Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa
File: gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa (raw, json)
Hash identifier: fy9tgSe6kfwMDX9Ibp9s7/6EtOy/O5uDNSQU1PskuXs=
Subject key identifier: 82:73:96:C7:A4:D9:26:AA:89:0D:51:60:20:43:01:39:70:2A:26:6E
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019427481943C68FDF82FA87D84D750E662D
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210987
IP address blocks: 195.230.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:19:43:c6:8f:df:82:fa:87:d8:4d:75:0e:66:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=827396c7a4d926aa890d516020430139702a266e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:ed:ca:e2:13:9d:34:88:42:7d:e3:b4:7b:
12:8b:4f:2d:4d:13:78:e2:71:ba:94:60:45:97:de:
ea:2e:72:07:07:cd:39:12:d7:fb:c5:f6:d6:1d:42:
0b:9f:4a:61:71:65:d3:1e:a5:b0:50:a0:4d:74:14:
b2:46:bf:5a:3d:57:f3:90:74:ba:2d:e3:43:8f:36:
c6:7b:87:02:e9:dd:70:4a:75:13:02:30:aa:15:79:
b4:06:ad:51:81:b9:79:3b:9b:4f:d0:61:b6:f5:44:
69:cd:37:57:a5:be:7a:d7:73:96:b7:cc:06:8d:92:
97:92:97:c2:72:37:a8:56:6d:3d:c9:45:9f:7e:95:
66:3e:24:c6:79:77:2e:b3:63:a4:cd:9f:66:59:07:
30:5f:7d:ec:e7:06:b0:10:ba:03:bc:9d:d9:85:27:
bd:58:7f:fa:c9:1c:ea:d9:32:23:b6:b3:f6:07:8e:
7b:a9:d2:a6:da:8b:c3:65:1c:f0:7e:79:11:60:9d:
71:96:02:2e:91:71:1d:20:7d:e0:b6:32:33:b1:08:
bc:3f:82:40:15:d4:49:b4:cf:05:19:e8:2d:46:c3:
16:41:57:62:4c:c1:4c:b8:dc:99:c7:67:f0:c7:d2:
8a:93:37:10:21:6d:e5:5a:ff:ca:df:e4:07:5c:0a:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:96:C7:A4:D9:26:AA:89:0D:51:60:20:43:01:39:70:2A:26:6E
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:56:39:d9:57:88:4a:c4:eb:d6:7c:96:25:10:00:fd:23:3c:
92:82:24:1e:59:07:f4:e7:92:39:eb:6d:cb:11:b2:0b:f3:af:
18:76:07:5d:1f:96:2d:69:d9:90:39:92:90:4c:4f:b0:d5:c3:
40:da:60:00:5f:67:64:e9:fc:e6:7d:b9:0b:d5:74:b7:fa:53:
26:44:ef:a9:5e:31:6a:4b:59:e1:99:6e:50:9f:54:43:81:7c:
a8:76:97:9a:bb:2c:d2:9f:5f:24:ae:c1:bc:11:97:a6:33:4e:
02:b6:1e:8c:ab:d4:84:76:b1:86:cb:dc:3b:0a:79:15:e3:28:
f3:7a:39:93:a8:2e:3e:54:43:b6:6f:42:8a:aa:13:d4:f7:ec:
c7:51:b2:20:21:70:fd:66:5a:d9:30:56:f1:87:36:00:79:08:
29:14:cd:aa:d9:ff:45:fa:f4:dd:02:f0:c3:f3:b7:7d:3d:22:
8e:17:d8:71:b1:3b:52:7b:5d:79:8d:2c:79:b7:da:55:07:57:
ab:63:86:dd:2f:42:0e:33:8c:8c:05:62:9b:28:33:e4:55:2d:
b7:4f:7f:fb:1f:a1:74:5a:26:47:11:18:28:d0:39:92:fb:c1:
35:e0:70:d0:36:c2:fa:71:00:9a:ba:25:90:57:8b:c6:30:48:
21:56:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net