Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/K__GMoXF7tpKIBCiKEO4YQunEUE.roa
File: K__GMoXF7tpKIBCiKEO4YQunEUE.roa (raw, json)
Hash identifier: Hsn/cSGE8VGLi98WwQiwxBKaIoAEOSSG1bmkWgHfUWc=
Subject key identifier: 2B:FF:C6:32:85:C5:EE:DA:4A:20:10:A2:28:43:B8:61:0B:A7:11:41
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 01942444E7B2F6A76CFB9A8B459BDC087D22
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/K__GMoXF7tpKIBCiKEO4YQunEUE.roa
Signing time: Wed 01 Jan 2025 23:48:02 +0000
ROA not before: Wed 01 Jan 2025 23:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e7:b2:f6:a7:6c:fb:9a:8b:45:9b:dc:08:7d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Jan 1 23:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bffc63285c5eeda4a2010a22843b8610ba71141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:d7:fa:91:96:33:4c:2e:26:36:5d:47:c4:
83:b7:e5:e6:50:2e:9d:42:c3:d9:ee:43:bb:90:b7:
ca:a7:df:db:b6:ec:c9:79:e1:75:ae:5b:21:ed:78:
64:03:50:f1:dc:b7:c1:2f:e1:50:17:51:8c:3f:41:
e1:5e:60:7f:fc:30:fd:72:e6:d5:8e:0a:d6:65:d6:
59:7a:df:f0:45:e2:f7:22:39:3d:fb:eb:73:fb:f1:
a1:15:46:ca:2d:0a:de:46:75:54:8c:d3:83:01:f3:
ec:0e:cd:42:e9:da:91:7d:af:3e:3c:3d:13:11:8f:
77:3b:a6:14:e8:b0:c2:4f:22:9f:d8:b5:3b:70:9d:
b3:66:13:94:1d:79:82:24:2d:7e:ef:20:df:34:30:
cd:83:fa:d7:a0:c8:4c:d7:6b:8b:bd:cc:6f:38:2c:
0f:82:23:12:0b:85:d6:cd:6a:8e:88:ec:67:3b:00:
fa:3d:93:7f:09:36:1f:b7:c9:08:87:6b:4b:89:47:
69:c3:1f:94:04:d4:49:9a:8b:17:a6:60:67:c7:b0:
8b:2b:7c:01:08:89:44:58:42:b9:4f:0d:03:25:12:
f8:4a:c7:cb:76:3a:38:8e:e0:cc:35:40:44:bf:4b:
50:5c:a0:a2:c0:67:78:9a:53:4e:56:60:60:3d:9e:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:C6:32:85:C5:EE:DA:4A:20:10:A2:28:43:B8:61:0B:A7:11:41
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/K__GMoXF7tpKIBCiKEO4YQunEUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.120.0/22
193.188.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:60:6e:29:ae:e3:23:bd:de:51:b9:96:97:04:0e:46:a1:bb:
c9:c1:6b:5c:09:d1:cf:01:5a:04:20:9b:90:69:00:53:e8:ea:
3b:a6:db:ca:f5:b7:02:7f:1b:3c:21:f7:9f:56:c9:98:ad:a2:
90:c5:50:72:a3:8a:4d:9e:0b:71:99:ad:47:62:b6:17:b6:ef:
a8:1f:f0:c4:a6:8b:6d:4a:b5:57:a8:0d:a0:51:30:64:ba:0f:
7e:0d:bd:a6:cc:e4:20:a5:ca:77:81:4b:d5:e9:ad:25:67:a0:
6c:6b:6e:c8:68:bf:74:81:82:a2:50:e5:6d:1c:b5:bf:16:14:
23:1e:eb:58:50:f4:68:58:e4:34:e0:10:77:16:27:4e:90:28:
c2:67:e4:12:30:e9:b9:5d:9d:83:33:79:71:9f:44:e3:2a:68:
29:7f:a9:da:6d:57:9c:3b:50:9e:2e:ba:33:9f:37:da:75:63:
da:c4:aa:b5:7e:97:b1:76:80:3c:f6:24:c2:7b:65:bc:b2:d2:
e1:f0:0f:08:40:c2:db:ca:e3:29:0c:84:de:cd:e5:34:94:f1:
55:41:db:54:40:4e:fc:52:d7:a9:a9:e6:a5:05:5d:83:0a:06:
1d:24:17:12:81:b0:e6:af:c0:05:7c:23:93:21:83:e6:dd:09:
8e:07:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:03 2025 by rpki-client