Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/c_GL5GCJNuXaa0mnDLPEzok1Bpk.roa
File: c_GL5GCJNuXaa0mnDLPEzok1Bpk.roa (raw, json)
Hash identifier: rEBJFUkh+5s87E8dL5cipZM0BFjliIeRqmnQF5cY5zo=
Subject key identifier: 73:F1:8B:E4:60:89:36:E5:DA:6B:49:A7:0C:B3:C4:CE:89:35:06:99
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0186CA9FC5852B1934A19CC953AA0BB28443
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/c_GL5GCJNuXaa0mnDLPEzok1Bpk.roa
Signing time: Fri 10 Mar 2023 08:25:13 +0000
ROA not before: Fri 10 Mar 2023 08:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265515
IP address blocks: 95.210.95.0/24 maxlen: 24
176.227.129.0/24 maxlen: 24
176.227.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:9f:c5:85:2b:19:34:a1:9c:c9:53:aa:0b:b2:84:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Mar 10 08:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73f18be4608936e5da6b49a70cb3c4ce89350699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:19:63:5a:41:0a:a3:7c:9e:b4:62:ab:39:
57:0d:bb:ee:f8:34:a0:54:3c:a9:f2:0c:1f:2b:f0:
a9:6e:5f:6e:e3:64:b9:2b:0b:fe:99:01:8b:52:38:
c0:56:e6:fd:44:3f:36:38:a5:d0:36:73:7c:f7:4e:
be:74:cf:b9:d8:a3:b3:40:c9:ff:8a:b5:e2:e2:6a:
7e:81:d9:85:24:37:9b:57:69:c4:f8:6c:76:b8:09:
7d:26:b6:4c:fa:9b:a2:03:22:71:8d:19:2b:7a:1d:
6d:34:c8:ce:6b:ef:00:0f:0e:64:0a:42:ba:3d:3a:
70:fc:f2:ab:81:67:fc:cb:37:e1:04:58:73:4d:bf:
b3:3c:09:ec:2e:03:f8:e0:79:b1:e7:ee:00:d0:44:
ad:74:cc:33:39:a5:f3:19:bb:cc:f1:d7:c1:50:d4:
2f:a2:91:3d:a5:fc:28:4f:2d:c0:6a:23:17:ac:c5:
05:68:ef:14:2e:f1:5f:98:b3:a3:c4:d7:20:6f:a5:
34:40:58:8c:c6:72:e1:3e:f1:51:91:70:70:cb:65:
76:88:b0:d2:c1:8e:56:c7:21:02:7d:8c:ad:24:b9:
04:04:6b:a8:fd:c7:e0:a0:0e:1c:fc:f5:59:bc:bb:
2b:72:25:db:3a:18:f8:29:8b:2d:7a:09:fc:85:71:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:8B:E4:60:89:36:E5:DA:6B:49:A7:0C:B3:C4:CE:89:35:06:99
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/c_GL5GCJNuXaa0mnDLPEzok1Bpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.210.95.0/24
176.227.129.0/24
176.227.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:07:7a:08:45:54:90:c2:9b:61:5c:d4:c4:6f:3b:98:b1:20:
d8:1a:33:65:c7:db:b1:ae:21:3a:38:3e:b0:bb:62:92:c7:bb:
4b:2e:3c:05:0a:aa:1e:e0:47:04:b7:47:b8:d0:2e:ff:14:37:
96:49:80:f3:ee:8a:6c:cf:98:04:72:75:2b:06:a9:0b:fc:d8:
c2:b8:73:21:9f:0f:8d:bd:6b:72:87:73:78:8d:1c:aa:4d:fb:
68:92:70:4a:3a:b3:2c:de:61:a9:5c:f1:ef:e8:90:77:d5:93:
cb:81:ba:ca:02:ea:ce:75:c1:aa:3f:b0:c9:3e:41:f4:ac:06:
d6:95:04:da:aa:b3:07:12:1a:2f:aa:69:b1:8a:d3:60:74:70:
a1:a2:ee:39:55:12:f3:e6:79:87:e2:8c:30:cc:16:d5:a5:5e:
e6:bc:b7:1f:d7:3d:fa:7e:2f:2d:3c:8d:dc:68:16:0c:84:38:
36:f2:05:b3:74:ef:c3:d6:19:0c:58:58:74:95:db:d6:76:5f:
94:98:97:41:d4:6b:ab:2f:83:b8:f0:de:54:dd:23:5a:90:74:
08:79:d9:01:2b:20:7a:09:27:97:f1:b4:d1:13:fe:4a:e1:d6:
bd:a1:d9:36:70:7b:05:96:31:77:c4:ed:a3:05:2c:c6:c6:32:
07:31:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:03 2025 by rpki-client