Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/1-cZStwlj5eI6jlJCB1BXc15373o.roa
File: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (raw, json)
Hash identifier: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=
Subject key identifier: F9:C6:52:B7:09:63:E5:E2:3A:8E:52:42:07:50:57:73:5E:77:EF:7A
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 01942143F793C2C5066D9EEB68283085A8D1
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/1-cZStwlj5eI6jlJCB1BXc15373o.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56987
IP address blocks: 5.180.57.0/24 maxlen: 24
5.180.58.0/23 maxlen: 23
185.197.150.0/24 maxlen: 24
2a0c:3d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f7:93:c2:c5:06:6d:9e:eb:68:28:30:85:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9c652b70963e5e23a8e5242075057735e77ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:54:7d:91:7f:af:37:ca:3e:0b:dd:1e:fa:
c8:dc:41:b4:ce:e6:a6:c4:0c:c3:2b:67:c7:b6:29:
e4:47:6e:ca:5d:ff:4e:76:f4:1c:1b:d9:15:db:b7:
b3:1c:b0:35:3a:b5:e2:8e:2d:ab:8e:74:82:28:9f:
4e:e2:92:0c:00:49:3f:f7:22:4b:e8:12:7a:b0:58:
9e:c7:66:cf:7b:93:43:2f:03:16:cd:72:6a:c7:e2:
16:6c:57:e6:63:c4:59:b8:18:ae:39:62:cc:9a:18:
36:5b:92:2b:fa:f4:fa:78:af:43:1f:ea:c1:ac:17:
b6:a4:d4:9c:83:3f:1e:4a:d1:3c:c8:31:78:55:f4:
e8:60:d9:9f:a0:34:55:7a:23:f6:71:97:7f:51:e1:
69:f0:8e:d0:b4:b2:d8:ea:50:cd:90:95:bf:81:a7:
0a:9a:b6:7c:83:0d:1f:96:08:f1:ca:18:2d:73:fc:
dd:9f:44:f9:6e:e9:01:e5:77:96:7b:b6:81:6d:a2:
a5:ff:49:25:eb:35:c8:f5:11:17:03:f3:6f:7c:a4:
0f:8d:6d:1c:b4:af:f4:11:7f:a5:b3:ca:5d:29:09:
43:4f:ae:01:53:67:72:60:c8:ec:a5:b2:1c:3e:be:
ec:b1:6c:94:1e:f5:a8:bb:ca:ef:6b:8a:44:6e:74:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:52:B7:09:63:E5:E2:3A:8E:52:42:07:50:57:73:5E:77:EF:7A
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/1-cZStwlj5eI6jlJCB1BXc15373o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.57.0-5.180.59.255
185.197.150.0/24
IPv6:
2a0c:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
45:62:35:d6:2d:32:06:e8:6a:e9:3b:e1:99:8c:5d:39:a1:3c:
08:cf:84:52:73:db:6a:7f:97:7b:a1:2f:bc:6e:97:6a:3a:cb:
2a:9a:93:58:6e:97:d2:3f:ea:46:3c:7d:55:59:cc:18:88:24:
40:0d:6b:7d:33:08:74:76:44:48:87:96:62:ae:b1:e6:2f:16:
07:91:b2:bc:e2:e2:d3:00:71:ae:e3:64:5e:99:70:65:41:07:
28:cb:6b:ce:66:a3:96:f9:97:ee:a2:1e:bd:22:91:d0:60:42:
df:e3:07:72:e5:30:af:42:bb:db:f3:a0:17:b3:35:de:ab:06:
85:d7:5c:9e:4e:39:04:2a:d5:19:88:e4:97:a5:91:b5:a8:fc:
7f:66:26:1a:ea:25:89:99:fc:17:c3:40:ba:53:43:98:42:91:
8f:f0:ef:30:30:5e:46:f6:33:68:e4:7b:4e:15:83:50:61:67:
15:14:dc:f7:3f:58:cc:20:aa:3d:22:c4:81:83:b0:92:22:34:
e7:97:03:ba:f4:12:80:a7:98:ef:de:08:2c:aa:8a:86:48:7e:
58:4c:01:bf:51:00:dd:6d:15:03:c6:bc:19:7c:dd:43:b9:73:
71:90:9c:21:dc:12:6c:2d:a8:0d:06:e6:0b:fe:92:4f:be:2a:
01:41:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:51 2025 by rpki-client