Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/GsPXdLp5QJlWkWRdf0s9RY21G1E.roa
File: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (raw, json)
Hash identifier: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=
Subject key identifier: 1A:C3:D7:74:BA:79:40:99:56:91:64:5D:7F:4B:3D:45:8D:B5:1B:51
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 01942521875A144774AA0A949B13E8AC4A40
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/GsPXdLp5QJlWkWRdf0s9RY21G1E.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39704
IP address blocks: 194.13.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:87:5a:14:47:74:aa:0a:94:9b:13:e8:ac:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac3d774ba7940995691645d7f4b3d458db51b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:dd:03:70:b9:6a:cf:35:fb:9b:80:0b:a7:
6e:1a:1b:45:46:36:48:27:f4:69:2e:77:80:7e:87:
64:c2:b1:bf:54:08:b8:35:14:76:38:af:6d:e2:f4:
03:29:fe:2a:9a:ba:2a:6b:c4:2a:92:9f:2a:81:5b:
df:4b:31:4c:16:70:f6:04:65:dc:e5:a9:f2:87:de:
81:61:f0:9f:f5:24:c7:bc:c6:42:c1:3b:15:f7:cd:
10:59:f1:5e:f7:5a:ff:c0:0c:41:4b:de:06:26:34:
3e:ae:bd:6a:82:dd:40:ec:5c:6f:ee:80:d4:d5:76:
ad:72:b5:f2:2b:3b:69:75:d2:13:c4:06:7d:8e:9a:
22:9a:92:a9:15:2f:a1:84:72:fc:01:29:b3:77:fd:
75:1f:ce:06:ba:12:e3:21:6f:30:c2:c0:9d:0c:43:
ae:06:9e:d4:e6:d1:f7:df:c3:8d:f0:c4:8d:71:79:
24:74:00:d9:e9:5e:1f:96:b0:9f:9c:f3:59:49:85:
92:db:c5:66:c4:c2:50:5d:c9:a6:e4:da:dd:be:54:
2e:7f:f9:d6:8c:66:80:df:6b:22:fd:89:f0:9e:35:
5c:5f:4e:bc:b9:58:d2:c7:17:72:b9:35:72:ec:05:
ad:75:11:ef:cd:8e:5e:f3:d8:af:f8:4f:ca:a1:66:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C3:D7:74:BA:79:40:99:56:91:64:5D:7F:4B:3D:45:8D:B5:1B:51
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/GsPXdLp5QJlWkWRdf0s9RY21G1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:89:9d:0c:c9:80:fe:b3:5f:dc:8a:8a:db:f2:ae:c3:4d:88:
ac:8d:d7:05:a0:95:a5:fe:03:f8:9c:f3:86:78:e6:b6:5d:f4:
5f:8f:a9:42:55:14:82:c0:00:f0:f4:a0:5a:28:6a:4d:f2:df:
a1:2c:24:10:f5:ca:35:5c:b8:a3:d1:79:c2:cb:81:95:54:6e:
de:80:8d:0d:d8:a6:c4:af:4c:ba:ef:fb:97:77:87:c0:ef:51:
50:bb:0d:97:7a:46:d4:ae:d2:ad:62:98:07:d2:4c:5e:8a:15:
a1:79:9b:39:21:3f:24:49:47:9d:47:1c:c2:a0:b8:e8:ce:31:
f7:28:74:6a:3e:00:47:98:80:c5:ac:15:5a:fd:4d:ff:ad:95:
b9:97:03:d7:76:9b:cd:78:70:b7:bd:fc:fe:86:9a:f2:9f:72:
88:d6:33:3a:f6:4f:13:4f:8f:dc:98:5e:f0:da:8e:58:99:db:
5f:2b:6b:b9:92:d5:24:31:c1:88:0f:c1:48:6f:8c:d6:84:d7:
65:61:17:82:f8:20:35:43:57:89:42:1c:f2:79:03:e0:36:d3:
9b:1b:20:3b:0b:33:33:e4:04:eb:bd:c3:33:38:80:a8:87:21:
3e:e1:13:bd:e1:51:5f:e1:0d:30:6a:cd:bb:46:e1:74:b4:fb:
e3:b5:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:55:53 2025 by rpki-client