Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/GshRjDb-Zbu23RojTPd3mMvH0TM.roa
File: GshRjDb-Zbu23RojTPd3mMvH0TM.roa (raw, json)
Hash identifier: EGZWJCBjjnCz3hB33ujglwfZC/yWBu1E05nBP8l/bQM=
Subject key identifier: 1A:C8:51:8C:36:FE:65:BB:B6:DD:1A:23:4C:F7:77:98:CB:C7:D1:33
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019421B1C63CB3C05AED9F1340EC38E8781C
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/GshRjDb-Zbu23RojTPd3mMvH0TM.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42381
IP address blocks: 212.237.194.0/23 maxlen: 24
212.237.194.0/24 maxlen: 24
212.237.195.0/24 maxlen: 24
2a01:3f6::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c6:3c:b3:c0:5a:ed:9f:13:40:ec:38:e8:78:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac8518c36fe65bbb6dd1a234cf77798cbc7d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:b6:29:87:fc:86:7a:c7:f5:af:21:48:5c:
a1:4a:aa:d2:38:bf:05:35:b6:51:02:0e:02:34:a5:
97:a3:fe:ce:d2:f4:bf:18:31:9d:44:75:9d:2d:2c:
e4:41:2c:a9:94:6f:e3:cb:74:2c:da:a1:f4:08:20:
ed:27:44:95:9d:94:30:73:96:04:3b:07:c0:e1:6a:
c0:12:b2:2f:66:47:fd:16:6e:4e:50:e0:26:bc:bd:
ad:4a:ba:a4:6b:40:96:a4:40:ce:10:12:29:cb:f9:
87:b5:11:18:f0:3a:6e:71:26:10:4b:6f:e1:af:9c:
d5:00:70:ba:02:6d:62:a3:15:f4:c3:d9:f6:f2:ac:
e4:ab:4d:92:1f:ec:96:60:87:24:05:71:ee:08:27:
a6:56:da:6a:8c:3b:5a:85:57:aa:9b:5a:ad:cd:f4:
19:a8:4a:72:dd:42:c9:39:e5:87:45:d1:1d:b2:d5:
71:4c:54:fd:5a:8a:e9:89:2d:a4:21:45:d6:c5:19:
5f:4e:ea:6c:29:6c:8b:6a:e3:ba:af:a1:e1:a1:f5:
83:a3:a2:56:48:04:68:cf:21:79:a9:38:f4:8d:c5:
2a:86:cd:ed:1c:96:8a:19:94:d9:57:55:dd:7d:cf:
a3:03:8c:f3:63:89:17:36:0a:ef:05:80:ab:07:0b:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C8:51:8C:36:FE:65:BB:B6:DD:1A:23:4C:F7:77:98:CB:C7:D1:33
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/GshRjDb-Zbu23RojTPd3mMvH0TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.237.194.0/23
IPv6:
2a01:3f6::/32
Signature Algorithm: sha256WithRSAEncryption
a2:31:4a:30:57:40:c1:d8:12:d1:96:59:13:83:40:e3:91:da:
26:27:86:a7:e3:97:03:25:6d:f8:5b:75:0b:9a:f1:03:8b:72:
14:72:29:7f:9d:67:81:90:6a:ea:7b:65:25:36:b9:24:31:20:
4e:5e:e8:df:29:b5:e2:e9:e3:b9:b5:3c:71:ad:ba:ff:22:e6:
9a:bd:ce:17:c6:5d:b6:8c:67:fc:60:df:fd:06:63:9d:5a:2d:
a2:20:05:ff:27:19:1c:5d:c1:20:a8:6a:18:26:c3:6a:e9:84:
9b:e4:3d:25:e3:a4:a3:c3:3b:ad:6d:54:53:a8:cc:20:11:52:
3a:11:e7:30:70:f9:88:30:92:d3:57:b8:4f:bb:72:0e:3f:3f:
bc:ab:ff:4f:d4:c2:83:54:cd:f9:c2:f6:be:e6:88:79:9b:d6:
f0:0e:e0:58:f4:e8:40:a7:90:03:92:d1:e3:bd:26:2e:cd:ad:
1c:97:68:63:69:95:fe:b4:b3:4c:c1:09:5f:3d:df:9e:c0:4d:
ea:84:c9:33:7e:40:a5:b0:2c:cc:19:64:db:21:fa:f2:fc:3a:
80:c7:33:ed:66:28:9d:fb:0d:dc:08:cc:b3:d9:d6:d2:2c:71:
76:d5:32:82:e5:96:46:d4:54:8f:e4:6b:42:97:04:b6:36:48:
53:d0:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net