Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GkHiDHIr7HTOUId4AyJatL1OA68.roa
File: GkHiDHIr7HTOUId4AyJatL1OA68.roa (raw, json)
Hash identifier: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=
Subject key identifier: 1A:41:E2:0C:72:2B:EC:74:CE:50:87:78:03:22:5A:B4:BD:4E:03:AF
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF1FB16FD68A856E6C8D602B0F5E4
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GkHiDHIr7HTOUId4AyJatL1OA68.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60150
IP address blocks: 45.12.100.0/22 maxlen: 24
185.96.56.0/22 maxlen: 24
185.136.16.0/22 maxlen: 24
2a05:ff00::/29 maxlen: 48
2a07:5b40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f1:fb:16:fd:68:a8:56:e6:c8:d6:02:b0:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a41e20c722bec74ce50877803225ab4bd4e03af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:9a:c6:55:a8:c8:03:3e:14:73:ed:78:64:
4b:a7:0c:9b:b3:35:60:52:76:27:11:dc:4a:c0:ec:
93:4d:51:88:c0:17:5d:11:90:22:a5:b8:13:23:de:
c5:d1:ae:2d:8a:1a:d2:65:e8:2e:b4:64:1a:b9:13:
4d:82:45:f6:2d:19:3c:e5:a0:6e:76:be:b6:5e:28:
ea:da:28:6a:59:88:52:f9:ba:6f:77:17:51:db:dc:
36:0c:f7:d9:ce:ff:68:b0:b9:ae:08:e5:85:ca:bb:
62:49:1d:b9:a5:22:56:17:bf:63:ed:d8:77:e2:e8:
70:15:56:f4:21:72:6f:aa:21:ba:4f:fb:f5:62:68:
d1:ac:2f:2e:a7:fd:17:49:75:78:88:e5:df:f0:95:
26:e7:83:15:12:a8:c4:5c:4a:eb:60:d2:39:e4:e1:
dd:dd:58:c7:32:c8:84:7d:c7:d3:d8:47:ad:7b:1d:
7b:67:bd:f0:25:1e:cb:a6:0e:18:d5:be:01:15:5e:
a9:50:ae:1a:77:fa:1d:5d:97:9d:a1:89:eb:76:0b:
d0:8b:ed:1d:d7:29:87:9a:5e:48:da:36:9a:2c:4c:
5e:6a:30:43:29:0e:67:d2:cf:ce:d3:a0:8b:b8:ce:
8a:9f:f8:bc:09:05:74:83:b6:7d:bb:7c:07:7e:90:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:E2:0C:72:2B:EC:74:CE:50:87:78:03:22:5A:B4:BD:4E:03:AF
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GkHiDHIr7HTOUId4AyJatL1OA68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.100.0/22
185.96.56.0/22
185.136.16.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
Signature Algorithm: sha256WithRSAEncryption
12:54:ac:f1:f8:1f:85:b4:60:8e:61:0c:20:f3:08:59:a1:64:
31:4b:b2:e0:b7:b8:0e:d1:f1:02:c5:81:b4:d7:68:c6:f4:26:
c9:b5:5c:61:50:6c:71:36:37:1b:11:c7:df:41:74:ff:9b:51:
d1:10:8d:ab:d4:9f:64:e2:cf:14:1d:a9:87:d5:4f:f2:0d:cc:
74:6b:93:de:52:1d:d4:82:24:74:de:96:99:26:30:ea:7d:99:
bc:a6:44:b1:29:c9:fa:de:6f:fd:a4:99:ca:a0:87:30:8e:52:
59:b9:ac:1e:0c:58:69:cd:26:96:d4:ba:4c:77:40:33:30:01:
cb:a9:b5:bd:29:b3:a8:73:91:91:19:06:5e:fe:a9:d0:6c:ae:
16:2d:1c:34:82:63:f9:04:2b:c2:40:11:64:e4:b3:37:d3:a6:
e5:2c:86:14:53:da:54:65:f7:e1:e8:04:b1:ff:1f:2a:de:99:
f5:33:1b:37:07:39:ce:33:86:63:b5:0c:de:be:2b:81:ce:ef:
89:d5:0f:dd:c6:99:e9:3c:27:a5:14:08:b7:34:c1:0f:46:89:
d4:1f:46:6a:13:02:9d:50:47:55:84:1a:8a:f6:c6:98:1d:cd:
56:d4:90:db:e7:da:7c:08:ce:8a:a3:54:8d:e9:97:30:4a:b0:
9d:7d:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:06 2025 by rpki-client