Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/GESlc56i4-gdhOlM9uZOfgy8aCc.roa
File: GESlc56i4-gdhOlM9uZOfgy8aCc.roa (raw, json)
Hash identifier: 9R3PoH4Q7y5D2LVnthi2TWzvIx4vLCuEUl/il2GVgqM=
Subject key identifier: 18:44:A5:73:9E:A2:E3:E8:1D:84:E9:4C:F6:E6:4E:7E:0C:BC:68:27
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 0194236A4D4EE689B65CF8A5754094B6A9A4
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/GESlc56i4-gdhOlM9uZOfgy8aCc.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61399
IP address blocks: 185.211.228.0/22 maxlen: 22
185.211.228.0/24 maxlen: 24
185.211.229.0/24 maxlen: 24
185.211.230.0/24 maxlen: 24
185.211.231.0/24 maxlen: 24
2a0b:6e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4d:4e:e6:89:b6:5c:f8:a5:75:40:94:b6:a9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1844a5739ea2e3e81d84e94cf6e64e7e0cbc6827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:08:bf:74:c6:9f:fc:fc:b8:0d:3f:10:5e:23:
b8:61:44:9a:d0:42:e9:af:65:8d:6b:59:68:bf:eb:
01:6c:1a:ef:1c:27:12:1e:25:67:eb:1e:aa:e1:f1:
6c:d8:46:95:bc:2a:38:dd:dd:d4:49:ac:f7:c4:d2:
bf:19:66:47:9b:39:d7:16:82:5a:43:04:67:e9:91:
55:3f:27:ae:60:f6:71:b1:af:03:85:60:c7:67:22:
04:88:26:3a:ba:70:5a:ef:75:94:40:06:eb:cc:57:
c8:da:ff:52:2e:a7:92:4b:90:1a:45:49:0a:b5:12:
11:4c:f5:fa:10:1d:31:84:88:d2:b4:f4:db:67:40:
2a:df:65:d4:8c:37:0c:3f:fc:f2:06:fe:ed:d8:02:
ff:19:25:58:42:13:49:12:de:4e:83:c6:b7:8d:51:
91:fc:9d:1c:0c:63:38:a0:30:7c:69:19:fb:c5:52:
8e:b5:42:03:9d:2d:c7:75:80:84:ff:f6:73:0a:9e:
9a:da:f8:7b:b5:29:81:7d:0d:a4:6a:f6:2e:3d:2c:
b0:5e:c0:ac:b5:08:1d:71:77:e3:64:3b:07:80:eb:
fc:05:9e:9a:75:81:e1:6a:eb:29:ad:a7:ef:ba:74:
d3:35:6b:08:f6:2c:a3:26:6f:04:44:1b:f0:3d:84:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:A5:73:9E:A2:E3:E8:1D:84:E9:4C:F6:E6:4E:7E:0C:BC:68:27
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/GESlc56i4-gdhOlM9uZOfgy8aCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.228.0/22
IPv6:
2a0b:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
62:6e:ab:d3:2a:8e:fb:f9:c4:1b:af:e0:b7:67:8b:0f:86:52:
92:87:5d:25:ee:d4:09:d2:44:dd:05:e6:28:90:07:77:47:cd:
9b:f3:e8:2e:c2:d7:b8:0e:91:e8:06:d0:84:69:37:eb:f8:cb:
6e:fb:47:03:2d:cd:af:0c:dc:75:29:c9:6b:5d:bc:31:6b:f6:
b8:6d:fb:a8:d7:77:15:b7:f8:80:39:c6:57:44:eb:df:45:10:
0d:e3:60:24:d6:a2:93:cb:c5:d9:da:b3:26:a7:1b:f8:53:03:
82:74:f6:4e:b5:a6:66:a7:ab:73:15:f2:23:ad:2f:9e:38:59:
be:99:43:ba:10:c2:23:b2:13:4f:2e:ed:9d:78:bc:98:12:76:
74:7d:71:33:6f:f6:43:12:97:13:c9:56:a6:d9:3b:2f:d1:7c:
72:cf:06:b4:ba:db:5f:84:36:f6:74:84:69:f3:41:ad:a4:90:
2d:2f:b1:f3:7f:dd:8f:92:3b:82:81:ce:8c:e7:4d:da:3e:38:
e6:23:a3:41:eb:30:b0:83:95:51:a5:65:13:60:1e:c2:e0:53:
41:fe:81:f1:17:bd:71:ac:80:02:d3:33:ef:48:a5:1f:0f:6e:
50:df:8d:5e:bf:2b:9b:10:e4:92:3f:23:d9:6a:3f:a1:64:01:
99:39:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:35 2025 by rpki-client