Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/GXrNny7tuwzWiq-Z-LE5U24vo4k.roa
File: GXrNny7tuwzWiq-Z-LE5U24vo4k.roa (raw, json)
Hash identifier: xQ3KfJWrZ/Oh+PMOxbU8NX4YVFe6LbTJ05dku52B6s0=
Subject key identifier: 19:7A:CD:9F:2E:ED:BB:0C:D6:8A:AF:99:F8:B1:39:53:6E:2F:A3:89
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 019420D663AE6A4CBF6D6AA853111C3F6E97
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/GXrNny7tuwzWiq-Z-LE5U24vo4k.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2376
IP address blocks: 90.72.0.0/16 maxlen: 16
90.97.0.0/17 maxlen: 17
2a01:dfff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:63:ae:6a:4c:bf:6d:6a:a8:53:11:1c:3f:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=197acd9f2eedbb0cd68aaf99f8b139536e2fa389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:97:4f:5f:5e:80:39:82:53:d2:f5:c7:aa:
4b:55:6f:b5:fc:b4:e7:aa:59:8e:4e:f1:50:04:2f:
ed:63:9f:3b:8d:4d:9f:fb:82:7d:13:da:47:38:08:
24:de:97:19:27:37:cb:30:07:69:73:9e:93:79:d4:
09:d7:e9:aa:53:ef:94:90:94:66:73:56:96:aa:31:
34:d9:84:f2:5a:01:a0:88:13:60:aa:cf:53:4b:20:
1d:79:dd:60:05:d4:bf:dd:ca:12:54:75:56:88:5b:
0f:18:71:58:aa:c4:5d:2d:a6:b0:d8:f9:58:a1:3d:
f3:a4:28:8d:d2:0b:6c:a0:2d:06:75:43:4d:ed:6f:
01:b5:c2:d3:c3:5c:d0:ab:18:5b:ec:86:0c:c6:d6:
90:5e:6d:5f:02:60:92:75:2f:02:f0:8c:2a:3d:8f:
1a:79:6c:3b:00:8c:3f:fe:a6:8b:8f:10:2b:e3:8d:
e1:a5:2f:53:26:ec:b4:dc:39:ee:eb:32:16:2f:53:
4f:aa:3f:92:4f:20:c7:a8:92:d3:a5:d3:20:88:a8:
3f:62:1e:8d:57:df:ff:25:e8:a9:d8:ef:c1:02:76:
83:30:02:3d:e9:1c:02:83:49:3b:61:9b:23:ab:c3:
0a:2c:ae:2a:de:c1:33:88:1b:0e:7d:0b:f8:7d:51:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:CD:9F:2E:ED:BB:0C:D6:8A:AF:99:F8:B1:39:53:6E:2F:A3:89
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/GXrNny7tuwzWiq-Z-LE5U24vo4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.72.0.0/16
90.97.0.0/17
IPv6:
2a01:dfff::/32
Signature Algorithm: sha256WithRSAEncryption
40:0a:70:64:59:17:38:30:69:f9:e6:92:51:0c:06:64:5e:9a:
ac:e3:4e:23:98:a1:11:0f:13:0f:5f:25:3b:23:e2:cc:b1:87:
a7:2b:d8:39:8d:76:af:59:d4:03:ba:9b:4f:d9:b8:8d:73:12:
48:c5:86:7d:7f:10:7e:c6:b7:45:ff:93:13:20:c5:5d:ff:89:
fa:02:04:07:d6:bf:fd:53:3d:66:bc:5d:9c:32:ca:e9:a1:23:
45:6d:4b:38:a9:f3:42:36:f7:0a:4c:92:d8:72:ff:6d:4a:e1:
f4:37:d2:38:5a:84:5c:5f:7f:ae:2a:bd:b0:48:9d:4b:b6:2d:
cb:8e:9e:b6:76:b1:74:31:0c:01:bf:ed:ce:91:d7:1d:49:0f:
88:16:52:99:d0:77:86:52:e5:ff:38:40:38:77:b0:67:71:2f:
0b:58:80:89:6a:a3:04:81:e1:38:a2:e1:67:66:da:4a:16:39:
70:f4:d4:29:ed:a2:ab:3b:5f:c4:d2:33:e2:e9:d8:cb:6b:1c:
ff:c3:1f:1e:13:86:3b:b7:6b:b0:26:36:10:7f:0f:0e:71:c8:
b1:3a:1e:4a:e4:cd:24:71:69:21:72:52:15:44:bd:5a:e9:6e:
dd:74:b8:bd:92:13:c8:60:61:c7:bb:75:98:ee:c5:b7:16:c2:
49:86:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:15 2025 by rpki-client