5:15:88:8b:d4:68:23:5f:
95:1c:b7:da:ba:0a:f2:80:14:b2:c3:0f:3d:13:a3:
58:32:83:bd:f1:a0:1c:41:e2:50:3b:04:f2:fd:5f:
50:5d:b1:d6:87:a9:0b:66:19:01:7a:66:b4:3d:d1:
6b:1e:50:ab:04:14:06:ed:bf:e2:59:c4:b5:99:a2:
18:1a:6b:e4:3a:59:ef:aa:fd:f2:5a:a4:f0:f7:4b:
a2:85:9e:0a:5d:ae:9e:a6:28:6b:72:7e:67:78:7d:
1e:60:fe:2c:52:82:e1:a6:b3:a4:2e:5f:07:43:46:
18:7b:66:35:ba:90:a1:db:fc:b3:44:74:24:a1:17:
6c:c0:35:fe:67:c0:7e:e7:67:52:72:68:a4:8a:77:
60:21:3b:4e:34:f0:6b:4f:28:f2:37:f6:17:1a:35:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:69:84:D8:23:2B:4B:DD:9C:BE:33:87:89:DD:34:5A:4C:AB:DF
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/GbtphNgjK0vdnL4zh4ndNFpMq98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.104.0/22
185.176.24.0/24
185.176.26.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e9:27:91:4e:6f:a1:ac:7a:d8:25:42:ef:1f:d6:25:65:a8:
e2:dc:93:54:02:31:3d:ec:0d:f6:38:0f:60:72:9c:ff:46:95:
ac:f4:07:6e:35:f4:c2:32:33:d9:0e:b3:59:d6:14:90:64:73:
b8:55:0b:a7:66:1f:12:73:2d:25:07:86:e3:7b:35:8e:a5:8e:
e8:76:ae:7a:bb:02:82:eb:aa:ce:8b:71:17:f9:8f:bd:ea:20:
8f:d8:27:34:2f:61:12:df:52:5e:04:02:cf:44:53:b5:38:ac:
75:39:82:2d:01:e1:92:82:38:ad:e0:90:2d:e5:76:93:69:e3:
98:d4:fe:c8:25:e2:0d:19:87:01:ae:58:cb:c1:1c:e5:e5:1e:
94:08:fd:ec:53:d4:2a:45:b0:e9:3f:23:d8:6b:ad:92:97:c5:
7c:bc:64:29:c3:0c:29:81:7f:14:58:69:08:18:a3:4b:1e:b0:
2b:ce:26:07:44:18:7b:ca:92:ad:d9:8f:7c:71:3b:f6:22:9f:
2b:6b:bb:e1:4a:9e:c0:e0:67:d2:6e:79:45:f8:db:d5:e2:67:
28:fd:19:da:40:03:34:b3:06:f1:b6:af:d6:c6:d5:0b:d7:d5:
1a:69:01:21:3d:72:6c:30:09:75:61:99:9c:70:14:bc:32:1b:
4a:53:d2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:18:29 2025 by rpki-client