Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gcfZoW3tj67L9fRYIoOLZvRPiLo.roa
File: gcfZoW3tj67L9fRYIoOLZvRPiLo.roa (raw, json)
Hash identifier: FZJvJjso+xyMXjqMRH8TBmZvJStGSTK8ji9wvqIVa+4=
Subject key identifier: 81:C7:D9:A1:6D:ED:8F:AE:CB:F5:F4:58:22:83:8B:66:F4:4F:88:BA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB00A19D3BFBE290950F8E9441B244
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gcfZoW3tj67L9fRYIoOLZvRPiLo.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199470
IP address blocks: 194.103.162.0/24 maxlen: 24
194.103.176.0/24 maxlen: 24
194.103.184.0/23 maxlen: 24
194.103.182.0/24 maxlen: 24
194.103.180.0/24 maxlen: 24
194.103.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:00:a1:9d:3b:fb:e2:90:95:0f:8e:94:41:b2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81c7d9a16ded8faecbf5f45822838b66f44f88ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:8e:0f:42:9d:be:df:5f:73:30:b7:b6:3b:
fb:8b:f4:f1:1a:d0:68:18:d4:d4:19:0b:0a:d9:87:
ff:93:86:3b:99:4d:2a:ab:aa:f7:63:d8:83:e5:8f:
5e:18:d0:2d:58:0d:fd:85:0f:25:a0:21:19:ff:1f:
bc:29:95:c9:11:76:44:ef:82:57:43:56:26:55:a7:
91:5c:05:c8:21:26:64:23:60:36:d5:39:02:f1:6e:
55:30:85:38:26:be:43:49:0c:33:c1:8a:e0:b2:81:
e2:84:b5:8e:84:77:ce:93:4a:24:8b:59:da:3b:66:
a3:4c:1e:e3:b2:2b:25:a7:c3:6f:b5:5b:87:cd:aa:
c7:1b:ec:83:2a:69:9a:26:28:5e:cc:de:af:94:07:
4b:6a:c8:48:d9:93:5d:82:da:be:51:3f:8b:47:f0:
f8:cd:96:17:84:e0:50:da:b6:39:a3:ce:87:c0:d7:
ae:e7:a9:d5:b8:ea:0a:44:ab:c8:ec:17:1b:70:5a:
3e:82:f9:35:4d:af:81:3d:46:bb:5d:9c:c3:52:74:
2e:38:0e:9c:3f:e3:ee:ff:58:34:17:b3:e8:1f:f1:
85:92:cb:3e:7b:2f:b8:d6:f0:1b:44:de:40:ec:79:
4a:ca:89:24:21:0b:5e:1b:86:a7:51:bd:07:45:54:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:D9:A1:6D:ED:8F:AE:CB:F5:F4:58:22:83:8B:66:F4:4F:88:BA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gcfZoW3tj67L9fRYIoOLZvRPiLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.162.0/24
194.103.176.0/24
194.103.180.0/24
194.103.182.0-194.103.185.255
Signature Algorithm: sha256WithRSAEncryption
ad:28:38:b7:c4:48:05:24:90:54:1e:29:84:e5:e9:f7:5c:ea:
4c:c5:06:95:ad:59:e3:db:c7:ce:23:42:df:f6:24:99:d6:19:
2e:7d:28:57:d6:cf:3f:88:e0:be:18:58:6f:6f:c7:b1:fa:e2:
5e:58:35:84:d0:7f:96:79:90:21:54:19:d3:ef:b3:17:59:61:
df:f6:aa:c9:25:2a:63:89:79:95:87:56:e9:4c:1f:fc:14:d4:
f1:60:ef:13:ce:57:17:47:f1:e1:d1:cd:49:4f:e4:34:f3:7e:
f8:e5:c1:ad:30:26:37:f1:ea:6c:cd:af:39:0e:15:c3:da:6d:
c9:01:b5:77:83:97:9e:db:77:c1:c9:25:88:a2:fb:5e:0e:2c:
a9:0a:12:e9:ec:6f:af:0e:98:11:12:c7:fa:d0:4c:90:e8:4a:
c4:6f:9a:28:53:e1:4d:8e:28:14:cd:65:e7:a6:64:8b:cb:f1:
ab:72:55:2e:e9:5b:a7:e9:14:33:31:88:0f:e7:d9:72:5c:c9:
6d:de:36:c9:be:cb:04:84:d6:e3:f0:b7:09:bf:72:62:c9:cd:
8c:3c:3c:e0:ef:2b:d5:4c:7a:4a:e1:ae:c4:5f:51:55:7c:58:
ff:d2:70:bb:6f:b2:83:31:5d:d4:90:f2:95:ab:02:24:7b:6e:
1d:3e:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:10 2025 by rpki-client