Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gLIsrInMdgUJuSR875NBf-fqYWw.roa
File: gLIsrInMdgUJuSR875NBf-fqYWw.roa (raw, json)
Hash identifier: g4GGCf6DUDqRDtyjJPnBouc/GETeFxRc74G9bOjl2lI=
Subject key identifier: 80:B2:2C:AC:89:CC:76:05:09:B9:24:7C:EF:93:41:7F:E7:EA:61:6C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451000EB72B97C6FD23F98DF6148F5
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gLIsrInMdgUJuSR875NBf-fqYWw.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24739
IP address blocks: 45.139.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:10:00:eb:72:b9:7c:6f:d2:3f:98:df:61:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80b22cac89cc760509b9247cef93417fe7ea616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:88:05:47:bd:90:98:79:b7:47:82:88:b7:
b4:3b:a0:13:68:13:f6:aa:2f:72:63:1a:71:c2:a6:
18:2d:90:67:6a:18:0a:40:9a:a4:bd:d5:ff:06:d6:
84:d5:41:dd:bc:ea:71:3a:b8:99:d6:4b:73:02:6f:
1b:7d:4b:2f:9a:9c:25:d4:0b:e3:6d:c3:2b:7e:60:
a8:8c:0f:7b:23:c8:ba:0f:c5:d5:72:3d:75:45:0e:
61:71:97:3f:72:f9:66:05:21:49:87:35:2e:5a:af:
c1:fb:9e:d9:44:3f:be:cf:88:85:bf:9e:45:21:e5:
6d:3c:6d:c2:47:53:98:6e:7f:f7:da:00:21:d6:41:
b7:af:98:f7:14:a2:1a:8a:b4:be:8b:7b:9f:a4:f5:
23:18:3d:15:b6:e8:d7:26:4a:25:4a:2d:10:8b:40:
38:08:71:ff:81:1a:bb:0c:8a:ed:bd:99:d2:68:28:
b0:5d:db:cb:fb:87:32:07:09:7d:f8:15:4b:b0:a5:
fb:3b:f0:fe:0e:c8:47:61:72:6c:1e:f1:69:72:dd:
30:0d:23:89:5d:86:ac:91:8d:53:3f:bb:80:61:85:
b5:b1:4a:3a:d8:bd:05:d2:f2:59:5d:b8:92:37:f3:
d1:b8:a9:01:3e:18:5d:0c:d7:30:71:b9:79:35:7a:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:2C:AC:89:CC:76:05:09:B9:24:7C:EF:93:41:7F:E7:EA:61:6C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gLIsrInMdgUJuSR875NBf-fqYWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.124.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7a:a5:8b:2f:9f:82:16:60:e7:8f:71:64:2b:34:23:8e:19:
99:f7:19:a1:6c:66:bd:07:2d:b6:b6:26:87:5e:91:a6:89:94:
a4:72:15:ad:99:8f:b7:8e:d8:24:5d:33:23:0a:d1:c5:29:cf:
b8:3c:93:6b:c7:f7:00:58:f6:83:6b:40:57:0d:fa:d5:6a:c6:
d7:ee:c7:78:ba:09:d1:d2:4d:5d:e2:f8:23:a5:e1:52:ed:60:
f0:46:0e:8b:32:6c:f0:1d:e6:b3:eb:5e:84:14:e5:c2:a4:da:
67:c8:51:01:64:ec:27:49:88:9d:cb:5f:0c:67:1b:99:9c:bf:
9c:69:fe:16:45:97:ab:02:36:9c:c7:27:c5:0b:d3:76:72:cc:
69:ef:76:f5:d7:5d:5c:5b:e4:9e:84:28:98:b9:cd:3d:e1:79:
25:c6:7f:e0:d8:90:fc:23:83:ea:4d:f7:8b:58:7b:84:bc:20:
85:2d:ca:2c:60:00:06:be:fc:a2:57:3f:84:88:c5:97:13:4a:
f2:b0:13:cd:86:e3:c0:b0:ff:91:f8:a6:75:a6:c8:45:78:d9:
84:a9:8d:d1:0d:b6:95:f2:04:17:4b:98:e1:7c:78:74:55:5b:
23:78:d6:0f:46:99:ef:de:21:bb:21:0d:8b:cd:ea:ec:1c:10:
a4:32:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:13 2025 by rpki-client