Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/ge348cXUyfn-a0uMZAg0yuW4_4I.roa
File: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (raw, json)
Hash identifier: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=
Subject key identifier: 81:ED:F8:F1:C5:D4:C9:F9:FE:6B:4B:8C:64:08:34:CA:E5:B8:FF:82
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019423D795C6B0D173A916F591EDCC2AB48D
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/ge348cXUyfn-a0uMZAg0yuW4_4I.roa
Signing time: Wed 01 Jan 2025 21:48:38 +0000
ROA not before: Wed 01 Jan 2025 21:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2202
IP address blocks: 147.210.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:95:c6:b0:d1:73:a9:16:f5:91:ed:cc:2a:b4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jan 1 21:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81edf8f1c5d4c9f9fe6b4b8c640834cae5b8ff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:f8:c9:af:13:b7:b0:b6:83:ca:18:22:9e:
ef:98:2c:c7:7e:c3:04:7c:73:b5:10:5c:9d:71:40:
19:a8:00:81:ec:4a:10:fb:11:37:54:c3:0b:32:4e:
97:b6:13:8e:4e:d4:f7:73:37:02:62:0a:02:de:21:
da:c6:aa:41:a6:ca:44:97:06:cd:62:e7:67:f9:8d:
09:48:7a:0f:46:20:2c:23:c5:a1:b3:0a:e7:9d:a9:
0b:e9:19:6f:ce:07:33:1c:6d:b0:da:65:d8:ed:bf:
cf:87:c1:5c:18:9a:4c:62:43:d8:39:5e:2d:58:a7:
e7:14:b3:c2:95:cd:d4:4c:d6:22:21:ab:2b:0d:d9:
e2:d2:47:91:55:59:3f:ae:06:70:51:7b:1a:cb:6e:
d6:68:dd:5a:f6:11:6f:4b:c7:3a:29:24:60:8c:6e:
d9:d3:a9:7e:8d:09:7f:c8:71:dc:f5:5c:aa:16:cf:
9d:40:75:37:d6:07:dd:f2:f5:fb:95:52:86:29:05:
d9:f3:c2:72:45:77:71:fa:ed:5b:64:c6:b3:57:77:
86:40:05:f8:a6:a9:ba:02:07:e5:93:b9:b1:e6:7b:
23:01:e3:59:ec:3e:0a:49:4b:12:b4:61:f2:b5:34:
2f:2d:39:bb:40:dc:aa:0c:31:db:79:70:b2:09:f6:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:F8:F1:C5:D4:C9:F9:FE:6B:4B:8C:64:08:34:CA:E5:B8:FF:82
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/ge348cXUyfn-a0uMZAg0yuW4_4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:91:27:a0:5b:21:90:0e:63:80:fc:e7:68:73:ea:c5:dd:cc:
46:19:07:87:34:91:f4:00:6b:f8:69:f1:67:f1:91:04:48:57:
08:f7:f8:cc:d9:56:a8:06:39:2e:a8:83:1b:88:dd:f3:d6:e0:
66:52:41:23:5b:26:8d:df:e5:24:7a:07:a7:36:1d:e0:38:8f:
76:a3:37:87:ad:69:51:8e:c7:fe:f1:2d:7f:9a:e8:6b:73:ac:
ee:3b:fd:c5:0c:22:aa:c9:ba:b6:42:bc:e7:84:3a:6c:03:8f:
01:0c:ac:b9:c4:ee:74:31:fd:91:52:2f:e2:dc:13:b7:63:8f:
52:0e:09:64:8e:28:d3:b9:51:c3:42:45:9d:cc:bd:3b:bb:bb:
5c:b2:35:0a:79:cd:89:d2:0e:16:8e:36:b5:a2:d0:90:9e:40:
e2:ba:2f:56:2d:e3:08:d7:96:52:86:ef:9d:f9:55:f1:89:14:
ed:02:f6:21:05:e6:84:49:0f:bd:54:ca:d2:f6:78:17:59:cd:
7c:8e:9c:60:8a:76:9d:61:80:76:fc:82:1f:3c:9e:cc:fb:66:
2d:47:ef:90:62:cb:50:b4:e3:98:d5:63:be:dc:2d:d5:b1:a0:
4a:e8:15:f1:03:f8:38:cc:c9:84:0e:cb:c3:4e:73:2a:61:f1:
04:0b:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:47 2025 by rpki-client