Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa
File: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (raw, json)
Hash identifier: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=
Subject key identifier: 18:E5:C1:4B:E4:70:DC:7A:11:92:94:F4:B5:8B:4F:D8:A2:FB:12:93
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01942745BDF33783ABB13B9287B3B123C290
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa
Signing time: Thu 02 Jan 2025 13:47:49 +0000
ROA not before: Thu 02 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39500
IP address blocks: 185.154.68.0/24 maxlen: 24
185.154.69.0/24 maxlen: 24
185.154.70.0/24 maxlen: 24
193.47.191.0/24 maxlen: 24
2001:67c:1f4::/48 maxlen: 48
2a07:7f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:bd:f3:37:83:ab:b1:3b:92:87:b3:b1:23:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jan 2 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e5c14be470dc7a119294f4b58b4fd8a2fb1293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:02:b1:92:d6:60:d2:3a:53:c2:f9:ff:eb:
01:96:91:fe:c1:4f:96:3f:f7:bd:b1:b4:47:f5:f4:
69:66:63:35:bc:1b:a1:2e:3a:12:f4:b5:6b:f2:9c:
7f:c7:5a:83:44:40:30:f1:be:c7:5e:95:bd:41:c6:
f3:00:ac:99:b5:11:22:8b:08:e9:bf:41:e4:dd:df:
bc:b9:79:4a:f6:37:7d:52:60:bd:3d:8a:e5:90:9c:
04:ca:52:33:ec:ff:12:9a:d8:50:68:ff:c5:93:b5:
2a:37:51:9c:e4:7e:52:b5:96:89:28:c7:cd:8d:b6:
60:91:66:8e:7d:99:7d:34:70:c9:7c:4e:5b:f1:21:
c8:83:4d:23:87:e7:da:45:ee:34:23:78:c5:7c:75:
80:fc:5b:dc:15:49:38:a8:a3:f8:9b:e9:54:84:d6:
7c:22:1e:9b:51:61:67:29:81:28:bd:42:1c:45:e6:
eb:e7:fe:03:85:b3:09:b0:7b:09:6d:98:a6:d1:38:
1e:95:79:73:31:e4:35:a6:19:d7:9b:3d:45:88:d9:
50:4e:a5:3f:07:65:58:b2:9d:3a:ee:c3:ad:54:39:
82:5c:a5:7b:d4:84:07:57:4e:f2:d5:83:8e:b9:80:
c3:a5:91:0b:26:04:48:8a:ba:5e:02:4c:92:69:2e:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:C1:4B:E4:70:DC:7A:11:92:94:F4:B5:8B:4F:D8:A2:FB:12:93
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.68.0-185.154.70.255
193.47.191.0/24
IPv6:
2001:67c:1f4::/48
2a07:7f40::/29
Signature Algorithm: sha256WithRSAEncryption
62:d4:bb:8c:51:1d:d0:6f:80:e1:c3:4e:ac:44:19:8c:50:0a:
fc:12:8f:14:6e:60:76:de:c2:48:11:27:e0:df:88:a4:be:8f:
82:08:c7:57:82:fe:94:1a:3d:55:4c:4f:19:8d:fd:b3:5f:fe:
e6:95:d5:8a:ac:8d:17:8c:f0:38:43:9a:0b:85:5a:23:7b:f7:
b5:a9:4d:a8:2b:80:3b:ad:c1:14:37:6f:ee:c6:16:30:74:e7:
3c:ce:00:95:c5:4f:3a:42:49:2d:4b:b1:5c:c7:7b:7c:45:05:
e1:f3:d7:97:51:5b:28:b2:07:86:6f:19:b7:5f:bf:25:03:03:
28:85:2c:2f:ff:ab:64:3e:a9:46:3e:5f:2c:f5:09:9b:07:f2:
8f:6e:bd:82:f7:ad:e8:33:2e:6d:55:ba:06:95:42:d4:71:a3:
2f:ee:87:9d:98:d5:27:9f:6f:93:f5:a9:11:b0:54:6e:47:b5:
b6:8a:1b:cc:21:0e:5d:c9:d5:03:6c:06:dd:dd:0b:05:2d:41:
ca:93:0b:d7:84:03:ad:47:8a:fd:eb:5a:59:2c:89:a4:10:7d:
1b:5c:e4:32:c7:50:d4:70:f0:0a:2e:05:50:d9:67:e2:d1:3c:
66:ee:63:ea:8e:9d:e7:5b:af:60:61:8c:6c:b8:3d:34:53:33:
63:e0:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net