Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/gfaOusn6-X7BydpbAyAPOGJqVnY.roa
File: gfaOusn6-X7BydpbAyAPOGJqVnY.roa (raw, json)
Hash identifier: R2bBwWhKC2UXRPobKdBOcv6MEU11M0B5SF79kwbkopk=
Subject key identifier: 81:F6:8E:BA:C9:FA:F9:7E:C1:C9:DA:5B:03:20:0F:38:62:6A:56:76
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 019425FC6DA827C07D240C5ACF64D9666F3A
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/gfaOusn6-X7BydpbAyAPOGJqVnY.roa
Signing time: Thu 02 Jan 2025 07:48:07 +0000
ROA not before: Thu 02 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51693
IP address blocks: 178.213.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:6d:a8:27:c0:7d:24:0c:5a:cf:64:d9:66:6f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Jan 2 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81f68ebac9faf97ec1c9da5b03200f38626a5676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:5b:49:8a:a3:db:54:aa:1a:df:59:7b:8f:
9a:a3:ce:a9:88:2a:c3:b2:fa:f5:76:4c:6f:12:55:
9b:67:58:a9:41:51:39:a5:b2:8c:39:ea:3a:a6:ce:
2b:83:5e:8b:e7:72:f3:79:00:29:7d:b2:10:a9:1c:
32:79:66:36:9e:bb:fb:ba:55:31:bb:b0:7a:e3:18:
a3:49:1a:85:e5:4b:3b:d0:5f:1c:dc:d2:14:a3:c6:
b6:19:50:d1:bc:cd:04:b2:d1:67:58:66:85:45:1a:
86:0c:b8:4b:ab:86:d3:4a:fd:60:1f:1e:6b:4f:f4:
45:bc:bf:05:d1:0c:26:db:e7:c5:75:e3:40:6f:47:
9f:a8:65:ed:ec:b1:11:f1:4a:19:62:8a:d6:b1:15:
b7:9f:cb:81:24:2e:db:f6:89:ab:39:e4:65:e5:af:
1d:26:b3:7d:9f:09:60:02:f0:70:65:8e:a3:fc:37:
c4:27:21:de:31:6d:29:e1:71:11:51:e0:1b:4a:60:
a0:78:f5:2b:f6:6b:83:1a:d0:c9:f5:3d:06:30:74:
67:de:21:d3:2f:e3:f1:6f:3f:9d:59:2b:3a:f9:bf:
7d:b6:0c:94:f9:19:7d:d6:69:8e:45:92:a7:7a:82:
52:4a:38:71:f0:e8:7d:0d:40:2d:f3:a2:34:8a:64:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:8E:BA:C9:FA:F9:7E:C1:C9:DA:5B:03:20:0F:38:62:6A:56:76
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/gfaOusn6-X7BydpbAyAPOGJqVnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.128.0/21
Signature Algorithm: sha256WithRSAEncryption
63:ab:e7:da:a2:8f:01:87:5a:04:2c:1c:2c:1b:ac:26:8b:1f:
33:1c:f8:91:6a:23:1a:c8:99:cf:c4:89:96:25:4a:5c:68:9e:
6b:89:67:ad:5f:55:4a:04:cc:8d:70:ed:e6:7d:c1:5c:fb:af:
37:a4:a0:2c:3d:4c:67:08:d8:7d:8a:ce:d8:3e:2c:64:1a:78:
ed:ee:14:b8:33:4d:b5:80:2a:0b:e8:15:d0:0a:34:e3:b6:d6:
de:27:e0:7b:62:78:b9:65:d2:25:8c:8f:f5:88:20:06:a1:b2:
28:ed:8d:27:2b:25:0d:55:72:91:2c:b0:18:7b:24:cd:ff:15:
19:75:71:3a:38:7a:63:d8:b6:10:ea:c4:c1:78:69:35:c2:d9:
f9:0a:9b:f6:19:f8:8d:59:5b:85:c4:e9:c5:c3:40:ba:03:9f:
ec:a2:9a:ae:13:1d:3b:6f:c9:e5:0a:9d:5a:98:de:60:61:f1:
13:cc:74:bb:7a:1d:2a:2a:4c:58:3c:6b:26:4b:a4:41:c2:fc:
56:20:57:74:77:97:9a:e8:3b:2f:ca:36:64:a3:bf:f3:95:37:
68:7c:20:bc:b0:f6:0c:54:81:14:63:29:97:7c:67:8c:a1:e1:
24:8b:c8:b6:64:8d:bf:e2:a2:05:e0:09:dd:da:88:17:dc:c7:
5f:fe:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:49 2025 by rpki-client