Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/go-J-JwBrpAVGCsK-19AMahhYuM.roa
File: go-J-JwBrpAVGCsK-19AMahhYuM.roa (raw, json)
Hash identifier: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=
Subject key identifier: 82:8F:89:F8:9C:01:AE:90:15:18:2B:0A:FB:5F:40:31:A8:61:62:E3
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 01941F8C44229475700DD06F20D46F93C83A
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/go-J-JwBrpAVGCsK-19AMahhYuM.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42000
IP address blocks: 212.18.101.0/24 maxlen: 24
2a12:5c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:44:22:94:75:70:0d:d0:6f:20:d4:6f:93:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=828f89f89c01ae9015182b0afb5f4031a86162e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:cb:87:b6:f6:7a:d7:0d:b7:ef:1a:d2:15:
ed:9d:22:c0:5c:bb:6f:ba:c0:f0:12:94:77:7b:84:
b5:2f:83:a4:3f:bc:02:c0:87:b6:5e:9f:59:f0:04:
87:42:03:63:5f:eb:7a:e1:1c:f6:05:da:4b:ad:4d:
24:71:22:db:38:e7:37:99:7f:99:0e:46:9e:8c:af:
c9:fd:34:a4:fd:91:83:cb:60:4b:e9:61:56:45:db:
43:78:6a:5b:ff:e8:54:4e:80:d2:24:83:16:e2:c5:
13:e2:5f:be:9b:f3:e4:df:93:c8:09:ff:bc:01:c2:
31:1e:8a:09:01:c8:0c:8f:12:d4:f0:3d:5b:dd:fd:
b4:da:fe:82:5c:38:ab:e7:b0:7b:a7:4d:35:3a:03:
e6:2a:43:99:d0:2f:c3:b1:d2:c7:1b:a7:1f:10:31:
3a:40:d3:50:7c:85:33:e2:e4:e3:1d:cd:c5:c8:10:
ee:24:87:a0:71:d6:7d:69:cb:2d:0c:fe:9f:64:98:
c1:30:ce:81:cf:a3:c0:ac:89:31:53:93:1f:1b:dd:
b4:9f:44:be:2b:26:1c:bf:a9:20:6f:03:1e:d2:82:
93:9a:a0:f3:04:87:cd:bb:b7:ca:95:f0:23:f1:a9:
60:1e:fb:d1:88:54:f1:26:95:3a:69:64:b8:46:29:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:89:F8:9C:01:AE:90:15:18:2B:0A:FB:5F:40:31:A8:61:62:E3
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/go-J-JwBrpAVGCsK-19AMahhYuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.101.0/24
IPv6:
2a12:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
13:2c:9f:bf:9c:9c:de:95:cc:a4:bc:b5:22:cd:c0:b2:e3:8b:
15:56:48:13:5d:b9:9b:59:0f:51:92:a2:ad:f2:21:13:f5:29:
d9:49:ac:ab:26:50:96:52:63:89:f4:d4:60:2d:42:12:c1:87:
a4:d2:af:77:eb:dd:2c:14:89:10:69:25:ec:b1:7b:21:f3:ad:
82:07:3f:42:b9:54:b8:cb:9d:f4:ad:13:fc:14:5e:23:fc:bd:
a0:5c:54:f7:3e:3f:3a:14:00:c2:15:d3:12:16:55:29:b7:d2:
ac:f3:00:3d:5b:4c:d3:dc:3f:20:2f:b2:e8:97:b3:a3:2c:a0:
8b:88:35:78:94:ed:07:99:77:53:6f:bf:23:ca:4e:5d:ad:ea:
a5:38:73:13:d3:6e:b4:b1:14:bc:0c:80:60:88:75:ed:39:93:
85:c6:8a:eb:6a:aa:b4:37:eb:75:b9:aa:f8:86:96:50:4c:9a:
bb:25:08:01:19:2f:6d:4c:f5:27:11:50:e5:4f:8a:16:9e:10:
23:56:22:dd:f9:62:2b:1e:67:5f:6d:a1:4a:0f:de:84:18:ad:
52:9c:1e:1c:20:30:84:93:2b:88:6f:1d:fd:de:bc:1c:f8:17:
77:68:d2:69:47:b7:72:9a:46:0b:6b:f0:40:6b:40:40:ae:2e:
93:28:29:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:13:54 2025 by rpki-client