Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gkQebOj3H930t4ScTNMvn9su0ys.roa
File: gkQebOj3H930t4ScTNMvn9su0ys.roa (raw, json)
Hash identifier: OXg5sQqA6sqnt6I51SFkIi3PcrR3XlBxkAuZ04p28rI=
Subject key identifier: 82:44:1E:6C:E8:F7:1F:DD:F4:B7:84:9C:4C:D3:2F:9F:DB:2E:D3:2B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A328F3A98A03D2BB0A25D6D21F551
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gkQebOj3H930t4ScTNMvn9su0ys.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8860
IP address blocks: 45.67.19.0/24 maxlen: 32
185.133.72.0/24 maxlen: 32
185.166.238.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:8f:3a:98:a0:3d:2b:b0:a2:5d:6d:21:f5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82441e6ce8f71fddf4b7849c4cd32f9fdb2ed32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:8f:a2:c0:50:df:fd:77:61:83:2a:e3:af:
41:77:e3:f8:ca:a0:df:f0:70:e9:bf:97:15:ad:78:
54:4f:73:00:17:36:37:c4:ce:d2:a8:27:51:29:e5:
d0:f1:ad:42:5c:76:dc:d3:72:c1:5e:3b:20:42:ec:
90:56:b8:f8:fa:ca:61:87:02:fe:dc:59:e4:4b:31:
10:1f:00:d0:c3:bd:1d:34:81:98:26:51:ec:fa:50:
02:3e:6a:2a:d2:3c:13:fb:a6:e3:6c:1f:8e:5d:93:
f2:84:ee:18:ad:91:dc:73:d2:c5:7e:55:2c:8e:c5:
98:38:5b:df:c0:04:4c:a8:b2:92:e9:9a:6d:c9:89:
2e:29:bd:48:a4:3d:0b:f9:9a:7d:1c:d8:7a:f3:06:
db:91:fb:88:45:24:a1:28:31:54:a2:13:e8:29:91:
aa:b8:ac:45:c5:7a:d2:f0:6c:3e:34:b0:b3:ea:80:
99:d7:df:9c:22:dc:82:d9:14:d4:44:2b:02:57:60:
a7:90:32:98:1d:1e:bf:9f:c5:80:e7:c4:98:18:ac:
00:fe:a4:c8:b7:b6:fa:72:90:39:85:eb:9b:fb:47:
86:97:a3:13:a6:73:db:a7:e7:c0:15:d7:11:04:90:
72:58:0b:cf:d3:de:69:9e:48:73:3e:c3:73:20:41:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:1E:6C:E8:F7:1F:DD:F4:B7:84:9C:4C:D3:2F:9F:DB:2E:D3:2B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gkQebOj3H930t4ScTNMvn9su0ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.19.0/24
185.133.72.0/24
185.166.238.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0f:83:f6:e7:f2:65:69:d0:18:a6:3d:33:99:96:1c:20:b2:
01:98:c7:87:52:7f:bd:2d:71:e0:82:0e:4e:23:60:67:4c:eb:
8f:02:7f:98:7b:39:af:bd:86:b4:c6:6f:34:30:7e:6a:ce:2f:
32:41:6d:d9:20:9d:1e:90:d4:1a:44:ad:63:de:3d:d8:62:51:
81:da:f2:fb:49:17:1f:e5:51:ac:34:f6:9a:92:bb:82:cd:fe:
25:92:d5:21:a0:80:f1:ac:ee:71:f1:30:3c:d7:a2:6a:dd:a0:
1d:1f:ce:e6:c0:fb:f1:c3:1f:10:0a:6e:3e:c7:7a:29:53:9e:
a9:16:ab:ae:45:59:5f:40:ed:dd:0d:33:67:a4:a9:d7:8a:22:
ac:ba:b0:a4:5e:50:60:74:21:43:02:6e:a7:85:27:29:7b:99:
1d:31:20:ce:1d:83:3f:62:0c:93:d4:c1:01:60:6a:43:bb:00:
be:f8:e0:7b:28:2f:58:4e:2d:8f:ee:35:3d:f0:64:19:88:9b:
a4:ed:96:23:04:10:ae:7e:9f:00:72:9d:0a:db:a8:5e:35:b7:
07:85:c5:f8:fc:1f:af:0f:ab:f9:5f:e1:4d:0c:b6:7e:98:09:
cd:ff:37:79:61:76:bc:69:7d:b7:f5:04:45:3e:37:84:38:88:
40:e9:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:26 2025 by rpki-client