Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GgNDFBOn0oBe0aE4Qr69ACYOBbM.roa
File: GgNDFBOn0oBe0aE4Qr69ACYOBbM.roa (raw, json)
Hash identifier: 9l54D8Mrr1ilWVQNMs0II/X5MbC89OClAiGCmu06bhI=
Subject key identifier: 1A:03:43:14:13:A7:D2:80:5E:D1:A1:38:42:BE:BD:00:26:0E:05:B3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422201EE682671AB41F17C49D42EF8703
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GgNDFBOn0oBe0aE4Qr69ACYOBbM.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33932
IP address blocks: 185.227.204.0/24 maxlen: 24
185.230.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1e:e6:82:67:1a:b4:1f:17:c4:9d:42:ef:87:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a03431413a7d2805ed1a13842bebd00260e05b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:90:b3:10:5b:13:47:f3:0a:72:5b:0c:76:
87:21:cf:5b:ce:4a:a1:1c:69:9a:cc:75:f4:59:19:
1d:64:6a:9a:49:b4:6f:66:a7:56:a4:51:03:c2:b6:
97:e9:49:d6:48:76:e4:32:3e:7c:6a:ae:c5:dc:d0:
2d:83:b7:47:24:6b:74:42:b5:65:0d:02:18:80:fd:
91:ce:22:25:4e:75:02:04:c7:6d:dc:9f:9b:85:e6:
0a:43:f4:c6:44:93:22:4e:99:9b:22:bb:ca:e9:d0:
b9:66:9b:18:fb:87:24:6a:4d:36:4d:1e:f2:bd:99:
51:43:00:1e:f4:36:8c:aa:c2:68:89:d1:68:4f:b0:
db:f1:90:91:f1:ad:f0:82:3e:d3:b6:33:e0:28:59:
cc:e2:be:38:f8:eb:98:1f:5e:8a:40:cb:63:a1:3f:
69:3b:7e:4f:c9:cb:9b:f5:1f:58:5e:e8:7d:46:19:
01:9d:8c:b7:76:0b:c9:4d:52:15:80:b7:a0:0e:fd:
7c:8c:64:14:7c:e4:1f:d5:af:ef:ab:ae:8b:b7:10:
e8:9f:6a:04:e8:8f:d8:2e:6b:dd:e1:7a:18:45:2c:
cc:62:2b:f7:66:09:86:64:75:af:2b:f9:ba:46:ec:
60:37:9d:b1:ea:e6:05:60:d0:74:95:e5:73:24:ef:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:43:14:13:A7:D2:80:5E:D1:A1:38:42:BE:BD:00:26:0E:05:B3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GgNDFBOn0oBe0aE4Qr69ACYOBbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.204.0/24
185.230.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:0b:39:9f:f5:73:45:6e:37:c1:5c:41:c5:3c:40:5c:36:fd:
9a:de:14:19:06:be:6a:17:98:e4:2f:95:31:00:dc:ce:a5:c4:
91:e5:fd:16:6e:9f:88:5f:e5:f3:d6:34:49:ed:d6:8d:42:8a:
07:27:c0:92:58:35:04:46:d7:ad:4b:10:9a:fa:4e:a3:c7:4b:
7c:ab:d8:f9:a8:54:4f:62:e6:68:dc:4a:82:b5:05:48:67:fb:
bd:f5:bc:5f:0d:08:f3:ff:cc:27:1c:90:25:41:f2:70:14:ce:
98:a0:a1:7c:12:d8:1a:03:28:15:e5:66:b3:b3:cf:eb:db:94:
16:59:09:1c:c2:12:01:ad:6e:80:d3:ea:d8:9a:63:71:8f:17:
59:37:f8:77:66:55:b6:3b:85:e0:a7:6f:29:78:2c:23:ab:9c:
b7:e8:2c:da:a1:98:e1:63:6a:75:7d:f7:16:6c:78:9d:76:92:
9d:ae:8a:55:36:21:78:40:24:05:d1:8c:06:45:a9:52:10:48:
3d:f6:6e:0c:f7:bc:35:5e:fd:b6:52:b0:11:8b:36:70:5b:b9:
22:6e:55:e4:e6:93:67:6c:89:ed:af:e0:9a:32:da:90:48:28:
28:24:1c:70:36:73:0f:f5:92:08:d5:db:bd:6b:85:14:61:25:
47:f5:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:11 2025 by rpki-client