Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G5h9ILuACUX-4As2xVjH6Pj8hlM.roa
File: G5h9ILuACUX-4As2xVjH6Pj8hlM.roa (raw, json)
Hash identifier: +U0AX7xcGlBjp10AbGqefuYMwfk/UZvBnHDXEw+uM8g=
Subject key identifier: 1B:98:7D:20:BB:80:09:45:FE:E0:0B:36:C5:58:C7:E8:F8:FC:86:53
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067DD38931D0A4C61CC78681818C222
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G5h9ILuACUX-4As2xVjH6Pj8hlM.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209848
IP address blocks: 212.243.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dd:38:93:1d:0a:4c:61:cc:78:68:18:18:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b987d20bb800945fee00b36c558c7e8f8fc8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:67:be:d0:23:e6:65:b4:8e:d0:77:09:e9:
82:3d:3a:e0:45:ce:e0:f0:0b:b3:aa:99:dc:6c:13:
9e:f2:52:5f:bd:a0:e7:6b:cd:4a:7f:6b:ff:7a:25:
ec:2f:1f:b3:dd:21:73:04:e8:56:38:a5:a5:db:64:
97:af:f5:fe:f5:31:83:5d:9c:85:be:cd:e2:53:4e:
55:92:52:c0:de:8c:36:c5:e9:13:fb:e1:c5:e3:92:
72:b1:52:65:b6:50:3e:c4:ea:8c:75:0e:84:4f:89:
c3:db:e1:58:57:4a:43:a9:10:b4:88:58:82:c9:8b:
f0:55:0d:07:65:60:9f:fd:cd:54:e0:25:42:cb:3b:
2b:d4:77:47:10:e2:08:61:42:38:b5:55:57:37:bb:
3a:99:75:e7:15:b6:fd:de:c8:45:5d:a5:56:dc:00:
15:ed:b3:b3:72:d6:06:d3:c9:ca:cd:fe:e1:2f:31:
3f:d1:31:35:75:db:34:85:fb:43:0c:1c:db:b4:d3:
f2:bb:46:cf:23:6a:5d:d0:15:56:8b:9a:e9:89:d3:
d4:01:e5:66:01:48:f1:58:29:9d:4a:67:b8:76:0e:
aa:e1:b4:d8:aa:1a:d2:4b:34:50:7e:4b:b6:05:64:
df:b8:dc:f5:95:08:3c:29:d2:78:fb:f4:df:22:44:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:7D:20:BB:80:09:45:FE:E0:0B:36:C5:58:C7:E8:F8:FC:86:53
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G5h9ILuACUX-4As2xVjH6Pj8hlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4b:c3:be:9d:b3:5c:82:02:aa:af:04:83:f1:3a:96:0a:72:
18:1c:72:69:09:ca:fa:ca:0c:70:ed:7e:53:7c:37:73:f3:94:
3a:b7:f4:b7:73:2d:6c:79:ce:80:05:59:af:28:fd:df:64:f9:
b3:6a:70:73:ae:01:ae:d1:16:bf:6c:87:16:e1:70:32:e1:99:
b2:2e:20:4f:aa:ca:86:04:c4:fb:5e:76:b5:45:13:7d:7d:82:
8a:96:93:04:7f:8d:e7:b6:ff:0a:63:51:94:b7:81:36:34:fc:
cb:5b:11:44:26:9b:6e:63:aa:e9:c5:4b:d3:89:4f:da:3f:0a:
2b:92:fe:fa:70:20:66:57:7c:d3:85:80:d0:9f:30:0c:23:2b:
d4:51:ad:95:a0:1d:39:97:dc:54:6a:7d:b6:4a:e1:d8:e8:10:
aa:8c:37:89:50:08:5f:c6:2d:4d:59:97:7f:5d:9b:be:15:a2:
9e:5e:f1:2e:91:29:ec:be:d5:a0:94:90:88:91:5e:72:33:7a:
ee:8e:8d:33:1c:4c:0d:7a:e6:48:03:43:1e:f0:67:b2:b4:f2:
2a:3f:b5:26:61:14:3c:c6:93:aa:07:89:a5:80:1f:ff:e5:d0:
a1:7a:3d:48:4a:ad:84:07:de:fe:5b:87:a7:fa:23:f3:ca:e5:
5d:dc:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:45 2025 by rpki-client