Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/GZjSOnB4gmRixRUprMjOv5N1HIA.roa
File: GZjSOnB4gmRixRUprMjOv5N1HIA.roa (raw, json)
Hash identifier: aP0O5zcRedW+P5IjJXhfz9hTK+JUBqfjuiQfuTF0iLI=
Subject key identifier: 19:98:D2:3A:70:78:82:64:62:C5:15:29:AC:C8:CE:BF:93:75:1C:80
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA2ED97CD407D37C6774A62FBDD810
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/GZjSOnB4gmRixRUprMjOv5N1HIA.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 157.97.122.0/24 maxlen: 24
185.89.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2e:d9:7c:d4:07:d3:7c:67:74:a6:2f:bd:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1998d23a7078826462c51529acc8cebf93751c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:bf:8e:21:61:fb:0d:ca:f4:d8:16:24:f5:
1a:5f:83:c9:a0:8c:c1:32:82:32:cf:5c:ad:a4:b8:
09:06:9b:7a:88:5a:1c:88:b2:a2:0c:37:54:3c:74:
92:b2:32:6a:9c:b1:c8:56:28:6a:3a:e9:47:d7:84:
09:5d:7a:9c:38:98:82:4d:7a:d0:1c:50:4e:b9:18:
3f:53:ec:26:d1:4d:45:30:4c:f2:ce:23:c7:1f:34:
09:8c:26:bc:a4:fd:c3:e8:88:a6:13:26:da:07:51:
8e:e5:b8:91:91:dd:99:13:c7:b0:cb:ed:b0:29:e5:
07:e5:dc:c4:20:c3:a1:d3:f8:83:8f:23:5a:db:0c:
11:75:8f:10:44:78:d4:8e:00:ec:70:14:12:87:f8:
0d:09:60:dd:56:fd:8b:73:5e:db:f5:18:b2:84:af:
f1:8f:91:7f:c8:79:59:a7:04:35:6f:63:28:c6:69:
b8:c8:a4:00:0a:ad:dd:b2:ab:cf:3d:f8:4d:7e:d8:
6b:b6:f7:ec:4b:af:94:1c:09:90:55:bf:24:54:6e:
80:2c:4b:03:32:bd:31:9d:fc:85:40:ef:20:60:14:
c1:33:9c:a4:49:f9:47:6b:db:3e:38:be:a9:4f:4c:
c5:43:94:7d:e6:08:27:26:ed:29:ed:f8:9b:be:8b:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:D2:3A:70:78:82:64:62:C5:15:29:AC:C8:CE:BF:93:75:1C:80
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/GZjSOnB4gmRixRUprMjOv5N1HIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.122.0/24
185.89.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:23:c1:c3:5e:d9:dd:4f:7a:e7:d5:d6:d9:dd:b6:2c:d2:ef:
a0:a1:b2:bb:a0:57:7d:bb:33:03:00:61:af:b2:cd:79:22:32:
6d:58:b1:87:d2:a5:07:fe:52:7d:61:ce:91:dc:9a:ca:fc:2b:
37:62:d5:e8:e3:13:dc:f8:40:9d:44:1e:17:a8:1e:b7:20:56:
f4:f8:16:17:a0:30:04:76:5e:bd:09:c9:f4:c2:53:22:a5:3d:
a3:5c:d7:1f:a6:ea:f6:8a:f2:6e:ea:f6:88:45:81:f5:7b:f9:
d2:89:c6:a6:f2:85:a4:54:a6:98:17:96:5e:5c:36:36:df:7a:
b4:6c:82:79:ea:c0:56:02:3e:1b:b3:d4:28:bd:cb:e5:d2:3d:
11:ff:e9:ca:a5:73:15:c9:c3:fe:7e:09:bd:76:8b:43:08:84:
7a:66:9e:09:d7:c7:4c:c1:3d:c8:d4:cb:c6:c0:8d:65:40:d4:
e7:53:01:3c:22:77:b1:af:2e:53:09:31:6d:42:c6:fa:3b:6b:
66:fe:b6:3c:81:db:b0:29:b6:de:5c:a7:d2:75:76:9c:c6:eb:
b2:a0:ca:d3:5c:a5:d1:9e:72:c0:f3:6f:d2:99:10:3d:14:79:
16:00:37:7b:93:8d:ac:2a:27:28:71:a8:ea:0b:f4:f9:7e:55:
23:7c:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:47:12 2025 by rpki-client on console.sobornost.net