Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/gACLFbYoQuKSwULuZch33ylGIws.roa
File: gACLFbYoQuKSwULuZch33ylGIws.roa (raw, json)
Hash identifier: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=
Subject key identifier: 80:00:8B:15:B6:28:42:E2:92:C1:42:EE:65:C8:77:DF:29:46:23:0B
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 0194228DC156502469E16AAEF948CD752EDB
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/gACLFbYoQuKSwULuZch33ylGIws.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41077
IP address blocks: 193.104.109.0/24 maxlen: 24
194.140.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c1:56:50:24:69:e1:6a:ae:f9:48:cd:75:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80008b15b62842e292c142ee65c877df2946230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:3b:c0:71:dd:77:9a:e2:43:1e:51:02:9e:
56:37:a2:5e:14:93:2e:52:02:f1:82:3c:8a:33:2c:
4e:d3:67:cc:37:90:06:91:52:d0:14:0d:d8:87:c4:
04:b6:d6:8b:39:93:a3:08:57:7d:9d:d5:08:12:1d:
8b:32:3a:cb:7f:f1:c9:5a:31:ae:9c:8f:c8:be:90:
e6:e7:d5:a6:59:2d:2f:5b:7d:a9:f7:01:dc:37:fd:
ab:34:df:59:65:42:72:54:e2:10:61:a1:74:86:75:
ff:12:53:bf:40:3f:1c:27:c7:b8:2b:5d:b1:b6:f1:
da:36:5b:75:01:17:f3:9f:5b:91:8f:27:25:86:ee:
54:2d:63:0e:c5:fc:13:f4:51:bb:db:ff:45:35:80:
71:4a:9d:4c:35:b5:d2:57:0e:15:83:4b:86:2f:a2:
9b:79:66:36:07:8e:16:14:8a:1a:16:eb:1d:4d:05:
57:4e:48:1c:f4:c8:c3:80:a8:bf:4b:8f:e9:99:d9:
2b:aa:22:b1:b5:11:ac:60:9c:f9:13:6f:d6:d8:60:
a4:fd:5f:79:29:ab:2e:32:1c:0e:28:d4:54:08:99:
cd:aa:3f:31:7a:3e:b4:11:2a:94:77:19:9b:79:a3:
6a:59:63:3e:e1:10:f5:36:ad:3a:79:22:02:3d:64:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:8B:15:B6:28:42:E2:92:C1:42:EE:65:C8:77:DF:29:46:23:0B
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/gACLFbYoQuKSwULuZch33ylGIws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.109.0/24
194.140.227.0/24
Signature Algorithm: sha256WithRSAEncryption
52:37:e3:1e:8c:1d:f5:05:be:a1:8a:41:5d:30:fc:51:cb:41:
4c:ac:ed:9b:b6:4c:33:04:3f:af:b8:c3:f1:f2:c7:2a:1b:93:
bb:2d:33:4f:d4:74:61:9c:70:da:cf:a5:e8:96:3f:f3:34:e7:
03:b1:cd:e7:b1:04:02:9d:3c:99:74:bc:dd:80:0a:6a:08:8e:
42:b4:2b:22:88:a6:57:19:85:81:ef:cd:f7:dd:24:4e:c3:51:
e4:b5:16:2f:89:dc:52:52:77:7d:70:46:3a:a1:a4:b4:7b:b2:
9d:a5:cc:18:68:fb:9a:e9:16:b8:a5:a7:db:71:4b:85:9a:33:
e6:9e:e0:89:43:bd:3b:cd:09:ad:69:22:7e:f8:b8:cb:a3:ad:
fe:5c:82:ba:76:2a:15:29:e9:10:36:da:39:b2:2c:3b:15:65:
5c:b6:1b:39:c1:9f:df:fc:d4:b5:96:7c:c9:4f:20:fc:fd:da:
c8:bd:84:f0:7c:62:29:ed:db:48:f9:73:e2:a1:28:ec:36:ee:
64:19:99:c5:8a:76:c1:fa:f9:4e:60:14:35:5b:dd:72:97:7d:
c7:4f:9c:20:61:6f:68:58:1f:ba:4b:ba:01:c2:5c:da:d5:f5:
96:76:b5:77:43:e3:ca:a2:21:9c:ed:ae:55:3f:37:7f:80:eb:
54:1c:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:06:59 2025 by rpki-client