Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Ggg7GApDGNUS76mlT8ntc9VZkJE.roa
File: Ggg7GApDGNUS76mlT8ntc9VZkJE.roa (raw, json)
Hash identifier: 2jhlau7kXsyiaAyibtvGFULRTXklR/6xdOfuuLvQ9yE=
Subject key identifier: 1A:08:3B:18:0A:43:18:D5:12:EF:A9:A5:4F:C9:ED:73:D5:59:90:91
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C5E422FDA530A1450376E99C62F95
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Ggg7GApDGNUS76mlT8ntc9VZkJE.roa
Signing time: Thu 02 Jan 2025 09:50:23 +0000
ROA not before: Thu 02 Jan 2025 09:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15759
IP address blocks: 213.210.64.0/18 maxlen: 18
213.210.64.0/19 maxlen: 19
213.210.112.0/20 maxlen: 20
217.18.128.0/19 maxlen: 19
217.18.128.0/20 maxlen: 20
217.18.144.0/20 maxlen: 20
217.18.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:5e:42:2f:da:53:0a:14:50:37:6e:99:c6:2f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a083b180a4318d512efa9a54fc9ed73d5599091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:3e:2b:63:b9:d8:5e:2f:b0:de:03:18:65:
c0:87:6d:f4:2d:f2:c4:46:b8:ca:02:28:61:23:01:
80:0d:d3:7c:c5:2e:14:3f:da:f5:a0:27:2b:7d:de:
b6:a3:92:9a:ee:31:31:2f:eb:5d:3e:2b:9e:14:e7:
9d:0c:d1:86:e0:7f:ce:a0:4b:1b:39:57:dc:ff:86:
55:a0:ba:22:02:ba:8f:9c:14:c2:bd:a1:3e:a9:c4:
99:e1:24:35:37:22:de:eb:07:83:56:b4:98:89:5d:
26:c1:68:cb:e7:5b:6b:8b:3b:d5:fe:21:2e:09:98:
81:0b:76:89:c9:88:7f:29:f8:9d:ad:17:13:ea:c1:
de:10:b9:1f:bc:3b:61:a5:2c:cc:7c:db:ff:cc:25:
6f:92:72:17:c2:fc:3d:95:e9:f3:3f:d5:c8:95:92:
dc:27:6e:60:40:dc:6d:1c:30:33:c5:c8:f2:dd:ed:
44:b1:1a:f4:1a:aa:66:49:f5:3a:c3:e8:9d:82:2d:
36:27:88:ab:0d:3e:c0:75:e5:c6:09:28:16:a8:0b:
98:9e:8f:0a:09:0e:17:97:1a:4b:92:dd:c0:94:87:
a8:a0:3f:b2:83:c6:f7:74:91:6a:a3:c6:52:cf:ad:
bf:a0:b0:64:d5:06:ff:a7:9d:e1:90:d4:eb:17:38:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:3B:18:0A:43:18:D5:12:EF:A9:A5:4F:C9:ED:73:D5:59:90:91
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Ggg7GApDGNUS76mlT8ntc9VZkJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.64.0/18
217.18.128.0/19
Signature Algorithm: sha256WithRSAEncryption
63:14:87:d2:0f:f6:07:98:d9:00:15:8c:f3:63:52:0e:f7:92:
6c:07:94:a5:e3:8f:ac:bd:ec:08:b2:91:bf:7d:29:29:62:ef:
9b:3f:e0:04:cf:36:30:cd:84:dd:9c:d9:65:ea:f2:5a:ae:da:
56:dc:12:a8:fc:d4:6c:c3:b1:de:d8:32:98:4a:82:1f:4a:25:
28:4a:cb:4d:18:cd:18:2a:67:39:8c:74:fc:43:62:de:4c:4a:
6e:8f:bb:e4:6c:8e:44:1f:a5:68:25:4b:99:eb:1c:f8:09:c2:
c5:e9:28:32:ec:af:58:60:b8:94:16:22:ab:43:ec:0e:c8:93:
72:32:2c:13:23:dc:5d:05:60:fd:7c:84:20:9e:14:0b:e2:ac:
f3:dd:7d:27:2a:ef:9c:65:be:e0:6b:a8:58:74:10:fc:16:35:
51:41:0e:d3:ea:13:a2:91:d1:7b:a1:5d:89:23:8d:d6:bb:05:
dc:a6:16:fb:2f:34:06:d0:c5:b6:b8:01:2d:5e:2d:88:9d:8c:
a9:de:80:ea:b0:fb:cf:40:14:55:4a:8d:68:1e:5f:d5:c5:88:
80:7b:10:bd:5e:6b:a1:80:d9:9b:d4:a2:ae:c3:28:2d:b2:95:
5e:88:82:7c:fc:a2:a6:d4:0a:11:6c:27:a4:d6:9e:3d:30:db:
b0:09:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net