Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/gCL6P0fbO_LNHRuN90GEZIm16Ok.roa
File: gCL6P0fbO_LNHRuN90GEZIm16Ok.roa (raw, json)
Hash identifier: opU7m8zy2/4Z2p/3+3eT8M7BozyHmf064rTupiLflAA=
Subject key identifier: 80:22:FA:3F:47:DB:3B:F2:CD:1D:1B:8D:F7:41:84:64:89:B5:E8:E9
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 01941F8C33EAF5F943209A047F87AEF56180
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/gCL6P0fbO_LNHRuN90GEZIm16Ok.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 5.152.152.0/23 maxlen: 23
31.12.80.0/22 maxlen: 22
117.55.200.0/23 maxlen: 23
134.65.164.0/22 maxlen: 22
194.179.134.0/23 maxlen: 23
217.11.175.0/24 maxlen: 24
2a02:7e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:33:ea:f5:f9:43:20:9a:04:7f:87:ae:f5:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8022fa3f47db3bf2cd1d1b8df741846489b5e8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b2:60:94:d0:a6:44:14:33:0c:93:9b:d0:56:
69:ea:94:80:e5:51:da:b8:cd:a8:07:0d:0c:e0:0d:
d6:de:13:a4:21:c6:92:76:5b:6f:fe:61:c4:57:ee:
d7:71:3d:6f:a7:2c:40:10:5c:48:8e:de:a9:91:ee:
7e:20:c8:17:e6:58:7e:52:e2:be:c2:65:85:18:2c:
59:5a:8d:c8:7e:30:af:d0:63:65:b3:5b:aa:b4:71:
d3:d5:b1:0e:b1:5d:43:6d:d9:1e:0e:64:e0:1a:95:
8d:e8:7e:df:45:97:f2:4c:11:15:96:75:88:99:40:
ca:8d:86:2d:4d:cd:13:98:55:ce:98:3f:ae:4f:f4:
77:ad:59:77:25:5c:3b:6d:8f:47:36:9a:1a:74:8e:
a4:da:c6:a7:dc:38:fb:57:11:e7:80:c8:64:ea:8f:
fd:c3:9b:ea:d0:d7:8d:73:fa:35:4c:d4:44:f9:fb:
9a:77:f6:24:96:20:c6:8f:a3:78:0c:4e:d4:1b:48:
02:41:4a:9e:97:23:84:43:d9:f1:ea:34:1b:c9:68:
28:15:6c:6c:b5:b3:78:b0:c2:13:cf:c7:4d:b5:4e:
39:f7:f3:d9:84:8e:a3:b6:26:f7:64:1b:77:f8:d5:
89:39:9e:4e:3e:a2:b0:a4:17:c8:61:21:a3:f9:a5:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:22:FA:3F:47:DB:3B:F2:CD:1D:1B:8D:F7:41:84:64:89:B5:E8:E9
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/gCL6P0fbO_LNHRuN90GEZIm16Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.152.0/23
31.12.80.0/22
117.55.200.0/23
134.65.164.0/22
194.179.134.0/23
217.11.175.0/24
IPv6:
2a02:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
71:43:bc:ef:bd:65:39:c4:43:5f:b4:e6:37:d2:9b:9b:2c:d7:
64:9d:0b:0d:db:20:3e:40:39:72:2c:2c:c8:d9:88:3e:0c:2f:
48:fd:fd:32:ab:9a:e9:83:13:28:f2:f4:64:c5:71:c3:12:6d:
8f:33:6f:6a:e7:cd:8c:ee:85:0d:df:c2:c9:0b:f1:25:fa:e1:
08:b9:e6:b1:36:81:15:40:14:94:b1:32:cc:5a:a0:a1:82:ac:
36:16:9c:3d:e6:2a:a0:a6:fa:f0:f6:c1:c4:ac:de:d5:b0:e8:
6b:a2:85:14:f1:78:3d:7c:b4:f5:f2:45:87:42:32:b1:97:49:
1d:85:61:f9:fa:ec:de:23:5e:2b:a6:dd:e4:18:b1:51:83:3f:
44:45:7e:50:2a:88:c6:1e:ea:53:0b:3a:01:ef:1a:e7:7e:5e:
20:df:71:88:12:ff:6f:0d:24:4a:f2:4f:5a:85:48:4a:b6:25:
68:1e:4c:1b:6b:4b:fc:e0:4d:38:59:12:fc:b8:ac:b8:ce:c0:
1f:6b:74:2b:8f:e3:2a:12:15:e6:41:ed:e6:47:f7:c5:9b:5f:
98:01:83:68:96:43:19:fa:46:bd:d4:74:c5:c6:6c:92:16:78:
1d:39:03:b0:ac:9c:b1:d7:8c:af:0d:33:2a:28:63:d8:b2:39:
6d:9a:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:15 2025 by rpki-client