Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa
File: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (raw, json)
Hash identifier: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=
Subject key identifier: 19:B7:CB:D5:9A:DF:45:59:B0:B2:82:09:84:FA:3D:AA:6F:1D:90:55
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 019426D941E568423607485812B7F7B54F7B
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa
Signing time: Thu 02 Jan 2025 11:49:19 +0000
ROA not before: Thu 02 Jan 2025 11:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 185.31.0.0/23 maxlen: 23
185.31.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:41:e5:68:42:36:07:48:58:12:b7:f7:b5:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19b7cbd59adf4559b0b2820984fa3daa6f1d9055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:f2:93:bf:f1:5a:8c:f6:7a:81:d6:92:e3:
38:0b:bc:ca:e0:78:f1:10:d5:3b:da:b5:cf:1b:ba:
10:87:e2:c0:41:37:97:db:cb:37:a7:dd:f7:40:8a:
ab:51:ca:d8:3a:65:9f:9d:a9:9c:7d:6b:81:5c:bf:
c0:d4:79:56:da:b0:8d:4f:da:55:73:e0:6a:ae:69:
61:4e:2b:71:66:59:6d:27:b1:64:7b:ba:23:f2:c3:
72:57:1f:dd:c2:0a:1e:6f:82:ef:c3:bc:c7:1b:4d:
2a:7d:3e:fc:40:58:a8:a9:c8:22:70:0b:bc:bc:10:
26:84:42:2b:78:16:ff:2b:3f:4b:c6:be:52:d3:fd:
80:de:5e:de:2a:06:1b:dd:96:60:d5:d7:e3:73:80:
73:09:fd:a9:0a:5d:82:c3:bd:6f:20:d3:2c:fc:66:
aa:9d:f0:32:1c:9d:41:ed:85:cb:2c:a9:e5:1b:3b:
d9:5f:c3:e0:2e:c7:a2:32:c8:39:f6:b3:99:d5:2c:
a0:63:1e:f3:78:dd:f5:2f:3d:3a:81:15:d5:c2:19:
88:60:e7:85:6c:f9:19:be:fa:11:ee:82:3a:6e:ae:
03:f7:84:ef:8f:66:ca:d8:08:50:33:d0:7b:8c:50:
19:e9:42:d6:38:ac:01:80:90:6c:be:3a:ce:10:96:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:CB:D5:9A:DF:45:59:B0:B2:82:09:84:FA:3D:AA:6F:1D:90:55
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.0.0-185.31.2.255
Signature Algorithm: sha256WithRSAEncryption
6e:66:4c:e8:2d:f4:31:e6:26:19:6b:5d:a5:6c:db:2b:e6:6d:
51:25:22:e1:4d:cf:02:6d:31:0a:05:a4:9e:2a:63:3c:fc:c3:
02:41:33:01:24:d4:34:ee:58:7c:ed:93:b2:49:4f:a8:91:cd:
20:8f:08:6b:50:a5:e3:e3:11:c0:98:ae:6e:ee:e2:47:35:e2:
50:8d:82:43:0e:15:0e:0e:af:7e:34:df:63:40:83:22:4e:7b:
ef:af:36:b2:87:7d:8f:6e:1d:8d:ba:4d:c6:75:8f:13:29:4e:
e1:cc:9e:77:71:e4:34:27:67:12:43:85:1b:5f:b6:c5:22:f8:
32:95:de:3e:53:90:11:01:25:ff:90:8e:6d:ca:7b:eb:38:a7:
b4:05:06:bd:53:4d:f4:86:40:7f:a9:59:45:fd:4c:ca:5e:6f:
a8:56:3f:a4:c1:5b:51:b4:47:91:6c:ef:00:3f:9d:4d:54:21:
6d:3a:cd:0c:e3:d1:5c:54:75:9a:32:a9:b9:14:be:3d:82:95:
43:f7:8c:b4:6d:ef:45:cb:7c:22:19:cf:10:12:66:ca:69:eb:
ef:5e:43:30:2e:ef:2b:81:5e:47:8d:ff:47:0a:f5:ba:40:03:
28:04:10:4f:d7:70:98:8b:46:3b:63:2a:5b:92:ea:17:6a:c9:
e8:b9:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net