Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa
File: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (raw, json)
Hash identifier: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=
Subject key identifier: 19:13:56:47:5E:83:B3:99:95:00:4C:D0:90:9F:1F:E0:4A:47:76:80
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0194252174D64B790C804D2BF3309F8B2D45
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209153
IP address blocks: 2.59.164.0/23 maxlen: 23
2.59.164.0/24 maxlen: 24
2.59.165.0/24 maxlen: 24
2a09:f540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:74:d6:4b:79:0c:80:4d:2b:f3:30:9f:8b:2d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=191356475e83b39995004cd0909f1fe04a477680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:12:54:c2:28:c8:36:0f:14:eb:28:f8:c8:f0:
13:c1:00:65:e4:d1:af:a5:43:8f:e0:a7:fc:c4:86:
99:f5:f5:51:43:dd:d3:31:92:f3:62:9a:b3:fc:2b:
08:d5:7c:ab:4a:c3:d3:da:a9:13:30:2c:5e:4f:8b:
8e:70:97:8e:c1:6b:6d:5e:42:c0:12:bd:a9:7e:de:
04:48:a9:09:c9:5d:ae:d8:11:7f:1a:11:8f:7e:4d:
a2:08:84:da:c5:23:af:70:fa:ef:6b:c3:d8:09:f7:
bb:1c:a6:99:f2:81:8f:66:d8:1d:86:66:ce:23:08:
a2:78:a0:34:7a:e6:34:cb:dd:f9:78:86:31:5b:95:
82:1a:81:34:1b:b1:c9:80:1f:bc:2e:9d:b8:c7:1a:
c8:bc:9e:e3:bb:1e:81:8a:81:0f:5a:a1:e5:ca:9f:
40:f4:4b:08:eb:d2:f2:cf:ef:30:53:f1:80:ae:8c:
11:be:5c:e9:a8:de:62:c6:ac:f1:e3:15:61:c7:89:
df:2a:c1:27:c0:42:01:e3:5c:f8:0e:59:64:02:07:
59:b8:a2:78:60:8a:37:52:71:f9:81:16:a1:0d:34:
3d:66:17:95:0b:c1:80:10:b6:6a:47:5f:20:91:c8:
7a:d5:fa:18:15:d0:aa:e8:6d:64:5d:eb:9a:bb:89:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:56:47:5E:83:B3:99:95:00:4C:D0:90:9F:1F:E0:4A:47:76:80
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.164.0/23
IPv6:
2a09:f540::/29
Signature Algorithm: sha256WithRSAEncryption
a8:03:df:12:7e:c6:07:cc:a8:2a:2b:f2:25:a2:2c:fa:dd:5f:
65:13:93:5a:74:05:76:b9:49:e5:29:bb:90:56:74:df:58:99:
e4:04:50:f6:c8:74:86:4f:72:63:f5:e7:d7:74:4e:ea:56:93:
dd:16:f1:b5:f2:87:cb:f3:2a:d7:69:7a:73:ab:be:8b:66:d1:
8f:01:e4:aa:51:5c:2e:8d:0b:a2:27:63:62:bc:dc:f0:84:ea:
1b:62:28:04:91:f5:68:f5:99:e9:db:6c:4e:a9:db:8a:f0:38:
6c:a7:94:e0:41:7f:df:51:18:e9:66:e2:53:91:fd:da:49:d8:
60:7e:f2:a3:5a:73:8a:31:51:2a:19:9a:86:31:9b:6d:78:f1:
fc:b9:21:3b:bc:f1:ad:00:ed:00:bb:d6:40:ff:c9:3f:4d:40:
9b:9f:2b:5c:f7:8f:d8:07:bf:3f:40:06:57:cb:6b:d5:99:58:
62:f2:35:26:06:a9:a9:8f:c0:e9:22:4f:2e:8a:4b:72:5d:86:
e6:3f:fb:d4:70:c6:18:97:37:ca:f2:6f:e9:d8:5e:96:ae:a3:
56:ec:75:d4:64:af:28:dd:8d:01:d3:e1:02:5e:9a:cc:44:49:
6a:de:7a:81:52:f3:62:6d:59:40:4c:c3:48:c6:ec:62:b1:c5:
da:66:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:12 2025 by rpki-client