Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/G5AySBQmGTZguSR2UN46mLZeA6A.roa
File: G5AySBQmGTZguSR2UN46mLZeA6A.roa (raw, json)
Hash identifier: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=
Subject key identifier: 1B:90:32:48:14:26:19:36:60:B9:24:76:50:DE:3A:98:B6:5E:03:A0
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019424B2900FB13828E930D0CBF012D1AE94
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/G5AySBQmGTZguSR2UN46mLZeA6A.roa
Signing time: Thu 02 Jan 2025 01:47:49 +0000
ROA not before: Thu 02 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12907
IP address blocks: 213.252.0.0/18 maxlen: 18
2a04:d740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:90:0f:b1:38:28:e9:30:d0:cb:f0:12:d1:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Jan 2 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b9032481426193660b9247650de3a98b65e03a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8d:12:21:cf:98:f8:a9:b2:fe:d5:98:29:02:
4d:89:73:7d:37:b5:e3:e9:7c:27:40:94:0d:6c:68:
42:fc:b2:d9:a8:8a:9d:89:6f:5a:75:fe:bf:56:0b:
77:ad:27:17:4d:78:4f:a6:8a:66:52:9d:f1:d9:b7:
65:e1:34:df:4b:fb:94:19:3d:63:6c:df:48:1c:f9:
a1:a6:43:24:71:a0:5b:b0:7e:f6:41:27:e1:14:c0:
5f:08:7d:52:51:fc:51:d7:eb:49:ae:70:a1:1b:92:
92:ea:36:4b:0b:da:90:f8:0c:5a:03:98:3d:88:1d:
5b:60:08:17:40:88:82:7f:09:8f:42:90:69:65:3c:
77:a4:a9:4a:01:5a:9d:9d:ef:40:7e:a9:53:f2:47:
98:d3:88:d8:32:c5:34:af:d9:75:c7:01:9e:d7:eb:
2a:53:d1:99:88:f7:92:66:47:49:b7:55:d6:e8:f4:
28:de:48:ad:e4:19:72:ca:c0:5b:15:b9:ab:33:d0:
e1:aa:cc:f9:0a:88:b7:2e:95:eb:96:1f:8f:6e:0d:
ce:1b:4e:9a:b9:f1:d4:b7:e0:5a:b8:36:a5:77:3e:
33:96:11:81:f3:b1:2e:c5:21:ab:1f:e9:72:e5:37:
76:3c:28:ce:56:af:64:77:3c:59:0f:2e:a1:6f:4d:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:32:48:14:26:19:36:60:B9:24:76:50:DE:3A:98:B6:5E:03:A0
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/G5AySBQmGTZguSR2UN46mLZeA6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.0.0/18
IPv6:
2a04:d740::/29
Signature Algorithm: sha256WithRSAEncryption
62:64:d6:15:1d:37:75:a7:3b:fc:fa:e4:96:5e:23:bc:b7:eb:
0b:53:62:d2:fe:38:56:0c:0d:fd:91:9f:94:5b:33:20:fe:60:
7f:75:7e:94:87:55:8f:96:38:10:39:c3:f7:c5:f8:68:6b:6d:
4a:35:0e:e2:eb:ce:0e:25:bd:bd:ed:0a:5a:18:a0:d1:32:af:
92:40:06:7c:9b:d3:dc:fe:c0:a0:e1:9f:0d:77:1e:7c:b2:34:
51:79:be:ec:72:6f:a7:be:eb:62:cc:e2:71:6b:36:42:89:5d:
3c:a6:d9:e0:5d:d1:f3:5a:2e:a1:66:61:08:2e:c2:f3:b9:fa:
22:74:46:98:e1:5a:17:6f:97:94:24:71:a2:83:83:3f:1d:85:
25:87:48:51:43:2e:80:db:67:be:0c:21:e6:eb:6b:3d:6d:ef:
91:59:83:7e:cd:54:e5:34:4c:9c:26:89:f3:63:a8:46:32:94:
c6:43:37:cd:69:91:af:0e:8a:cb:70:48:6e:0b:f5:ab:79:a3:
ab:e7:93:87:9e:30:39:83:d5:15:dc:99:86:27:b7:bd:5a:24:
58:c4:7f:5d:37:30:1c:f3:04:c7:60:79:9e:57:f9:7a:c3:38:
a7:e4:70:a2:90:2d:18:5f:8a:3a:4e:e5:f4:58:d4:e2:e4:be:
52:63:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:27 2025 by rpki-client