Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/gvqSMksH9JFq1OfSJxdxmDTsBXc.roa
File: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (raw, json)
Hash identifier: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=
Subject key identifier: 82:FA:92:32:4B:07:F4:91:6A:D4:E7:D2:27:17:71:98:34:EC:05:77
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01942444B9F749413A2BEC0ECFCE2EDF9305
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/gvqSMksH9JFq1OfSJxdxmDTsBXc.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 193.77.30.0/24 maxlen: 24
193.77.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b9:f7:49:41:3a:2b:ec:0e:cf:ce:2e:df:93:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82fa92324b07f4916ad4e7d22717719834ec0577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:84:4b:89:0a:76:f7:3d:05:59:27:43:4e:
4b:b2:e7:00:d6:0e:ef:d9:70:2c:cc:93:33:0d:74:
2d:7a:fa:5b:87:80:d6:9a:e2:ac:1c:1f:68:1a:bd:
7e:ae:88:29:a9:cb:e4:56:69:4a:63:50:8b:2c:f9:
e2:db:5f:41:04:d5:1b:08:4d:30:30:30:bf:a6:af:
58:0d:47:7e:3d:98:9a:ee:af:86:1e:db:1b:49:01:
56:89:14:b6:5d:14:a4:12:eb:28:04:5e:7e:d0:2d:
83:1c:5e:d5:8d:e4:54:62:a4:c3:2f:fb:26:d7:56:
cc:e6:4d:0a:ac:d8:2b:f2:b6:7a:d5:e3:3b:86:bd:
79:cb:7f:bf:48:9b:7d:3d:b5:c9:34:cd:84:9c:86:
07:5d:b0:bc:77:f1:a7:48:73:0c:8c:2b:10:cc:2e:
e3:8b:58:a0:01:e5:4d:55:b1:f0:6a:44:10:3b:3e:
8a:28:2c:7c:52:93:28:51:35:fc:a7:83:1f:4e:e5:
e4:0a:15:a2:41:8a:df:d2:2d:0d:95:62:ce:27:ab:
c7:fa:ca:92:b3:e1:89:a2:95:8a:4b:8b:35:1f:fc:
4d:e0:b7:4f:59:d4:2e:dc:72:b2:6b:96:8f:98:95:
8c:c2:d3:53:a5:fe:5c:60:8a:cc:18:04:ac:22:ae:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:92:32:4B:07:F4:91:6A:D4:E7:D2:27:17:71:98:34:EC:05:77
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/gvqSMksH9JFq1OfSJxdxmDTsBXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.77.30.0/23
Signature Algorithm: sha256WithRSAEncryption
94:5c:ee:51:2b:b8:89:02:07:e4:cb:ed:c4:93:47:5f:da:c3:
3d:84:d2:67:a1:00:49:47:0d:9b:b3:da:03:c7:a7:de:32:1b:
2c:76:33:43:b4:16:e8:56:08:7d:0c:b6:c4:04:8c:47:cb:d5:
2d:e4:b3:58:19:70:b0:fa:bf:15:44:c7:67:de:fd:a1:7f:c5:
d8:5c:41:59:09:4b:f0:bd:8f:a2:c5:8f:e9:f4:fe:d7:49:b1:
30:58:da:f5:5e:d4:52:04:84:6e:13:be:0c:cb:1e:75:5f:da:
04:c2:00:6d:54:bb:b1:6a:c0:67:80:b1:49:69:1d:de:91:57:
79:7f:5b:a2:c6:24:7c:83:09:44:ba:a2:c1:34:45:4c:a7:56:
d6:cd:58:8f:80:3f:6a:6f:7a:87:9c:66:27:4e:51:d9:30:da:
db:06:21:2a:41:ce:a9:06:dd:09:54:30:46:47:f4:00:fd:47:
e6:dd:44:f7:e9:51:51:f1:c6:77:57:f0:5e:e0:f5:d5:9d:9c:
30:99:68:84:63:c5:9a:fd:21:69:c9:e6:46:57:d7:ea:39:4b:
ee:e2:e0:89:37:f5:06:8b:6f:24:bb:1d:06:31:2a:3e:99:9f:
b1:24:21:d1:2a:09:a1:84:f1:ac:7e:1c:8b:61:c6:ec:00:ac:
75:33:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:30 2025 by rpki-client