Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/9GRLI99QW8AowW4BJrB_YuATNFA.roa
File: 9GRLI99QW8AowW4BJrB_YuATNFA.roa (raw, json)
Hash identifier: Uy9rlczyVO0kznBabdNTB+yXy+eaioNFTev/vrARLbs=
Subject key identifier: F4:64:4B:23:DF:50:5B:C0:28:C1:6E:01:26:B0:7F:62:E0:13:34:50
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0194A7CEF886C43C53B069BF63AE68EC6F72
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/9GRLI99QW8AowW4BJrB_YuATNFA.roa
Signing time: Mon 27 Jan 2025 12:49:06 +0000
ROA not before: Mon 27 Jan 2025 12:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.84.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:ce:f8:86:c4:3c:53:b0:69:bf:63:ae:68:ec:6f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jan 27 12:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4644b23df505bc028c16e0126b07f62e0133450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:2f:1b:64:82:81:f4:bc:6e:37:1c:1a:2f:
48:35:37:b0:5a:17:1f:1e:a5:b5:10:c2:bc:78:cf:
6c:4c:14:99:5e:27:f7:41:45:88:70:63:fa:ee:5a:
61:e2:48:6c:b7:7b:7c:22:69:b9:28:2f:0e:43:d8:
f7:1c:51:4f:bb:e8:3c:06:70:98:53:90:60:5b:64:
86:48:b8:59:06:af:32:fd:e3:82:ae:ec:6d:a6:5e:
f8:b4:b9:af:19:70:b2:46:eb:2c:cf:a1:47:97:d4:
fd:47:27:42:87:c1:ba:26:df:85:5e:4a:bb:fe:c6:
58:ba:62:33:99:e9:7f:5c:53:e7:60:e5:9a:09:09:
ae:df:e0:1d:05:ac:20:47:3b:75:35:22:4a:96:d2:
71:e8:74:24:b9:55:99:ec:d7:47:c3:19:fa:6d:ce:
68:4a:54:77:ec:88:68:64:af:98:7f:9f:52:c7:bd:
57:5b:f6:b1:c8:03:70:97:d5:de:d3:01:30:50:a2:
7c:a2:45:c1:08:cc:88:46:9b:46:ad:24:d2:b9:96:
55:8c:22:1e:43:1c:ed:1e:ef:5c:54:d3:28:64:53:
58:51:c6:5c:25:63:e8:47:31:ec:20:62:64:54:e0:
ff:f8:ff:cc:8b:e4:af:2f:e3:e9:17:bc:4d:f7:56:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:4B:23:DF:50:5B:C0:28:C1:6E:01:26:B0:7F:62:E0:13:34:50
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/9GRLI99QW8AowW4BJrB_YuATNFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:bc:eb:c3:b2:a2:51:19:2d:2c:0d:bb:c5:95:9e:96:73:74:
59:21:b1:18:00:05:cd:e2:9f:73:cb:48:e1:f4:38:e8:2e:fd:
10:f0:0c:8b:5f:fe:a0:5c:00:b4:e6:2d:f5:55:36:7b:8e:19:
1f:0a:65:12:99:42:90:92:e2:e7:99:e7:24:77:dd:df:5a:80:
4b:75:c5:f1:c0:8d:72:33:f9:50:c5:0d:cf:b8:16:b3:93:ec:
89:95:08:2d:a2:e9:a6:45:69:16:94:03:07:92:7f:32:06:4a:
a2:72:f6:76:aa:c5:8e:36:f6:d0:19:03:0e:93:f0:cb:e9:b0:
fa:25:ea:8f:eb:5d:0e:e8:0c:f3:d6:d9:07:a2:13:15:da:95:
44:d5:e8:a0:e2:46:17:53:c2:9d:6d:9c:93:b4:d6:42:90:cf:
c9:57:f0:e3:9e:89:8a:68:2a:ee:e0:24:01:9d:70:02:b3:1f:
48:f1:c3:e6:e4:6e:f4:15:f3:fc:c8:ce:51:67:48:6c:6a:bb:
c2:e0:1f:af:5a:fe:60:5b:85:d4:48:05:63:09:92:b2:67:b7:
00:2b:2e:99:b7:c6:a7:27:ff:bf:17:e4:ea:e1:f7:80:a8:28:
c9:ea:b8:ee:39:df:82:18:f0:80:87:8f:f4:a4:5e:1b:67:11:
a2:24:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:56:00 2025 by rpki-client