Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/gvdg3nbnowK3l34oM3ivsmGPYTQ.roa
File: gvdg3nbnowK3l34oM3ivsmGPYTQ.roa (raw, json)
Hash identifier: l2lhtAlLWGBWcRKDD2slAqmERM9KKhSPOx0UX7nwHOA=
Subject key identifier: 82:F7:60:DE:76:E7:A3:02:B7:97:7E:28:33:78:AF:B2:61:8F:61:34
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 04B6B91C
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/gvdg3nbnowK3l34oM3ivsmGPYTQ.roa
Signing time: Wed 26 Jan 2022 15:16:21 +0000
ROA not before: Wed 26 Jan 2022 15:16:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42473
IP address blocks: 185.94.28.0/24 maxlen: 24
202.61.208.0/24 maxlen: 24
202.61.209.0/24 maxlen: 24
202.61.210.0/24 maxlen: 24
202.61.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79083804 (0x4b6b91c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jan 26 15:16:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82f760de76e7a302b7977e283378afb2618f6134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:18:f4:57:5c:da:dd:61:27:7d:aa:ba:1b:
b1:d4:4e:ba:4e:12:7d:4b:42:ab:27:29:51:99:0d:
50:38:07:58:ea:96:8d:53:c1:b4:c9:87:f4:c6:18:
53:6f:c6:7d:e6:34:45:2d:10:e7:97:99:8b:80:69:
2c:8f:59:1e:ad:04:77:e0:d4:9e:d0:e5:5e:2f:85:
08:e1:1a:5e:60:62:fb:b2:18:74:a2:60:1d:9e:f7:
d5:48:84:cb:c1:a8:3b:cd:23:06:85:16:44:7e:be:
94:f0:fd:60:90:bb:0d:92:b2:51:fb:4c:3f:6f:65:
f7:79:62:9f:fe:1e:8d:3e:b1:32:14:c7:d8:22:2a:
24:78:46:3b:b9:a7:1d:69:c5:8c:c8:ff:93:bb:3a:
14:92:29:29:dc:87:e2:06:f1:ff:da:c0:68:6e:a3:
db:6b:f5:ad:ff:e5:f2:17:dd:03:ee:44:d5:68:91:
71:74:49:b9:8e:84:5e:da:71:94:d2:dd:6e:db:02:
8f:05:c8:0c:75:55:66:3e:6a:06:a2:a8:6a:0d:9d:
ae:21:a7:83:88:e3:a0:ee:b6:4d:36:50:c7:b1:b5:
54:2d:e9:95:3a:40:7c:de:29:fa:5a:4e:c6:41:c1:
4d:7b:9a:88:cb:80:b7:19:14:93:8a:f3:32:83:be:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:60:DE:76:E7:A3:02:B7:97:7E:28:33:78:AF:B2:61:8F:61:34
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/gvdg3nbnowK3l34oM3ivsmGPYTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.28.0/24
202.61.208.0/22
Signature Algorithm: sha256WithRSAEncryption
85:69:84:20:3b:c3:f4:7a:b6:65:3a:b8:f3:d4:f3:f4:12:73:
3d:81:04:3a:0b:2d:24:a2:6e:18:16:f8:2f:d3:17:9f:96:55:
db:6d:3a:c0:19:42:87:ee:a3:e6:4c:98:b7:4c:51:71:45:ab:
6b:55:06:74:d6:d7:68:06:44:c2:10:31:24:de:4f:65:91:19:
ee:60:91:9a:4a:07:3b:44:ec:87:b4:eb:2c:22:ef:56:37:b7:
1a:b4:22:2e:80:64:25:71:82:74:6f:5b:5d:0b:e0:cf:69:81:
1b:9d:35:2a:16:b4:42:bd:f2:49:25:19:12:8f:3e:f3:91:f4:
13:f7:d4:59:5e:12:95:df:45:19:32:d5:5e:77:4f:2c:96:ca:
7d:1e:0e:97:8f:f8:60:f2:03:2d:47:5d:5c:6f:05:8a:43:a1:
92:e1:ba:0a:09:a7:76:5e:9d:37:51:bd:3e:f9:46:76:2c:cd:
a9:d9:3f:ff:2c:78:d1:c0:3a:47:4e:0b:22:36:8c:f9:96:8c:
bf:9d:80:75:c5:54:a0:65:67:1a:2f:bc:7b:f3:25:13:d7:12:
fa:49:78:4d:1f:e0:07:5a:d5:ea:8d:9b:5a:a1:b8:d4:c6:80:
7e:23:24:d6:01:7c:e1:8c:2c:f4:c6:7e:61:c9:39:61:3b:2d:
dd:aa:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:15 2025 by rpki-client