Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gk-eRZacf-4A9HAmpIlXNDoMQ4k.roa
File: Gk-eRZacf-4A9HAmpIlXNDoMQ4k.roa (raw, json)
Hash identifier: BkZYZNXxefOR7YFLFv8n+99M5/WsWWa382YXZp4br8M=
Subject key identifier: 1A:4F:9E:45:96:9C:7F:EE:00:F4:70:26:A4:89:57:34:3A:0C:43:89
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194ACDA511E04674606655DAAC079911845
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gk-eRZacf-4A9HAmpIlXNDoMQ4k.roa
Signing time: Tue 28 Jan 2025 12:19:36 +0000
ROA not before: Tue 28 Jan 2025 12:19:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399471
IP address blocks: 212.192.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:da:51:1e:04:67:46:06:65:5d:aa:c0:79:91:18:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 28 12:19:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a4f9e45969c7fee00f47026a48957343a0c4389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:1e:92:ad:35:4f:91:62:89:a1:26:df:42:
1a:fe:4f:cd:14:d3:a3:38:81:1c:2e:8c:11:cb:33:
04:47:c7:35:52:65:e6:f8:e5:26:11:01:71:87:79:
86:99:91:2e:fb:68:f7:6b:68:3e:a4:a4:33:c0:90:
c1:66:40:97:db:df:1a:f4:57:1d:ff:49:2b:59:e3:
bc:9f:97:bc:63:83:e8:8f:f2:ff:05:2a:70:b0:5a:
1b:00:41:a8:91:f5:93:e6:68:df:77:3d:72:5c:cf:
65:32:10:32:65:2e:ea:8e:4e:2e:2e:23:1a:07:7a:
32:36:6a:86:ff:f4:ab:e5:ef:4b:ef:16:28:f1:83:
5c:44:ef:e1:fa:c0:56:57:ae:80:47:0c:3a:f7:7a:
e1:34:3d:65:04:9d:b9:10:fe:c7:1f:dc:3d:62:97:
44:1e:9b:d3:ce:9a:fe:7e:03:fb:7f:8b:30:69:b2:
a5:d4:47:57:48:9d:34:61:e2:60:c2:4c:b4:31:b6:
40:58:09:29:ba:44:5f:7c:b4:b9:3b:7d:fa:75:7e:
e6:fd:5f:f5:59:61:64:93:c2:56:5f:bf:0f:14:ed:
c4:0c:83:63:ed:a9:4a:35:b6:92:d4:8a:2d:7c:c9:
67:a2:53:b0:e0:b8:a2:c5:8b:a4:f0:a1:f0:c9:1a:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:9E:45:96:9C:7F:EE:00:F4:70:26:A4:89:57:34:3A:0C:43:89
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gk-eRZacf-4A9HAmpIlXNDoMQ4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:f2:2e:9b:04:05:d1:be:f3:60:af:55:8a:ac:4f:36:47:
9a:14:ec:ec:11:2b:36:80:9a:e5:e5:82:6e:cf:6a:93:99:bf:
bf:94:bf:87:64:65:df:c4:c0:d6:9c:40:71:f3:6e:b3:f5:85:
fc:54:b6:4b:d8:16:84:de:4f:52:4a:cf:f6:17:35:80:eb:8a:
d1:ba:fb:bf:c0:6b:23:8f:1b:b1:33:29:e0:6a:81:bb:53:26:
3f:fc:f3:5c:4e:94:4c:b5:2f:b0:01:21:8f:05:05:78:79:bf:
04:99:53:de:91:eb:7b:cc:e7:9a:67:c0:d6:ad:cc:5d:50:5d:
27:34:dc:75:18:c1:eb:f1:97:8e:d8:cc:a6:7c:f8:aa:f5:04:
16:e5:58:66:5e:c8:81:a8:57:88:e2:f8:a7:5e:57:1c:68:b7:
a0:49:77:f9:5f:72:83:32:cb:f0:73:f2:ee:73:ca:23:23:7f:
9a:60:df:39:ca:bb:b7:dc:85:4d:42:36:e5:d5:be:2e:2a:81:
56:26:aa:a4:d0:8a:19:9e:92:c7:1e:fc:27:a8:d9:62:3d:cf:
14:58:63:2c:94:07:f7:5d:e8:11:e5:e3:72:73:4d:1e:c7:e3:
7e:9d:c6:60:da:ef:16:9b:3e:6e:5b:31:ca:17:8b:69:9d:f7:
55:0c:3c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:52:01 2025 by rpki-client