
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/GUW7yMHSxMWKPOxBZPmYfJyT23c.roa
File: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (raw, json)
Hash identifier: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=
Subject key identifier: 19:45:BB:C8:C1:D2:C4:C5:8A:3C:EC:41:64:F9:98:7C:9C:93:DB:77
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B58D96BCD8EBD6A229C750AF8D69E
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/GUW7yMHSxMWKPOxBZPmYfJyT23c.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29622
IP address blocks: 83.222.176.0/24 maxlen: 24
83.222.177.0/24 maxlen: 24
109.160.14.0/24 maxlen: 24
109.160.15.0/24 maxlen: 24
109.160.72.0/24 maxlen: 24
109.160.73.0/24 maxlen: 24
109.160.74.0/24 maxlen: 24
109.160.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:58:d9:6b:cd:8e:bd:6a:22:9c:75:0a:f8:d6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1945bbc8c1d2c4c58a3cec4164f9987c9c93db77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:c1:0c:04:1c:3f:51:53:5c:a3:17:19:fb:
75:9c:b3:aa:de:e9:5f:54:93:2f:2c:be:a5:2d:c4:
b6:7c:5e:53:2d:1b:9b:5e:8b:63:39:d3:30:af:c9:
66:e9:c9:1c:4f:e8:67:dd:8d:10:64:b6:a6:b2:50:
a2:2e:60:fd:5f:30:c6:79:de:4a:87:2f:80:e0:1d:
d8:60:a7:62:fc:76:67:af:10:c8:c2:11:43:b3:f4:
ab:66:2f:79:44:c5:5c:32:db:de:12:42:c1:df:d3:
cc:13:d5:06:d2:08:e0:9f:d2:88:70:cb:1e:8d:03:
f4:e7:c6:6a:86:b6:81:85:1a:8b:1b:01:d7:85:f3:
a5:a0:86:6d:43:5a:ef:dd:ea:60:71:43:61:a8:7c:
21:2c:dc:43:1b:da:01:75:57:7a:c9:e6:c5:bc:1f:
eb:ab:60:53:16:43:1a:31:18:75:5f:65:10:78:ed:
ad:f3:3f:23:23:1c:b8:4a:b0:98:8c:3e:29:ad:c0:
a4:2a:2d:c0:7e:76:a6:87:ee:ee:57:43:eb:a8:0d:
f8:2b:22:7b:f5:a4:74:31:95:97:5e:2f:ab:29:f0:
2f:10:fc:68:24:bf:5b:6f:81:bd:f6:2a:db:be:ad:
24:30:24:9e:a5:98:97:09:ab:d1:5e:ab:f4:f2:30:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:BB:C8:C1:D2:C4:C5:8A:3C:EC:41:64:F9:98:7C:9C:93:DB:77
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/GUW7yMHSxMWKPOxBZPmYfJyT23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.176.0/23
109.160.14.0/23
109.160.72.0/22
Signature Algorithm: sha256WithRSAEncryption
02:8d:73:62:5e:e2:73:43:00:18:9e:21:4d:1b:0e:1f:23:87:
1c:5f:1c:4d:b3:fc:bb:97:75:9e:0d:a9:28:4d:aa:19:41:5d:
e3:58:c9:aa:04:a0:bd:25:a8:ed:f6:34:da:bf:de:e7:3f:a1:
81:1b:f9:63:03:9c:14:7e:be:84:1c:a4:83:be:da:aa:50:5a:
5f:bd:de:1e:2e:a2:54:eb:94:2a:a9:9e:a3:a9:51:7c:c6:61:
c1:b5:6e:c7:9c:24:a2:84:ab:e6:ee:9f:a0:15:b4:c0:8b:e7:
db:6f:f6:be:a0:16:50:29:3c:95:32:d6:7d:02:7b:0d:12:d2:
d4:37:82:04:ae:89:8a:7f:ac:32:ca:17:15:04:83:fa:6d:c5:
50:11:07:44:19:bc:34:36:60:a0:97:5d:0f:ba:c2:25:c4:04:
70:54:fd:80:83:b5:7e:9f:16:88:d8:c3:a9:8a:8e:32:5e:56:
f0:9f:82:5f:d1:40:af:46:00:4c:e0:e5:09:cf:d2:11:9d:88:
ae:86:32:d0:13:91:dd:dc:3e:67:aa:f1:eb:c0:0e:ef:3d:42:
46:b0:b0:b7:06:87:9c:d3:c5:a3:82:0c:4e:8f:0c:ec:f2:09:
d9:c9:a7:4d:df:f4:aa:0f:8c:ce:19:5a:eb:d2:92:98:9e:9e:
8c:84:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:33 2025 by rpki-client