Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/GgsWPeSLOUohaMbTcn2R72DKvqo.roa
File: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (raw, json)
Hash identifier: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=
Subject key identifier: 1A:0B:16:3D:E4:8B:39:4A:21:68:C6:D3:72:7D:91:EF:60:CA:BE:AA
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019426D95C378768AC6735829B1C8C4A1DBA
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/GgsWPeSLOUohaMbTcn2R72DKvqo.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42
IP address blocks: 194.0.47.0/24 maxlen: 24
2001:678:78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5c:37:87:68:ac:67:35:82:9b:1c:8c:4a:1d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a0b163de48b394a2168c6d3727d91ef60cabeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:0b:97:96:37:1c:73:a9:3e:0f:bb:69:31:
a0:93:6b:dd:dd:b3:a8:16:36:13:71:8c:12:69:92:
37:f2:c7:72:73:13:e4:bf:c9:e3:35:12:6a:19:1e:
70:75:fd:55:ac:54:f1:11:5b:43:e1:9f:07:a7:42:
0a:bf:86:eb:75:6a:6b:37:c8:b6:e7:06:9b:d7:49:
d7:21:e0:70:ee:77:6b:ce:7d:1c:62:d4:6a:0b:0c:
39:2a:1c:42:d2:ff:8c:ba:dc:45:ae:76:00:1a:ce:
08:fe:d0:c6:5c:1b:6c:02:17:ef:28:64:47:b5:33:
fc:d2:9e:fb:18:7b:24:19:0b:ef:01:48:2c:f1:de:
3f:3d:aa:5b:aa:0e:ce:01:f7:30:8d:49:8b:5f:49:
d8:95:70:bf:b7:5c:ea:5e:b6:19:40:90:a5:04:4c:
88:08:dc:33:88:a8:e3:18:6f:da:fa:34:6f:71:e0:
f8:80:24:15:78:2f:47:a9:96:be:2d:2a:23:2e:ce:
50:d3:2b:ed:b2:dd:6c:18:6f:02:01:86:aa:30:18:
43:cb:2d:c5:1b:d8:e2:9f:03:a1:22:d9:05:93:9b:
d8:b9:91:9c:2b:60:d6:00:9d:f2:66:ee:01:2d:04:
b3:2d:94:78:7a:95:01:3f:eb:ef:26:24:ff:e0:4c:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:16:3D:E4:8B:39:4A:21:68:C6:D3:72:7D:91:EF:60:CA:BE:AA
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/GgsWPeSLOUohaMbTcn2R72DKvqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.47.0/24
IPv6:
2001:678:78::/48
Signature Algorithm: sha256WithRSAEncryption
12:d5:05:1b:c0:2c:c1:64:0b:30:77:52:d1:1c:27:e6:59:18:
8e:b6:e6:6f:fd:e5:a2:79:93:eb:26:ca:92:20:95:c6:df:da:
e5:3b:2b:97:a3:00:dc:d8:eb:bb:f4:90:da:00:98:6c:f7:c8:
50:f9:6b:27:4e:98:9b:47:a0:7f:46:ee:2e:e2:4a:21:fd:d2:
d9:5d:00:2c:25:aa:5d:62:8f:f5:c6:a9:c5:47:32:49:7d:92:
5c:05:d1:81:97:ff:79:e9:94:3a:e8:20:b8:49:4a:93:ce:36:
60:1e:d3:c2:48:ac:94:b6:db:d0:d0:92:d4:96:85:18:f3:bf:
85:79:d0:b4:4f:b8:70:80:ad:64:7c:5d:78:e3:9b:31:91:3f:
86:8f:e7:ad:b1:60:3e:80:c1:22:08:f6:f6:8c:1c:ed:56:60:
a1:6b:07:b4:d2:22:ac:ca:a0:52:24:6a:46:7a:11:38:bb:eb:
b1:43:b7:e0:22:d6:ba:37:41:1d:bf:b0:32:8d:93:28:c4:70:
f3:37:1d:c5:13:d9:a8:e5:f3:a3:4f:4e:e5:55:a3:c3:75:c7:
8e:d7:14:43:7a:0d:f9:c5:b4:8d:6f:82:a9:94:3a:e8:e9:e3:
69:ce:15:a2:8e:58:18:b1:1c:12:1e:a2:1b:5f:97:4e:bb:25:
e8:09:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:14 2025 by rpki-client