Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa
File: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (raw, json)
Hash identifier: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=
Subject key identifier: 1B:76:FE:4A:3E:31:79:15:A5:AC:EC:21:2B:0F:0C:71:A0:AA:E3:EE
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B679F0F6E2EF62E8F6C464738BD1A8
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa
Signing time: Thu 02 Jan 2025 15:50:57 +0000
ROA not before: Thu 02 Jan 2025 15:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 2.17.224.0/22 maxlen: 22
2.17.228.0/22 maxlen: 22
2.17.232.0/22 maxlen: 22
2.17.236.0/22 maxlen: 22
2.20.24.0/22 maxlen: 22
2a02:26f0:c700::/48 maxlen: 48
2a02:26f0:cb00::/48 maxlen: 48
2a02:26f0:d100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:79:f0:f6:e2:ef:62:e8:f6:c4:64:73:8b:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b76fe4a3e317915a5acec212b0f0c71a0aae3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:7d:88:ac:0e:68:b4:b7:dd:36:71:f0:67:
4d:96:86:ae:0b:22:28:64:1d:fb:ed:f5:32:2f:12:
d0:d6:a7:74:0a:01:2f:e2:5c:ee:6c:a5:fd:ca:aa:
41:71:9c:47:1b:ba:e0:f3:59:af:c8:b9:ad:d9:24:
b1:a9:d6:1f:9d:70:3e:06:09:37:a6:88:5d:c1:d3:
cd:da:df:fd:56:c9:0a:a2:16:c2:b0:a7:2e:89:9b:
0e:b3:95:c8:f9:fa:84:f2:f1:7b:72:62:3d:33:dc:
94:3c:ba:70:80:d1:68:83:ef:91:12:40:cd:c7:bd:
56:cd:a5:f4:18:c5:7d:8c:7d:59:30:a0:96:96:45:
f2:c6:e0:4e:72:e5:11:ff:c1:46:19:04:4c:c7:54:
84:b0:0a:34:07:a9:b3:b8:1e:52:95:86:3b:82:bd:
e5:91:b5:39:b2:1b:96:fe:b6:d0:06:99:2d:f1:2e:
dc:63:c3:a0:8a:5f:91:c6:5b:d7:95:56:5b:4e:2d:
45:3d:97:e1:75:7c:fc:6f:2c:c2:86:6d:27:26:a8:
69:1c:97:55:07:f1:7a:aa:4d:39:6f:3d:bc:2e:ad:
ad:7a:bc:4a:cc:04:db:07:74:b5:09:c1:57:65:1f:
e1:b4:69:18:18:19:0b:06:09:51:3b:c9:91:d2:02:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:76:FE:4A:3E:31:79:15:A5:AC:EC:21:2B:0F:0C:71:A0:AA:E3:EE
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.224.0/20
2.20.24.0/22
IPv6:
2a02:26f0:c700::/48
2a02:26f0:cb00::/48
2a02:26f0:d100::/48
Signature Algorithm: sha256WithRSAEncryption
1e:43:7d:48:eb:6d:83:0b:3f:53:f5:e7:7d:a4:5c:e1:27:08:
56:db:b8:30:02:26:60:39:8d:6c:5b:d4:e6:f6:06:2f:ef:d8:
c0:05:30:13:e3:b9:f7:6c:ba:86:93:e4:25:d5:06:5f:51:26:
f8:2b:b1:6c:ea:d6:4f:02:29:1e:01:ff:3a:66:87:09:0d:68:
0b:23:79:69:4f:32:9a:e3:22:42:1c:67:76:33:7f:78:68:0b:
d1:e0:a0:47:17:ac:8e:85:31:6f:d5:67:4b:41:a0:ee:ed:20:
6b:7a:99:8c:88:af:29:d6:be:ed:90:96:ea:0d:03:dc:26:33:
f9:e0:54:db:2d:4f:94:01:61:a6:97:17:4d:65:1f:05:a6:28:
d5:aa:9d:40:82:00:a2:a2:f0:f1:3c:71:90:b1:9d:a0:af:f1:
1c:36:96:8e:bf:db:34:32:4e:2d:19:1f:7f:9f:0a:43:fa:4e:
20:b1:db:8c:8f:8f:30:c8:d6:a2:04:78:35:4a:93:b8:28:02:
98:a2:90:08:ea:97:23:1b:f2:4d:59:b6:ec:30:23:49:10:8d:
40:fb:48:7c:24:f5:25:9a:68:1d:9c:fc:5a:74:22:91:57:37:
c6:ab:84:10:82:d3:58:08:20:bf:a0:12:39:86:e8:7e:8e:6a:
10:ac:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:26 2025 by rpki-client