Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/gKF90cX1b_0EcZHepHCtkPimv18.roa
File: gKF90cX1b_0EcZHepHCtkPimv18.roa (raw, json)
Hash identifier: lE05MIQ61LnIo3S7DkckU6VKpKshrtCghC4LauCADf0=
Subject key identifier: 80:A1:7D:D1:C5:F5:6F:FD:04:71:91:DE:A4:70:AD:90:F8:A6:BF:5F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F8EF86B02A29D5AA1AB2E13E1E40
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/gKF90cX1b_0EcZHepHCtkPimv18.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35048
IP address blocks: 31.40.203.0/24 maxlen: 24
45.142.252.0/23 maxlen: 23
212.115.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f8:ef:86:b0:2a:29:d5:aa:1a:b2:e1:3e:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a17dd1c5f56ffd047191dea470ad90f8a6bf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:6d:cc:18:a5:b6:63:de:9e:b9:9e:1e:ee:
06:00:b5:d3:a4:88:db:d4:d1:36:6b:68:64:cd:87:
78:b7:27:6c:64:16:44:cd:9d:16:9e:15:36:f0:bd:
0a:18:ea:1e:e3:c9:13:14:eb:6a:64:d6:9f:e0:21:
fc:5e:c9:1a:f3:69:b6:cb:b6:19:99:48:a6:1b:e8:
1e:eb:1f:99:1a:e2:35:72:9a:28:92:99:fb:6b:da:
a8:ff:57:5a:41:72:29:d5:13:e8:5d:75:70:ec:c2:
d8:67:ed:b9:51:ff:cc:01:34:fb:5a:12:98:be:af:
1a:6a:0d:4f:8b:4e:c1:9d:3c:b4:43:4e:ec:1e:70:
ab:98:cc:86:53:01:04:43:b0:f7:a8:70:b6:f0:4f:
d6:b2:46:49:c8:8d:ce:e2:68:d2:4d:f2:4a:b9:f9:
ae:cf:e5:82:44:b3:2d:2f:0d:2a:4c:aa:ac:20:16:
20:f3:63:ab:d7:2f:19:df:55:0a:3b:31:ab:44:02:
7a:90:97:46:58:90:73:73:e2:6e:05:1e:0f:7a:e0:
44:9c:2f:dd:cd:37:c4:32:11:93:b2:29:31:08:07:
62:a7:1f:b9:39:32:2c:78:5a:64:ff:2b:cf:85:d3:
47:70:5d:c4:aa:01:47:48:3b:ec:dc:e0:0b:9e:c3:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A1:7D:D1:C5:F5:6F:FD:04:71:91:DE:A4:70:AD:90:F8:A6:BF:5F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/gKF90cX1b_0EcZHepHCtkPimv18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.203.0/24
45.142.252.0/23
212.115.49.0/24
Signature Algorithm: sha256WithRSAEncryption
46:97:56:f0:16:3f:ab:77:8b:0b:ed:36:47:56:ac:73:ca:74:
b6:c6:25:f3:a3:d4:9c:d0:1f:8a:55:d4:15:a5:31:87:7f:75:
9a:97:3c:8b:fb:51:d5:13:39:e3:ab:80:e3:e2:cc:c7:3b:4a:
26:61:23:6c:8f:7d:03:06:1d:ac:99:ac:79:2f:84:27:b3:e7:
ed:b6:41:c6:e4:b4:2b:de:1c:b0:c0:4d:ff:01:2f:bb:03:4f:
cc:52:09:8d:29:86:fd:1a:d8:33:b2:26:cd:bf:c3:0f:4d:d7:
2d:0f:cb:69:c4:0b:5c:63:7d:6a:9e:46:b8:7b:ab:d2:84:1a:
96:7e:82:59:88:d0:a8:c4:62:23:11:2b:c9:15:1a:cc:ec:a1:
89:bf:18:17:78:57:2e:45:14:e3:18:f6:3e:d0:37:11:9c:e1:
51:61:b3:0f:01:30:55:b1:6c:84:2f:cb:23:89:2c:1f:49:38:
1b:67:37:b1:3c:e7:c8:c9:09:05:ea:e9:24:1e:ca:52:ca:fb:
ac:4c:93:2d:a4:86:0d:8d:22:21:14:4f:50:0f:35:91:e1:e7:
a3:e9:b2:07:6c:c2:83:9c:05:02:09:d1:5b:8a:9c:68:95:28:
e5:02:30:6f:00:2e:f5:57:ae:9b:0b:82:4c:7a:09:46:81:ca:
3b:97:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:42 2025 by rpki-client on console.sobornost.net