Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/GcwznvOYgf-O_ItmFmcLriyXzrs.roa
File: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (raw, json)
Hash identifier: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=
Subject key identifier: 19:CC:33:9E:F3:98:81:FF:8E:FC:8B:66:16:67:0B:AE:2C:97:CE:BB
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C1A701213E5045561332AB4849297
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/GcwznvOYgf-O_ItmFmcLriyXzrs.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29177
IP address blocks: 194.20.142.0/23 maxlen: 24
194.20.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1a:70:12:13:e5:04:55:61:33:2a:b4:84:92:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19cc339ef39881ff8efc8b6616670bae2c97cebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:6d:da:6b:4a:49:d4:a0:e1:b8:ed:bd:51:
01:cd:bc:2f:37:4a:c6:f0:cb:df:b6:0d:1f:1f:75:
91:62:5f:79:eb:df:92:06:10:06:80:46:1a:b1:96:
3e:70:2b:61:8e:89:88:c9:04:64:63:bb:65:ad:d5:
d0:24:63:8e:b9:52:9f:04:e4:6a:83:19:5c:0e:ea:
8d:df:1d:53:97:f6:11:99:df:be:eb:5f:84:91:14:
29:95:ba:da:21:3e:ae:df:e8:38:6a:e0:e1:c6:9a:
3b:67:ed:15:64:f7:bb:5c:8b:85:a3:bb:49:e0:f1:
f9:6e:ca:ce:2f:3a:71:e2:87:5d:13:d8:f1:5f:c0:
45:80:5b:01:cb:42:c4:b1:b8:a3:26:d5:ee:5e:1d:
55:47:e0:9d:ae:2b:85:ec:26:b3:a4:4b:e7:70:75:
c6:26:b6:40:23:ae:11:d1:70:74:e4:01:8d:f0:a2:
5c:e8:b7:33:00:4a:f4:a3:81:7d:25:a2:39:e6:3a:
bc:3b:de:d1:1f:2f:cb:1b:ea:07:76:4f:3d:ec:bf:
0b:08:e1:43:ad:ef:e0:9d:60:a0:ff:bc:0d:43:ff:
58:67:4e:4d:e7:7a:19:7a:cd:df:b7:3e:82:72:83:
3c:05:58:79:4a:10:f2:de:5e:23:5e:b9:43:74:a7:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:33:9E:F3:98:81:FF:8E:FC:8B:66:16:67:0B:AE:2C:97:CE:BB
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/GcwznvOYgf-O_ItmFmcLriyXzrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.142.0-194.20.145.255
Signature Algorithm: sha256WithRSAEncryption
6c:b1:70:c0:0f:af:2f:b5:8b:75:73:80:4d:14:7d:8c:90:28:
e0:94:db:66:c7:12:61:43:e5:38:d7:48:05:52:ca:c5:38:90:
d2:5d:34:43:4c:d8:f5:1b:70:0a:ee:05:9c:57:7b:06:fd:a1:
cf:ac:e3:20:97:db:b3:c7:f4:58:26:7e:76:0c:dd:21:09:43:
48:51:46:89:3e:aa:03:3b:2c:21:4f:02:25:58:ef:70:21:69:
54:ba:0a:27:41:83:2c:b6:07:6b:6c:63:a7:66:a6:83:d8:43:
53:ec:ec:17:1d:cf:d9:cd:c0:4e:0e:ab:0f:57:48:cc:7e:5e:
19:38:f7:7b:6d:4a:94:0b:d6:6d:77:e9:51:7b:c5:7c:f7:7d:
25:b1:4f:db:4b:70:8e:c7:57:a3:7e:37:b9:84:8c:53:dd:be:
6d:8b:bc:76:51:82:15:ff:92:bd:dd:e9:0d:9b:f5:74:15:df:
ac:3f:52:1e:51:f0:17:93:86:33:1d:ff:b9:72:d5:21:ba:34:
48:27:c5:3a:97:91:ac:51:b7:4a:0a:21:ba:73:d9:d6:1f:bc:
ff:30:96:77:4a:4a:ff:b1:c9:8b:b1:22:0e:b6:c1:e8:40:54:
74:51:7d:00:d0:ea:cc:a9:54:20:df:7d:36:48:25:20:7b:63:
28:91:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net