Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa
File: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (raw, json)
Hash identifier: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=
Subject key identifier: 82:32:D9:F3:13:DB:D6:DB:0A:57:6B:C9:47:82:0E:78:EB:C3:90:B4
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 01942067E50848A13195B2E44FCABC10AAFA
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 45.114.8.0/22 maxlen: 32
103.240.180.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e5:08:48:a1:31:95:b2:e4:4f:ca:bc:10:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8232d9f313dbd6db0a576bc947820e78ebc390b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:26:21:4f:73:d8:f5:31:5c:10:cd:2b:48:
cd:a7:28:d2:0a:84:d9:a2:9e:b7:0f:c1:37:10:2a:
6e:6e:e1:7a:77:ae:39:6f:c8:38:5e:97:a1:ff:94:
06:23:8b:c6:71:f4:e1:b2:2b:df:dd:6c:e7:f5:6b:
e8:20:b5:94:dd:b6:40:0e:33:74:44:f4:ab:43:dc:
58:66:56:97:47:36:51:18:16:8f:6c:63:6f:d5:23:
9b:13:60:d0:96:85:80:4f:ff:13:8e:05:62:26:f6:
60:92:d3:53:1f:63:ad:27:9f:d7:9f:2c:b1:19:77:
5f:54:3b:b6:05:bb:a5:ad:b5:0c:da:87:b1:5e:51:
1e:12:82:72:6a:11:5a:3e:b3:f2:16:ad:df:ce:9e:
b3:3d:b4:68:e0:8b:0a:04:ab:bd:59:6c:bf:b0:6b:
c3:8b:0e:33:6c:cc:a7:ab:c9:4b:64:2e:5c:4d:0c:
cb:4f:3c:55:8f:07:fa:6b:d6:11:d8:31:b9:05:39:
62:97:61:d3:99:5e:83:7a:44:de:b6:e2:f5:32:44:
94:f1:14:43:c8:08:2a:9a:2d:e4:13:55:b5:5f:ec:
23:24:5d:2e:32:43:a6:41:32:46:1b:ea:ab:78:2a:
68:91:60:dc:36:2f:cd:28:9b:26:ba:e7:1a:2c:5a:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:D9:F3:13:DB:D6:DB:0A:57:6B:C9:47:82:0E:78:EB:C3:90:B4
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.8.0/22
103.240.180.0/22
Signature Algorithm: sha256WithRSAEncryption
98:fc:35:1f:52:78:f3:74:c0:ff:a6:67:71:c5:fb:2d:10:01:
c0:5a:33:6b:bc:e3:42:c6:71:58:82:a1:41:76:14:ae:db:50:
b3:9b:68:6c:d7:78:e9:3a:31:93:b8:00:97:6b:0a:31:a5:ba:
3f:58:30:31:f9:be:52:65:d1:5f:8f:c1:69:f3:43:36:18:64:
1f:77:98:ac:1e:fd:51:78:0b:47:fc:02:5c:4d:45:8f:5d:9e:
03:f8:f5:72:61:49:a2:3f:00:68:e4:94:0f:3c:fd:22:5c:a2:
4d:81:67:6e:e1:04:90:3e:22:eb:81:1c:3a:c5:df:0e:31:d7:
4f:fc:ef:5a:f5:de:52:10:a3:8d:02:7a:21:b8:d0:b3:e0:f7:
d1:de:93:97:4a:bc:80:6b:29:8c:e4:40:a8:b1:e5:4f:dd:a5:
6c:0b:36:ad:28:06:3c:00:a7:a4:c2:b1:cc:00:3d:05:18:fc:
5a:9f:9b:e2:a0:da:b0:ea:40:fd:39:4c:6f:a4:51:56:d4:8b:
46:7d:6e:15:00:59:f8:7a:23:fe:b1:f9:17:b4:80:c1:03:58:
2e:25:bb:6a:df:39:48:1c:76:be:79:3d:65:9d:a1:d1:c6:25:
a6:96:5c:db:4f:c0:3c:63:8a:56:f9:c2:fd:35:97:0e:81:fe:
15:06:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:49 2025 by rpki-client