Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gmVTMnr40mDdzhg9KOO9Tk45szA.roa
File: gmVTMnr40mDdzhg9KOO9Tk45szA.roa (raw, json)
Hash identifier: 9yE0tjiRP3Pc2XgDHCZlb5ZDq9/ZnHdq0KViY8VbSUk=
Subject key identifier: 82:65:53:32:7A:F8:D2:60:DD:CE:18:3D:28:E3:BD:4E:4E:39:B3:30
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018571309E8B81EA1949F6E0B44608E7F024
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gmVTMnr40mDdzhg9KOO9Tk45szA.roa
Signing time: Mon 02 Jan 2023 06:34:49 +0000
ROA not before: Mon 02 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52219
IP address blocks: 192.40.88.0/24 maxlen: 24
192.40.95.0/24 maxlen: 24
104.160.0.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
107.150.80.0/24 maxlen: 24
104.160.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9e:8b:81:ea:19:49:f6:e0:b4:46:08:e7:f0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=826553327af8d260ddce183d28e3bd4e4e39b330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:d0:eb:34:d2:9e:17:ab:d3:90:04:6e:28:
ec:5d:ca:75:2e:3e:8e:14:f0:e2:32:ce:11:e6:e4:
3d:13:1b:e9:47:40:03:7f:77:86:0b:0e:bf:f8:09:
ee:05:e0:1f:ed:68:a2:c5:00:ff:06:ac:1e:9b:f8:
04:19:18:73:a0:c6:50:70:bb:7c:9d:2d:03:21:59:
83:e2:8a:f3:af:ef:4b:6a:d6:d0:d2:0c:18:a8:06:
cb:05:f7:11:5c:90:cd:24:b0:72:6f:63:3f:87:1e:
6f:f3:25:7b:b1:68:37:94:ac:f8:59:2c:ff:a5:d7:
cf:b3:c7:eb:1e:b9:0a:b5:2a:36:34:3b:4d:a9:86:
46:75:ad:09:11:6e:8b:0a:41:bf:20:83:83:6b:31:
1e:c6:b4:d7:bf:98:8b:ca:9c:20:15:95:a8:00:3e:
17:2f:ed:89:a9:30:9e:c9:75:af:79:21:05:3c:d9:
87:17:08:e2:a0:af:fd:e7:7a:5a:d0:1e:77:52:d4:
99:d5:9b:8b:97:0f:e2:14:56:d7:ce:bb:61:f9:d4:
d0:d7:4f:76:25:c7:1d:f5:a6:4f:de:77:38:89:cf:
46:4e:37:a3:34:88:06:86:dd:a6:ba:ee:0a:f6:2b:
e3:54:29:f9:7c:01:95:64:e9:1d:c7:1f:b8:8a:4d:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:53:32:7A:F8:D2:60:DD:CE:18:3D:28:E3:BD:4E:4E:39:B3:30
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gmVTMnr40mDdzhg9KOO9Tk45szA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.0.0/24
104.160.4.0/24
104.160.8.0/24
107.150.80.0/24
192.40.88.0/24
192.40.95.0/24
Signature Algorithm: sha256WithRSAEncryption
00:43:6f:38:5a:17:e2:a4:34:f7:6d:94:fc:7b:6d:22:25:55:
49:13:cf:7c:84:b1:f1:56:82:f1:2b:6a:b9:ad:e8:0d:b2:99:
26:7e:ad:a1:f8:b2:b2:99:ef:78:3b:91:a7:29:28:00:0d:b1:
5a:29:12:b2:b9:35:c4:e2:3a:6f:3f:8b:95:29:44:69:ca:4a:
08:35:b8:55:75:36:d7:43:46:c4:14:dd:42:c8:68:86:09:2b:
c7:51:d9:c9:cc:9b:2b:a0:ff:a6:34:21:84:c7:62:0d:ed:11:
c0:bb:e5:2c:23:22:85:e8:c2:dd:35:d4:78:10:c6:34:5e:a5:
e8:e0:f4:52:c1:d1:53:13:1c:31:9d:5e:b3:20:19:8a:34:39:
00:74:b3:e0:44:35:22:c6:38:9f:6f:54:df:3c:f1:e9:62:ef:
82:76:a2:d6:7e:30:d6:8a:e1:72:bd:7d:a1:10:a2:1a:29:47:
79:57:05:6a:69:af:9e:f8:c2:01:a5:de:14:e3:e0:90:04:c8:
61:ab:37:da:55:7e:7a:bf:e4:db:21:4c:8c:fe:39:8a:2c:49:
09:4f:2a:ac:14:99:49:eb:76:53:d6:0e:03:23:96:f6:63:c9:
71:14:3d:6a:f7:96:17:ab:1c:af:b5:72:94:d7:b6:6c:60:d0:
fd:85:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:07:35 2025 by rpki-client