Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/GZX9i-HRMaT6MqHVVmOTqhellQY.roa
File: GZX9i-HRMaT6MqHVVmOTqhellQY.roa (raw, json)
Hash identifier: a0ix4MDtq6NeGk+1fgIRdECC151mYwE5QVFiNEdB+/8=
Subject key identifier: 19:95:FD:8B:E1:D1:31:A4:FA:32:A1:D5:56:63:93:AA:17:A5:95:06
Certificate issuer: /CN=9cadd52cb6db8e50ea3b6962a92e2793026e52ac
Certificate serial: 01882086B6565359CCE6AB5E6531C7F46495
Authority key identifier: 9C:AD:D5:2C:B6:DB:8E:50:EA:3B:69:62:A9:2E:27:93:02:6E:52:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nK3VLLbbjlDqO2liqS4nkwJuUqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/GZX9i-HRMaT6MqHVVmOTqhellQY.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.26.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b6:56:53:59:cc:e6:ab:5e:65:31:c7:f4:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cadd52cb6db8e50ea3b6962a92e2793026e52ac
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1995fd8be1d131a4fa32a1d5566393aa17a59506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:e9:6e:a1:56:a8:9c:21:cd:57:8c:98:ca:
e1:ef:00:3b:df:b5:ff:c2:19:60:37:d9:0c:80:46:
7f:7c:bc:bb:dc:fd:39:0e:eb:d4:de:b5:73:a9:b9:
40:dd:84:a1:ba:f5:f2:41:dd:e0:b6:c9:b4:2d:f2:
48:51:c6:19:1a:03:8b:cd:d6:11:07:52:0c:bd:c7:
38:d3:42:58:6f:0b:89:fb:4b:8d:f0:51:a2:4b:be:
0f:9b:ce:28:f0:96:b5:c8:4c:5b:3f:66:a7:1d:ff:
b4:c6:32:48:08:c2:c4:a3:1f:69:1c:d7:be:34:0f:
30:5a:9c:d3:61:d5:f8:fe:dd:22:78:a5:55:ec:a2:
74:7a:d4:64:c9:3d:2a:69:d3:ee:96:ba:52:fc:6a:
09:ef:db:df:14:3e:74:35:8f:45:4c:20:50:92:69:
75:a1:98:cc:4f:08:1b:e8:c0:c9:5c:b9:53:f0:47:
10:e0:f7:49:fa:2f:6b:da:a5:45:b5:6d:18:66:18:
eb:ce:85:c3:d4:29:6a:c2:b3:4a:21:f6:2b:5c:3c:
bf:76:86:42:d6:92:be:3d:9b:1b:8b:f6:47:d0:f5:
6e:d3:79:77:4b:4e:34:37:92:94:64:27:f9:6d:13:
b1:43:85:8b:fc:bf:97:dd:fa:d2:52:7d:13:3b:dd:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:FD:8B:E1:D1:31:A4:FA:32:A1:D5:56:63:93:AA:17:A5:95:06
X509v3 Authority Key Identifier:
keyid:9C:AD:D5:2C:B6:DB:8E:50:EA:3B:69:62:A9:2E:27:93:02:6E:52:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK3VLLbbjlDqO2liqS4nkwJuUqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/GZX9i-HRMaT6MqHVVmOTqhellQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/nK3VLLbbjlDqO2liqS4nkwJuUqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:11:d2:58:d8:5d:ec:29:c9:c1:6a:35:01:33:82:69:a1:98:
79:62:16:be:d3:ad:59:80:a4:2c:2b:ed:81:a7:99:60:51:04:
2e:85:5c:48:2e:e0:bc:71:fe:af:95:d1:58:65:73:d1:b0:3d:
39:99:e7:f4:e2:c3:0f:92:7e:e2:4c:da:58:49:73:c0:70:8d:
16:9a:e1:6b:cf:00:a6:12:8e:4b:00:d0:90:c3:64:1a:a9:81:
c2:80:f4:28:af:8e:ef:5a:c6:c7:92:76:26:96:4b:71:88:b3:
8e:53:2c:b1:5e:21:fb:7f:88:c1:e9:48:df:c9:13:00:ab:f7:
da:6d:87:fc:6c:ae:01:e5:8e:a4:d0:87:56:08:79:38:c7:dc:
68:23:43:c1:b3:2d:93:68:52:e4:20:50:9f:ce:84:dc:4d:01:
a3:26:de:78:f2:81:ed:f2:db:3a:39:48:42:9f:04:f4:0f:88:
3c:69:e8:0e:fd:96:f2:01:16:01:13:18:0e:9c:f8:9f:51:8f:
0a:8d:67:80:06:f1:1a:7e:5a:6c:da:48:f9:fa:df:ec:ae:96:
51:c8:1d:47:a3:c2:10:21:5b:e7:d0:60:6c:77:94:be:21:36:
08:50:20:7f:a7:f7:f2:56:4b:db:58:9e:02:1f:3a:fa:c0:65:
4b:7b:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:24:19 2025 by rpki-client