Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/gQLDHDpGBQlgALs9GcfAUzVclt0.roa
File: gQLDHDpGBQlgALs9GcfAUzVclt0.roa (raw, json)
Hash identifier: DRtfp1UtfULNf5WPwgIsVkdZx6FfMZanPaD3QZoUync=
Subject key identifier: 81:02:C3:1C:3A:46:05:09:60:00:BB:3D:19:C7:C0:53:35:5C:96:DD
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C5FD0ACF4F2EAAC667D077D8522F5
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/gQLDHDpGBQlgALs9GcfAUzVclt0.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42218
IP address blocks: 195.54.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5f:d0:ac:f4:f2:ea:ac:66:7d:07:7d:85:22:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8102c31c3a4605096000bb3d19c7c053355c96dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:41:8d:26:c2:ab:79:09:29:9d:b3:b6:4c:
50:2b:90:94:8b:45:bc:73:20:fc:b4:00:f7:dd:1d:
29:af:86:d0:8a:72:b6:f3:ca:95:78:ed:49:62:9e:
29:91:76:63:da:fc:b1:47:51:6b:52:7a:05:07:9c:
36:b9:e5:30:b2:74:d5:85:69:cb:ea:af:5b:45:3d:
07:12:e4:ce:b4:1e:23:60:32:3c:7f:1d:2a:6e:bc:
1c:62:b5:43:be:77:c4:53:97:f0:e5:dc:76:48:7d:
16:2d:82:bc:46:e2:35:af:fe:9e:e0:9a:d9:b2:5e:
ff:d4:71:0a:1e:d9:8e:ed:05:ac:70:f1:37:f0:ea:
ab:b7:09:9b:8c:ba:19:82:f6:bb:fa:bc:10:e9:a7:
5a:4b:b6:8e:6d:e9:14:db:d0:97:3f:cf:f7:a2:9a:
3e:db:58:a0:e0:17:60:da:e6:fc:f5:3e:a2:32:61:
66:fb:f3:d9:ca:32:12:20:0a:6e:d6:8d:4b:59:8e:
ca:4f:c9:2d:e9:01:52:e2:7c:c3:76:c1:7a:7f:30:
83:52:71:39:9d:dd:88:e3:81:b5:dd:c6:45:2c:5b:
94:48:53:ca:3f:9a:c8:29:57:da:d0:9f:46:f1:fe:
d8:2d:27:33:d6:5a:7b:10:9d:8a:fd:36:fa:0a:af:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:02:C3:1C:3A:46:05:09:60:00:BB:3D:19:C7:C0:53:35:5C:96:DD
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/gQLDHDpGBQlgALs9GcfAUzVclt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:6c:2b:72:5f:7a:dc:46:85:40:ab:9b:8a:1e:1e:90:a7:ac:
d0:cd:26:53:03:f0:06:13:3c:4e:b3:ba:37:45:b2:85:33:b4:
3d:06:db:d6:2b:a3:91:13:8d:f8:32:54:bd:48:e3:fc:91:58:
fe:ef:15:6a:b1:9c:8a:f0:1f:c4:61:31:06:b3:ec:6b:03:e7:
5d:02:26:89:5d:83:93:62:a5:e6:95:de:8c:a2:6b:d7:b5:21:
44:1f:a1:cb:46:be:95:78:47:64:ed:b5:1c:12:e3:11:75:2c:
50:c3:4e:e2:d0:83:97:b3:45:f3:c7:a3:09:a3:0d:d1:43:eb:
db:ed:70:e8:a1:49:09:31:63:5c:a1:52:ca:cf:15:74:48:08:
08:bc:40:20:b1:e2:04:ec:ac:bb:58:64:6c:d0:50:d4:87:0a:
c4:df:fc:84:57:61:da:1e:5b:ce:30:49:fd:be:29:6b:b4:90:
9a:6f:0c:be:f8:18:74:13:c3:bb:0c:07:9c:0e:c2:06:53:3a:
3c:fa:3a:3f:bc:97:ae:cc:71:ff:6b:ca:7b:0a:d5:6e:bf:59:
7b:de:75:6b:c2:b3:6e:3e:6c:7a:8d:00:c6:34:d8:a8:20:b1:
aa:75:10:7d:cd:48:d9:a8:8f:8d:d7:db:ac:70:10:8d:82:02:
67:2e:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:14 2025 by rpki-client