Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/1GcdqVYrNeFzAfzIvWc1uwT98aA.roa
File: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (raw, json)
Hash identifier: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=
Subject key identifier: D4:67:1D:A9:56:2B:35:E1:73:01:FC:C8:BD:67:35:BB:04:FD:F1:A0
Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial: 01942444C7036B79C1F3ACD96EF7397D16AA
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/1GcdqVYrNeFzAfzIvWc1uwT98aA.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198024
IP address blocks: 185.191.192.0/22 maxlen: 22
2a0a:1c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c7:03:6b:79:c1:f3:ac:d9:6e:f7:39:7d:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4671da9562b35e17301fcc8bd6735bb04fdf1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:a5:5d:d4:60:ed:4f:5b:2e:fa:2c:dc:76:
0e:35:07:03:f6:75:ef:ba:5c:88:c6:e2:8b:6f:86:
f7:e6:9b:c5:f2:bf:ab:a4:35:ae:15:7e:48:1b:6f:
80:3d:73:c2:6e:5b:31:a4:18:e5:62:f8:8d:9b:1c:
c1:63:1b:3e:f1:8a:41:40:54:5e:f8:3f:7e:55:25:
fb:e3:7e:91:ea:2a:22:4f:87:2e:89:da:20:17:6a:
4e:fc:53:10:4d:fa:76:62:f6:6a:b9:9c:90:1b:51:
fd:6e:fb:1a:93:4b:ec:c4:b5:47:ea:e6:37:50:e7:
e3:8d:fc:f1:42:2f:fd:0d:44:5c:71:d6:f7:cb:49:
3f:53:fc:be:62:0f:47:50:f2:86:e3:1b:e8:63:10:
f5:5a:13:ad:bc:4d:26:21:10:53:74:41:97:e9:34:
ad:8b:a1:bf:ed:01:eb:73:85:60:f1:62:98:b5:a1:
e8:d5:a8:8b:9f:cd:83:fa:d6:a3:fb:5c:99:a0:cb:
e3:2e:62:88:7f:73:dd:1f:66:7d:11:86:0f:0a:18:
6d:24:47:16:60:2b:76:41:34:87:f7:94:5e:f3:95:
e4:1c:29:e7:42:e6:5f:e5:b7:86:57:26:5c:df:49:
05:69:9d:49:00:08:29:96:d4:f1:7d:61:09:a9:f8:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:1D:A9:56:2B:35:E1:73:01:FC:C8:BD:67:35:BB:04:FD:F1:A0
X509v3 Authority Key Identifier:
keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/1GcdqVYrNeFzAfzIvWc1uwT98aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.192.0/22
IPv6:
2a0a:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
ce:00:a7:e2:1a:48:01:ad:0a:85:5e:69:ef:f4:bb:46:7b:73:
e1:c6:ce:fd:c9:85:17:c5:5f:0a:82:ec:df:9e:db:31:85:4b:
3e:78:ae:bb:fe:cc:69:92:d6:ae:99:a5:ea:b2:f6:ca:16:5e:
9b:8e:e4:90:6d:99:e3:7b:6c:0d:61:e1:e4:7c:4c:84:0a:34:
44:bd:c7:29:3f:31:e6:7c:43:c0:27:db:63:33:d8:4e:9f:ec:
5c:ee:13:c4:d0:ac:bc:c1:8d:2a:c8:2d:5c:c2:35:2c:58:a4:
ee:74:46:ba:34:3b:77:b5:7f:89:1c:a9:04:be:16:d9:90:87:
69:b4:0b:65:ec:ce:7c:2b:cb:7a:68:71:8e:34:5d:db:1c:9f:
28:16:dc:a7:89:cc:51:8a:a0:dd:2b:e8:bf:49:71:c2:fa:c6:
4f:82:1a:a0:ba:16:71:1e:63:a2:0f:95:fc:c3:4e:44:3e:24:
ae:5d:e1:8b:5b:50:0f:3a:5b:df:e7:28:12:7e:d3:87:ce:80:
b9:52:a3:d8:1e:c6:ab:24:83:7f:0c:72:ad:cd:60:c7:57:0c:
7d:13:24:d9:41:a8:94:fc:07:e7:12:ba:99:d0:a4:99:10:b2:
dc:78:14:76:d7:5c:25:68:40:95:6f:3d:59:b4:d6:d5:95:34:
03:3b:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:33 2025 by rpki-client