Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/GEWo1cG29J6lTfOB3lA5UaAG2sc.roa
File: GEWo1cG29J6lTfOB3lA5UaAG2sc.roa (raw, json)
Hash identifier: cPbBJlLFEKUJjeuiW1PQJQMoEsi1CvGxUXVlxI8pJto=
Subject key identifier: 18:45:A8:D5:C1:B6:F4:9E:A5:4D:F3:81:DE:50:39:51:A0:06:DA:C7
Certificate issuer: /CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Certificate serial: 01867ED07A2EB50A5EB2C7528F4917B433B3
Authority key identifier: 7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/GEWo1cG29J6lTfOB3lA5UaAG2sc.roa
Signing time: Thu 23 Feb 2023 15:07:17 +0000
ROA not before: Thu 23 Feb 2023 15:07:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 46.31.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:d0:7a:2e:b5:0a:5e:b2:c7:52:8f:49:17:b4:33:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Validity
Not Before: Feb 23 15:07:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1845a8d5c1b6f49ea54df381de503951a006dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:a4:6b:d4:af:0f:b4:a5:f0:4c:0e:67:3a:
60:d6:e3:ef:8d:d5:77:ae:33:df:69:31:06:5b:05:
76:2d:bf:d3:11:b4:a1:f3:9e:79:f9:8a:9a:05:8e:
56:3a:69:7e:83:00:2b:f8:b3:5a:97:4c:31:1a:41:
7d:2a:89:0d:af:0f:e1:f4:6e:98:bb:7c:84:8c:c3:
d5:b9:8f:75:9f:34:6b:c8:b0:2f:ed:4e:e3:7e:8a:
7a:05:30:31:59:a2:80:85:69:6c:33:17:8c:23:a1:
5b:32:99:39:7f:0c:a5:37:79:5e:1b:f9:98:f2:30:
95:a7:d1:7d:3a:9b:b7:4d:7a:94:1c:cf:a9:6d:8a:
8e:54:63:27:53:e5:7f:da:e3:85:f4:40:f5:44:56:
f3:f3:31:b4:be:a4:e5:a6:8f:35:4c:6c:2f:69:93:
74:47:68:27:be:8c:12:69:60:1c:b6:d1:f3:3c:0f:
21:de:76:27:22:3d:f1:ee:9e:04:dd:cd:fa:88:13:
51:66:50:94:85:b8:35:44:19:ce:7a:98:00:fc:17:
d9:d8:99:53:b8:cb:61:21:2e:60:49:bb:d9:36:83:
1e:84:8b:a0:04:6f:ae:ab:2d:18:6c:73:48:f6:b5:
ce:50:7c:2a:6f:0b:ed:3b:9b:be:71:f8:1e:1a:36:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:A8:D5:C1:B6:F4:9E:A5:4D:F3:81:DE:50:39:51:A0:06:DA:C7
X509v3 Authority Key Identifier:
keyid:7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/GEWo1cG29J6lTfOB3lA5UaAG2sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/fc-34Mu414ES0effkmHSDr7lvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.68.0/24
Signature Algorithm: sha256WithRSAEncryption
84:68:5c:f5:6d:6b:1d:7a:3d:93:ac:ee:dc:e4:5e:e5:0c:41:
0b:1a:7c:75:d1:db:18:cd:d0:39:f9:63:bd:03:f6:bb:da:fe:
43:b0:5d:d3:c8:57:00:4a:98:bf:aa:7e:e5:44:04:70:fe:44:
82:ee:aa:a1:59:71:26:df:84:cd:0b:2b:0f:6a:c5:f8:75:dc:
4c:ec:92:82:6f:80:6e:e2:75:ef:55:00:66:b7:89:ec:bb:d4:
7a:33:77:98:d9:33:3d:4f:99:44:08:7d:ba:31:ab:57:ab:14:
a2:93:39:1c:9e:3a:6d:c1:8c:11:89:cb:79:d2:50:c8:90:c4:
c3:5f:1d:ef:52:50:ea:c1:22:b8:cc:c5:b9:d3:f1:a2:dd:ac:
d3:3d:44:02:fd:93:f1:ff:68:4b:db:80:5d:14:7d:94:99:12:
3e:01:39:49:d4:ec:4e:57:85:49:06:10:a3:e6:27:f0:6e:94:
03:3e:eb:01:13:60:05:83:2d:ef:19:4d:49:50:c4:26:7f:0c:
14:39:1a:f6:6d:ff:14:d5:a5:f3:e7:ae:f4:f0:fd:cb:a7:90:
4e:cb:dd:31:12:5d:09:2b:ce:a6:5e:d9:3f:fb:2d:4b:9c:bc:
ae:13:1d:38:cd:f2:2d:64:5e:2e:21:f2:19:a4:6c:f6:40:bc:
20:09:8d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:40:39 2025 by rpki-client