Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa
File: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (raw, json)
Hash identifier: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=
Subject key identifier: 1B:F7:82:76:BF:C2:B4:71:D8:76:FC:7F:C2:C7:EB:58:62:50:3F:61
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019427B64A9E6693CF895A4FBEC848206315
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa
Signing time: Thu 02 Jan 2025 15:50:45 +0000
ROA not before: Thu 02 Jan 2025 15:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60992
IP address blocks: 83.96.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4a:9e:66:93:cf:89:5a:4f:be:c8:48:20:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 2 15:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bf78276bfc2b471d876fc7fc2c7eb5862503f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:02:32:49:3d:10:1f:fa:c9:73:10:d7:7c:
83:48:92:b6:98:a6:e2:1f:ee:86:35:cc:13:f8:87:
95:f3:aa:42:fb:e3:6f:e0:d5:c3:6f:db:a2:e1:3b:
4f:b2:a3:e0:61:52:e3:51:98:24:f6:95:f7:c2:2e:
7b:c6:ee:31:75:dc:27:c6:99:d8:21:b5:39:32:60:
ab:98:0a:8c:7c:b0:ba:59:51:52:3b:c8:df:24:21:
3d:91:b7:74:b9:62:d9:4d:4d:0d:5c:a9:8a:21:9d:
45:1c:e9:de:f1:b4:df:a3:14:68:74:1e:eb:53:4b:
86:16:ff:b6:e0:c1:15:83:61:64:d8:9d:aa:94:88:
d3:d6:5c:e0:5f:82:65:8d:bb:f4:4e:8e:c7:9e:be:
e7:2c:c8:87:30:12:cd:cc:09:8a:85:a3:73:de:aa:
1e:13:ce:06:ed:a8:bf:7e:e5:76:67:b3:60:d9:24:
12:30:cc:15:f5:0b:0b:04:c7:b7:7a:b6:c3:37:2d:
45:ad:82:0f:32:8e:0c:f2:02:6f:d3:ad:61:32:64:
de:cb:ed:78:8f:a7:90:53:a3:33:2e:9e:ab:8f:f6:
4b:21:eb:bd:8c:86:ea:60:90:a4:cd:6e:e1:f8:23:
67:41:24:ca:57:c2:89:ff:8f:df:b9:fd:20:c0:7a:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:82:76:BF:C2:B4:71:D8:76:FC:7F:C2:C7:EB:58:62:50:3F:61
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.96.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:96:bc:b1:b5:94:7e:aa:ef:82:af:47:0f:1b:ea:06:18:23:
75:37:c3:5f:3e:89:f8:33:78:5e:e2:49:a4:04:35:fc:24:61:
29:59:0e:5a:6a:df:11:21:d8:8d:6b:58:e4:10:5e:48:63:7e:
a4:43:97:ea:11:fd:1d:7b:dc:0f:5f:ff:32:c6:0b:f0:a6:c7:
d4:e4:51:40:ac:74:84:1a:1d:d9:56:b7:6e:76:8f:8a:e8:57:
2d:7a:e1:65:36:1e:51:3f:39:2c:1e:fa:2a:50:89:5a:0a:e9:
7d:9f:ad:db:ea:47:47:c2:13:49:eb:ec:43:78:db:e0:fd:f7:
a3:cf:16:67:df:fb:44:06:36:72:fd:3a:d9:db:51:4d:71:05:
68:57:c6:ce:bf:5f:c9:00:5e:2c:37:4e:5d:2f:2c:2e:b2:07:
25:e4:f5:5d:3d:a8:ca:c7:18:fa:c6:b2:c3:71:cf:06:ad:0f:
13:66:ab:df:30:24:9e:08:41:2a:2f:80:6a:8d:45:bb:43:2a:
59:e5:af:a2:eb:51:3d:0c:3a:02:15:9e:05:23:d9:fd:1c:81:
a5:8c:6c:42:0c:79:39:13:31:57:bd:73:15:ed:eb:aa:50:4d:
a0:7f:2c:24:20:4d:c4:02:42:90:c5:ca:5a:25:78:e8:b9:57:
81:94:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:48 2025 by rpki-client