Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/GBpd_CXuB-9kNsxFo6gk--Reihk.roa
File: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (raw, json)
Hash identifier: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=
Subject key identifier: 18:1A:5D:FC:25:EE:07:EF:64:36:CC:45:A3:A8:24:FB:E4:5E:8A:19
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 01941F8C2DC6149FC83964AA953211FBA1CC
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/GBpd_CXuB-9kNsxFo6gk--Reihk.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212100
IP address blocks: 185.1.59.0/24 maxlen: 24
2001:7f8:cc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2d:c6:14:9f:c8:39:64:aa:95:32:11:fb:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=181a5dfc25ee07ef6436cc45a3a824fbe45e8a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:69:55:61:5b:c8:4d:d0:a0:b0:3d:b6:92:
2a:01:e3:42:6b:8e:44:a3:bb:66:b9:75:ee:9e:00:
25:bb:27:5a:ae:14:ac:a1:f6:05:a8:0b:0b:87:c0:
76:19:6c:3c:ba:48:20:33:50:2e:d6:99:d5:d5:bd:
96:f4:4a:79:df:a4:f4:00:1a:ed:e0:6d:a2:92:90:
4e:4a:1a:2d:29:67:d8:46:ea:14:90:12:e3:a3:6e:
01:07:9e:f6:13:2a:81:d9:49:ff:05:fc:d8:81:2e:
ce:ec:8c:fc:c7:99:bf:30:dd:8a:a8:29:98:ad:12:
11:a4:46:6a:9d:5d:a9:5b:c5:1c:0b:b6:62:e5:f8:
4f:e3:6b:47:84:56:87:9f:59:72:03:91:86:81:03:
6d:1a:82:da:74:59:78:00:5c:ea:c2:b3:f5:76:08:
3a:f6:ed:b3:11:9c:85:e9:54:5c:2f:de:35:f7:d4:
00:b8:a7:9f:2f:43:7b:ae:d7:64:77:20:4f:c4:99:
6a:9a:b0:ad:ef:a1:84:9d:55:d7:01:f6:52:d3:dc:
1e:99:3e:17:96:96:ce:56:9a:ad:a5:f7:b5:52:53:
fa:cd:b3:14:95:c6:1d:80:8c:ec:87:e6:53:fe:25:
a8:31:f1:77:fe:b7:f1:07:c4:1e:80:2f:d8:b7:a9:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:5D:FC:25:EE:07:EF:64:36:CC:45:A3:A8:24:FB:E4:5E:8A:19
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/GBpd_CXuB-9kNsxFo6gk--Reihk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.59.0/24
IPv6:
2001:7f8:cc::/48
Signature Algorithm: sha256WithRSAEncryption
99:28:2f:5e:5e:fd:e0:49:a9:35:e3:94:a2:d7:14:c9:00:e7:
3a:64:bf:10:71:40:8e:9d:a8:b6:a8:7a:11:28:34:d4:20:12:
66:50:c3:96:cd:ea:27:c5:8a:89:79:e8:b3:17:4f:dd:0f:70:
9c:16:75:91:35:26:c9:d7:e3:a7:58:77:cc:89:ee:46:a4:a6:
84:87:b0:29:85:6f:98:33:7d:b2:43:b8:3e:36:63:50:0b:b1:
ec:f5:3e:b5:47:52:cf:5d:fd:aa:a8:f2:2a:24:77:ad:07:75:
f2:b4:d2:6a:3c:62:68:ac:9e:8b:53:96:7d:34:f3:ef:73:12:
b8:88:da:f6:55:68:0a:71:f3:9e:69:92:51:e3:fd:e8:0b:bd:
38:4f:68:04:81:44:48:6c:08:0c:36:3d:c0:3e:b0:ea:7e:35:
49:17:5f:d0:c7:68:85:0e:48:5c:f3:bf:91:b6:41:e4:e6:f3:
1a:0b:ee:3a:75:fc:a7:fc:53:99:8d:89:76:86:70:1f:86:6a:
e0:4f:4c:1c:dc:69:c3:1d:fb:86:8d:35:9c:eb:d6:ad:c7:34:
3a:10:9f:22:20:91:18:bc:6f:a4:dd:72:0a:98:e7:e8:65:d1:
c9:af:0c:09:af:72:30:88:56:42:d0:20:33:be:36:5b:e8:12:
d7:73:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:27 2025 by rpki-client