Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/G-Af5X2_2YIHhUlxyoAkwDDHogk.roa
File: G-Af5X2_2YIHhUlxyoAkwDDHogk.roa (raw, json)
Hash identifier: vk5Vdv6JR5C5h80ouCg+GEL5alRWF0QWdH9YklynVJ0=
Subject key identifier: 1B:E0:1F:E5:7D:BF:D9:82:07:85:49:71:CA:80:24:C0:30:C7:A2:09
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC8151B7F77BD854215F3F4E58BAA
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/G-Af5X2_2YIHhUlxyoAkwDDHogk.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198216
IP address blocks: 157.25.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c8:15:1b:7f:77:bd:85:42:15:f3:f4:e5:8b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1be01fe57dbfd98207854971ca8024c030c7a209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:fa:e8:3c:a3:d2:a6:8b:9e:a2:a0:c1:ca:
89:e2:8d:ca:a2:99:f9:d3:12:3a:41:08:59:4c:75:
21:58:42:1e:df:28:36:4f:7f:9f:50:2a:af:49:95:
ac:a7:c2:ab:63:44:bf:aa:0d:a5:4c:c5:7f:08:e8:
5b:d5:25:00:1f:61:c9:3d:d9:ae:1c:01:24:38:cf:
e2:ea:ad:5e:a0:2e:69:bd:1d:49:e4:67:8e:73:51:
ea:50:62:42:2a:ae:82:c1:44:c5:83:8e:c3:5b:d9:
20:2b:13:0a:dd:33:ad:c0:0d:eb:32:f5:e7:43:9f:
a8:fa:f7:1d:2d:8d:8d:d9:39:24:1d:ad:8c:bf:aa:
52:13:e4:b8:8a:10:0b:da:63:e3:e3:5b:46:ea:88:
b8:1d:2b:83:f1:93:68:83:53:3b:c1:10:3a:94:77:
0f:9e:c7:e6:6e:54:5b:23:e5:6d:d8:06:d7:b4:b6:
54:6a:c8:8f:30:41:5c:4c:f7:db:13:8e:26:d4:ac:
f8:24:86:3d:76:65:35:a7:74:85:d6:35:a5:67:8d:
29:45:ba:2e:2b:e1:fc:63:b9:d8:e9:5c:59:31:cd:
0c:bd:a4:58:9c:02:20:50:50:9d:54:68:1c:ef:12:
94:59:cd:21:6d:26:db:fe:07:8b:52:41:6c:44:e8:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:1F:E5:7D:BF:D9:82:07:85:49:71:CA:80:24:C0:30:C7:A2:09
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/G-Af5X2_2YIHhUlxyoAkwDDHogk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.68.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a4:4c:18:ea:e3:03:e7:61:11:e9:69:59:02:a6:d0:bb:d3:
7b:5f:e0:f1:a8:76:c3:48:53:34:e0:d7:8c:50:1b:5e:b5:67:
50:ed:0d:b0:41:c4:1e:d4:23:b4:ca:a3:bf:3a:bf:a6:07:13:
e2:e4:89:7a:0f:97:f5:00:6c:a6:06:ec:84:37:5f:c4:13:2d:
95:6e:d1:c1:18:6d:f3:5a:a9:b1:f6:58:af:c4:5a:a9:cf:8d:
c6:44:66:9e:56:0f:73:71:96:6d:fc:77:ee:da:a9:ae:19:bc:
a5:a1:1a:1a:a8:8d:6a:54:e3:3b:b8:c4:71:c3:2a:24:a6:66:
6b:be:14:ca:79:29:61:87:f5:d3:85:55:1d:65:d5:11:03:33:
df:9e:56:0c:c5:a1:70:11:fc:fc:49:45:a8:35:a9:fa:df:98:
7b:aa:b1:20:cc:c6:77:2f:fc:bd:ca:dc:68:48:bf:69:3c:cf:
f6:93:ad:06:98:c9:5c:f2:fe:e7:9c:0a:f0:75:b1:cd:ce:2c:
39:64:63:29:e0:1d:76:8d:27:41:55:62:53:d0:26:37:29:5f:
8c:92:4b:77:05:1d:68:18:fe:ab:b5:57:85:89:ac:aa:f6:1c:
e2:78:e9:92:21:38:34:e7:27:b6:3e:bc:cc:de:fa:2a:ee:37:
08:29:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:25 2025 by rpki-client