Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/GLy9_iVdlqh-9vFHtQJj7ww8m2U.roa
File: GLy9_iVdlqh-9vFHtQJj7ww8m2U.roa (raw, json)
Hash identifier: gt+BX8tGhcK01XWWhIq5h+sVECJfiHK3mTyE0FYk6IY=
Subject key identifier: 18:BC:BD:FE:25:5D:96:A8:7E:F6:F1:47:B5:02:63:EF:0C:3C:9B:65
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 019428270DC6A5208FC76F336F6EC313E2F7
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/GLy9_iVdlqh-9vFHtQJj7ww8m2U.roa
Signing time: Thu 02 Jan 2025 17:53:55 +0000
ROA not before: Thu 02 Jan 2025 17:53:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6424
IP address blocks: 82.215.71.0/24 maxlen: 24
185.162.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:0d:c6:a5:20:8f:c7:6f:33:6f:6e:c3:13:e2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Jan 2 17:53:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18bcbdfe255d96a87ef6f147b50263ef0c3c9b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:41:15:49:d4:13:9f:96:01:37:fe:22:f9:
cd:1e:50:1c:58:3b:57:dd:6b:af:73:57:64:75:61:
52:04:04:c4:9c:9c:4f:8a:c0:90:56:8c:5c:4d:52:
73:d3:ac:0b:7d:39:11:80:03:f2:8f:7c:04:5f:e2:
cf:3b:63:a6:96:9d:42:32:f5:e9:b4:c8:c3:88:ee:
20:71:16:1c:a0:89:e6:58:ed:76:44:fd:b1:28:b4:
4c:00:27:bf:7a:c4:5a:07:40:68:ae:ef:ae:10:ee:
29:0a:e7:95:8c:f7:b6:b1:1f:ef:e6:79:0c:e5:72:
25:23:65:9a:85:3a:58:9b:5b:9c:e5:55:7b:03:85:
e8:6e:98:97:f3:c3:b0:be:aa:5b:40:24:7f:50:ba:
78:9e:85:6e:4d:cb:2c:1c:4a:31:42:be:6f:fb:ef:
28:42:b7:a9:35:d7:f5:f9:b5:39:23:02:93:e2:76:
a6:06:03:99:bc:34:70:47:bd:2c:23:02:50:1b:2a:
cb:fe:cf:26:bf:14:bd:a7:16:72:d8:ec:a2:51:73:
a1:20:e6:28:34:3b:73:da:b0:a2:44:98:dd:4d:ba:
ed:58:90:90:eb:a8:83:b4:5b:4e:e9:74:4a:a5:65:
74:8a:d7:85:a0:cd:fb:ec:d4:67:b9:bb:17:0f:1f:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:BD:FE:25:5D:96:A8:7E:F6:F1:47:B5:02:63:EF:0C:3C:9B:65
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/GLy9_iVdlqh-9vFHtQJj7ww8m2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
185.162.183.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8a:79:40:40:22:9e:5e:b2:1a:5c:28:63:58:06:bc:d6:f6:
2f:6d:06:25:b7:41:4c:66:d3:ce:57:3d:82:3d:a0:76:9e:46:
d1:2d:a1:b6:f5:d4:7f:8b:e5:2b:98:88:6f:ff:9f:1a:dd:e8:
35:aa:a5:a3:63:40:3e:b1:3d:7d:66:34:0e:71:64:77:e7:5f:
e0:be:36:2d:36:84:5d:ab:da:1a:44:dc:91:c0:6f:c8:4f:38:
44:ac:d2:3f:87:36:80:dd:d2:c2:6d:2e:5f:5c:be:51:b9:cb:
41:10:45:20:bd:27:6b:dd:14:73:b9:9a:21:16:fb:93:cb:fa:
a3:11:3a:40:88:cf:7d:cc:09:a1:8b:92:1c:5f:e8:71:cd:b7:
2c:07:b2:96:a5:a6:5e:5b:ed:d5:6a:6e:93:b6:c5:b2:fd:0b:
8d:a7:61:c7:40:7d:73:3a:8f:13:a4:aa:fd:df:aa:2d:95:ec:
e5:15:a4:89:74:54:d2:b0:68:7a:c5:93:c7:f5:2e:50:70:bb:
62:05:15:8f:79:f7:93:de:cb:c2:51:37:40:94:8f:24:45:2b:
7c:03:96:44:ed:fc:2d:ec:63:2d:0b:d0:fb:22:39:ec:f5:ca:
ab:22:36:c2:a2:10:fc:32:2f:b0:ed:20:50:97:8f:7e:8b:a8:
0c:b0:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:57 2025 by rpki-client