Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/GAgtr-CLltTm3C54wjvqWFoClvc.roa
File: GAgtr-CLltTm3C54wjvqWFoClvc.roa (raw, json)
Hash identifier: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=
Subject key identifier: 18:08:2D:AF:E0:8B:96:D4:E6:DC:2E:78:C2:3B:EA:58:5A:02:96:F7
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F8C37D190956F227A0A057B7A0EEB
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/GAgtr-CLltTm3C54wjvqWFoClvc.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44718
IP address blocks: 89.252.244.0/24 maxlen: 24
89.252.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8c:37:d1:90:95:6f:22:7a:0a:05:7b:7a:0e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18082dafe08b96d4e6dc2e78c23bea585a0296f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:55:37:cc:b5:60:5f:e3:cd:16:c8:19:0e:
b8:0a:d4:b1:e9:53:d8:26:a8:67:d1:09:56:2b:00:
d8:0a:bf:6f:61:91:82:4a:74:31:38:24:e2:5b:91:
d9:44:5c:65:27:91:29:47:2e:9f:c3:a3:71:76:3d:
6a:fc:fe:e3:98:ca:83:ce:70:5d:63:f2:90:2a:a0:
fc:35:7c:87:95:b8:8e:bd:b3:9f:fc:ef:91:9b:a6:
bd:3e:4e:88:20:1d:fe:d5:6f:44:f5:70:9f:58:af:
5d:06:44:1b:28:20:1a:a8:d0:70:a2:75:99:f3:70:
f8:81:ea:29:e1:14:d0:e7:67:29:28:98:3e:99:55:
8e:a0:cb:05:6a:40:54:c7:3d:06:b6:e5:00:06:6a:
14:34:16:d4:da:fe:e6:c6:6a:4a:51:cf:38:7b:13:
06:d0:2f:5b:b8:69:6a:6c:fd:3a:da:af:59:c9:55:
98:f9:87:c0:c4:05:3c:50:b9:76:40:02:cd:85:95:
96:c5:f4:66:59:42:83:d9:83:34:39:dc:d0:4b:8a:
5d:6a:ac:f6:1e:49:32:b3:63:60:71:48:24:ac:23:
7a:59:c0:f1:ec:4e:13:4e:53:a9:c6:60:74:32:36:
d5:a4:a4:61:d0:1d:3a:68:fd:47:ab:d2:78:51:72:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:2D:AF:E0:8B:96:D4:E6:DC:2E:78:C2:3B:EA:58:5A:02:96:F7
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/GAgtr-CLltTm3C54wjvqWFoClvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.244.0/23
Signature Algorithm: sha256WithRSAEncryption
99:fb:66:df:8b:00:23:ba:f1:dd:3b:c5:d2:5c:ee:d3:5f:0d:
57:a7:ed:67:1d:c7:e9:2c:92:bf:75:54:8c:1c:2f:81:3c:40:
eb:ee:b1:ca:ba:b0:ec:18:98:cd:59:c1:ff:62:0d:40:09:34:
f4:cb:c5:03:c4:9c:b3:98:90:77:ae:eb:13:e0:27:fa:0f:d9:
93:19:7c:66:95:71:59:79:1e:b3:bb:13:12:18:ab:61:e1:10:
b1:7c:96:56:f4:e7:ce:ae:e0:ec:aa:ff:fb:34:ad:c9:b9:b3:
8b:ea:71:4c:98:5d:cc:2f:f8:c4:1e:cb:a7:60:f8:e0:e6:0a:
fb:87:35:09:19:6f:10:a5:b9:d4:ff:43:9c:48:d1:8b:07:77:
f0:b9:a4:08:4b:fc:08:b9:90:9c:0c:74:0e:e9:a3:3d:fc:96:
67:5c:7a:4e:e7:43:e6:28:c7:c3:d8:09:60:7f:4a:75:1c:48:
aa:bf:7f:70:97:c0:44:62:47:db:eb:79:2d:a8:c4:38:d4:a8:
4d:84:74:69:60:f7:05:87:b7:11:9d:d7:c5:16:4e:97:a7:ce:
8e:8d:19:0f:54:02:f6:aa:37:02:9e:3e:7c:3d:9d:b7:c8:18:
56:9d:05:3b:08:23:65:d1:6b:7e:f4:0d:12:f7:41:37:c7:4c:
32:31:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:46 2025 by rpki-client