Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/rGkstG6DmG4B7cdYh3EO2voHOpA.roa
File: rGkstG6DmG4B7cdYh3EO2voHOpA.roa (raw, json)
Hash identifier: SmsIhLLPmjYgcUx7ha4qQmd2o5KZk8x1FvvtQ8LvAQs=
Subject key identifier: AC:69:2C:B4:6E:83:98:6E:01:ED:C7:58:87:71:0E:DA:FA:07:3A:90
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019427479A5C16EE6DC8BA3F85B0BD9553F0
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/rGkstG6DmG4B7cdYh3EO2voHOpA.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 2.188.80.0/20 maxlen: 20
2.188.80.0/21 maxlen: 21
2.188.80.0/24 maxlen: 24
2.188.81.0/24 maxlen: 24
2.188.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9a:5c:16:ee:6d:c8:ba:3f:85:b0:bd:95:53:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac692cb46e83986e01edc75887710edafa073a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:e1:54:45:f1:56:51:1b:c8:92:7a:fc:2e:
91:0c:e9:07:25:bf:07:d6:86:d4:77:ca:cb:62:cd:
51:75:66:59:da:f5:8b:6b:70:c0:8a:3f:f8:e2:88:
f0:3e:8e:a4:f2:5e:3b:ab:26:13:cc:a8:35:a6:26:
63:39:1e:01:4f:40:f9:25:e2:d0:47:ee:df:b7:cb:
01:57:27:50:4e:78:03:5a:5a:20:23:70:a6:c8:0f:
47:11:d4:fb:45:e7:47:03:8f:e1:0d:15:4e:83:b8:
66:8f:2d:dd:59:e0:00:a9:63:e8:7e:50:2f:92:c9:
f2:cd:56:c1:06:54:8a:3e:05:11:60:0d:53:94:41:
fb:0d:c9:cb:11:5b:f6:b3:1d:38:db:59:12:aa:61:
98:e4:40:c0:de:2a:7a:3b:fb:ce:ea:d1:db:41:cd:
1b:94:ca:57:94:04:f3:3b:7b:5a:07:3c:a6:2c:7a:
00:cd:63:62:44:82:54:1b:8b:f1:b7:21:e9:30:16:
dc:25:73:36:79:a5:33:44:1f:4c:e8:a5:d0:71:10:
e5:5d:46:48:f0:29:88:86:1e:32:91:89:a2:ac:d6:
55:c4:ef:1e:4b:b0:eb:58:74:6a:69:27:52:4e:ca:
9a:62:91:b9:e4:77:68:7d:e6:33:62:31:db:a4:f7:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:2C:B4:6E:83:98:6E:01:ED:C7:58:87:71:0E:DA:FA:07:3A:90
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/rGkstG6DmG4B7cdYh3EO2voHOpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.80.0/20
Signature Algorithm: sha256WithRSAEncryption
38:41:f3:e9:1d:f0:cd:34:76:b0:cc:58:30:99:eb:eb:c2:34:
43:06:4a:7c:f1:ec:44:f3:0a:0e:20:55:5e:5c:5e:98:69:9f:
98:3b:cf:13:ae:f4:9d:3b:35:49:ea:a7:8e:d4:f2:d6:ea:67:
74:38:1b:e3:98:d9:f0:8e:15:d8:8e:df:9c:77:21:5e:03:12:
f2:c0:9c:e3:a2:08:70:d4:1b:1a:30:35:65:df:7b:fa:c4:2d:
56:91:7c:3c:50:4a:18:a2:28:3b:ab:4b:80:84:14:8d:11:2e:
7e:03:0d:94:c6:04:51:50:37:16:7e:12:cd:0a:00:60:ce:66:
83:91:11:83:83:e3:44:14:43:cb:0e:94:87:54:13:29:b4:4c:
3e:5c:09:d3:c3:d0:17:46:aa:fb:42:c2:33:b7:dc:23:5a:d7:
a3:c1:56:12:4c:32:f9:b6:9d:4b:ec:67:96:f7:c4:71:6c:57:
99:ca:97:aa:2d:cd:55:f9:05:7c:fe:8b:a7:0e:7c:94:02:f3:
62:1a:17:e2:e4:a5:ee:73:72:81:9c:fa:3a:60:f3:9d:7a:a6:
83:0c:7b:2e:d8:2d:0b:9d:2b:3e:4f:f4:af:61:8a:aa:fc:03:
b1:93:93:56:c9:ce:74:e4:d7:0a:f9:9d:b8:ef:7f:1d:9f:43:
ed:bd:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:46:46 2025 by rpki-client