Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gxY-48iiII5-cOf4lBFOjwTnlLs.roa
File: gxY-48iiII5-cOf4lBFOjwTnlLs.roa (raw, json)
Hash identifier: bc6IPVn/vT3iBPg/5o0y+s1w7KL5yHYBP3k6d7Mo8E8=
Subject key identifier: 83:16:3E:E3:C8:A2:20:8E:7E:70:E7:F8:94:11:4E:8F:04:E7:94:BB
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019428238D0D58F84BA7928A8B2293C85C73
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gxY-48iiII5-cOf4lBFOjwTnlLs.roa
Signing time: Thu 02 Jan 2025 17:50:05 +0000
ROA not before: Thu 02 Jan 2025 17:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 194.15.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:8d:0d:58:f8:4b:a7:92:8a:8b:22:93:c8:5c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83163ee3c8a2208e7e70e7f894114e8f04e794bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:3e:39:49:f8:06:f9:37:77:e2:19:c2:c9:
e0:e5:3c:5b:c3:59:e3:2f:47:a6:cc:5d:c8:99:37:
cf:4f:61:24:d4:c2:d8:b5:0c:de:f1:3f:e3:7e:b2:
63:87:5c:71:27:f5:ff:32:0d:6a:65:bc:78:dd:d7:
30:02:f1:02:1e:77:38:c4:07:4b:de:25:a7:cc:8d:
8c:37:b4:b4:ee:d9:16:ff:1c:d4:17:b2:e6:e0:6c:
d1:35:21:23:70:f0:87:69:ed:9f:98:c5:3d:e5:83:
1b:65:c3:e5:ff:05:fe:a4:3b:99:4d:b3:20:ff:28:
27:72:bf:e8:1a:06:2c:6b:b6:a8:fc:20:4e:55:e2:
62:27:8d:8f:cc:ea:a4:e6:2e:af:01:b0:c9:b2:e4:
c2:97:65:e2:62:da:68:59:07:78:ea:9c:68:ef:15:
e6:38:3a:bb:b5:f6:7c:b0:a8:4b:fa:09:0d:a1:4b:
41:18:e6:f9:eb:21:69:85:63:b3:f3:36:3a:23:af:
7f:ed:93:a7:91:b7:4b:f2:27:0b:6d:ea:d2:d9:30:
48:0b:4a:40:36:c5:d3:c6:f1:64:5c:33:2c:2e:2b:
2d:be:4e:1c:03:a8:b1:3c:93:b3:50:96:49:31:1b:
c8:8d:71:53:c3:e8:73:cc:b3:20:b7:79:f4:86:4d:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:16:3E:E3:C8:A2:20:8E:7E:70:E7:F8:94:11:4E:8F:04:E7:94:BB
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gxY-48iiII5-cOf4lBFOjwTnlLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.96.0/24
Signature Algorithm: sha256WithRSAEncryption
21:85:85:c2:08:ad:8c:1a:c4:77:49:f9:25:f7:37:00:76:f5:
26:60:50:e2:3f:a6:79:76:8f:71:fc:f9:94:59:e0:63:c3:7d:
b5:50:ac:dc:a4:b5:17:76:4a:e5:60:f0:1d:9c:02:52:b4:5e:
ff:73:8c:b8:02:3f:e8:81:85:f0:1f:cf:33:32:4e:15:a0:87:
31:17:c9:f6:15:d3:e5:9b:9b:14:ce:e6:61:b9:5b:45:8b:94:
24:01:02:fa:0a:57:ec:37:e6:37:f1:f9:29:73:c7:bb:5a:c2:
28:00:bd:88:d7:94:71:0e:dd:bf:a9:9b:f4:dd:9e:88:60:23:
4d:e3:5b:a0:bd:e9:dd:65:ec:6b:2d:6f:39:6a:b0:9d:ea:13:
64:f1:cb:25:ee:41:fa:e6:15:dd:ab:25:bd:83:95:5d:2a:c5:
8c:be:94:e9:e7:92:00:99:b6:e2:5b:3c:89:ae:74:7e:8f:32:
f4:e4:41:4e:20:af:05:c5:7c:67:76:16:7f:cd:d6:b6:32:3b:
9b:c4:74:b6:27:d3:54:2b:8f:6e:3b:17:7a:0f:3d:8a:96:80:
49:29:99:b3:ec:84:cb:6e:32:ed:6a:31:aa:7f:ee:41:7c:2d:
5b:99:70:c0:95:34:81:be:e2:75:2e:b4:5a:54:f4:a4:65:13:
47:80:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:13 2025 by rpki-client