Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GvXRVawHzzCi7pgsF39SYGKOL1c.roa
File: GvXRVawHzzCi7pgsF39SYGKOL1c.roa (raw, json)
Hash identifier: IOKiIV1qdEfGlMmS/WoO8wBdPAZPaBqF8Ff8rokjp5c=
Subject key identifier: 1A:F5:D1:55:AC:07:CF:30:A2:EE:98:2C:17:7F:52:60:62:8E:2F:57
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747A5C7EBC6FACDF24EC62854752C45
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GvXRVawHzzCi7pgsF39SYGKOL1c.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212036
IP address blocks: 2.187.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a5:c7:eb:c6:fa:cd:f2:4e:c6:28:54:75:2c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1af5d155ac07cf30a2ee982c177f5260628e2f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:8d:6e:5f:57:ec:10:94:fe:f3:69:e1:b8:
58:e0:d9:33:59:ff:d1:01:65:2a:53:97:fb:92:3e:
e6:e8:7c:48:75:81:22:97:38:ac:03:5b:72:1f:15:
d2:6d:0a:12:df:d7:0c:f5:9e:1b:5b:1d:12:0a:a3:
eb:60:a0:fa:65:be:39:d3:85:8d:b9:f9:62:3e:0f:
97:15:57:0a:4b:7e:ee:8c:0e:44:cc:0a:49:b7:9e:
91:2c:dd:9d:5e:24:89:6b:ab:c4:fe:b7:b0:41:4e:
82:46:25:54:b4:03:4f:ed:82:ee:a3:d9:2e:cc:af:
50:92:e7:66:ce:8f:f9:91:60:ce:0f:76:0b:17:72:
f1:01:47:4b:d9:77:92:0c:fc:96:8b:ef:38:ed:08:
90:85:0e:b8:47:f5:6e:d1:85:56:59:11:8b:99:fa:
70:00:84:96:5e:9e:69:e2:cc:fe:51:25:88:b3:0e:
4d:d2:ac:75:ec:cb:0b:30:9a:12:3f:65:71:2d:a2:
c6:25:61:c9:2d:fc:99:2f:d3:da:06:6b:c7:be:4a:
37:e7:4a:5e:eb:62:30:ed:2d:44:9f:7c:55:de:25:
5c:55:80:c7:f6:19:2a:11:75:67:1b:f0:67:57:5a:
71:8f:1c:c6:42:9e:7c:d4:e6:a4:ee:ec:18:9b:44:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:D1:55:AC:07:CF:30:A2:EE:98:2C:17:7F:52:60:62:8E:2F:57
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GvXRVawHzzCi7pgsF39SYGKOL1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.187.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0d:72:ad:24:00:84:52:88:46:c5:2d:31:73:ee:fd:68:7b:
42:aa:46:21:04:22:82:be:03:98:8d:39:d8:41:05:48:ba:3b:
68:52:39:4b:9e:6b:d3:ea:cc:52:99:20:66:70:36:99:34:93:
ba:20:12:e3:51:c2:89:d5:1d:78:cb:27:68:d5:df:52:68:e1:
3f:16:ad:ff:d0:33:16:ee:b4:40:7b:87:92:9c:6e:7b:24:42:
29:29:fd:b9:76:08:60:6c:43:74:c3:ed:47:9d:9c:96:68:f6:
4c:97:bf:ba:7b:bf:4c:a5:7d:2c:e9:05:dd:42:8b:2d:85:b5:
d4:76:31:79:4d:44:57:21:17:2b:7d:82:e7:aa:0d:db:8b:2c:
74:9b:63:ee:17:2a:09:9b:3d:ea:7a:3d:2e:e7:99:09:70:15:
c8:2b:17:4f:63:2c:63:c6:f4:32:f9:81:04:3e:ba:90:c8:50:
1c:04:af:34:61:89:44:35:e3:ad:46:9f:1d:dd:f7:31:a4:40:
7a:63:34:74:cc:e2:c0:e5:99:14:5c:44:c7:da:27:27:8a:fd:
63:cf:a8:1b:cf:70:e0:fc:4f:6d:88:06:fa:6f:0c:46:d0:97:
b2:ba:53:60:9c:fc:b1:32:29:a7:6d:2f:db:5c:51:80:37:ea:
82:e0:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:11:51 2025 by rpki-client