Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/grkoHwG6ruvsLrWe-XcVrclLFRM.roa
File: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (raw, json)
Hash identifier: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=
Subject key identifier: 82:B9:28:1F:01:BA:AE:EB:EC:2E:B5:9E:F9:77:15:AD:C9:4B:15:13
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0194221F871DEA8D622B5ED5DC8F7DC7962C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/grkoHwG6ruvsLrWe-XcVrclLFRM.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 85.255.176.0/21 maxlen: 24
91.200.212.0/22 maxlen: 24
217.67.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:87:1d:ea:8d:62:2b:5e:d5:dc:8f:7d:c7:96:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82b9281f01baaeebec2eb59ef97715adc94b1513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:a5:42:aa:37:3a:4b:19:a6:c5:bc:76:5c:
4f:31:9f:3c:48:07:14:51:70:fc:20:9e:c9:d7:75:
11:67:bc:58:c4:f6:e8:2b:a6:f9:62:95:5c:10:49:
61:6a:15:14:b3:1a:05:cb:2c:88:97:df:1d:e6:62:
aa:f5:e6:d7:27:e8:68:7c:f8:e6:aa:22:26:ce:d4:
c0:ce:c6:b8:5b:3c:24:7c:bb:cd:ed:35:74:72:d9:
fa:f7:74:35:45:1a:c6:30:38:fa:e2:89:26:ec:f3:
a0:18:e5:a7:7f:a2:0a:35:ab:37:fb:42:4d:ae:2d:
94:38:1a:3a:99:9d:54:80:e7:ca:ab:14:42:6e:cf:
f9:ca:5f:a9:d3:72:72:1b:69:b4:f7:18:f2:89:5f:
0a:55:63:68:a4:d9:81:4d:47:9f:6d:c0:46:15:e6:
e8:12:58:92:0b:e7:8d:7e:3e:01:97:96:43:3f:33:
54:57:18:78:14:ff:36:4e:bd:4e:04:86:d8:e2:f3:
29:10:2b:b6:9a:a0:11:b0:f0:88:35:51:d8:c6:dc:
44:81:47:c6:92:b4:d6:02:7d:46:f7:17:e0:bc:51:
dc:29:4f:9d:39:05:05:52:8e:b5:a1:64:7d:10:59:
8d:13:ec:c7:03:61:7e:83:7b:3a:e8:f4:0e:27:04:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B9:28:1F:01:BA:AE:EB:EC:2E:B5:9E:F9:77:15:AD:C9:4B:15:13
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/grkoHwG6ruvsLrWe-XcVrclLFRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.176.0/21
91.200.212.0/22
217.67.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:85:9c:a6:39:f7:5c:7c:8a:dd:81:6a:a4:c1:d2:6f:4c:c5:
90:92:f0:2a:bf:59:ea:15:ed:41:84:3c:73:60:62:f8:37:50:
02:0b:d0:cc:32:5d:27:4c:e1:8d:b6:13:98:a5:c5:ae:4a:49:
c9:41:63:27:29:a1:4d:df:ff:de:1a:ed:ed:33:ba:46:53:02:
5f:40:08:6f:70:00:2a:ef:96:d1:6d:c9:9a:32:97:79:31:34:
58:1a:bb:5d:7f:27:51:ed:19:5b:b3:ef:b0:39:e9:ae:2a:bd:
0d:5a:fc:d8:83:cf:1a:3a:8c:5c:36:23:ff:0c:37:08:e7:be:
0f:df:f6:17:bf:cb:c7:23:8f:1c:19:95:1c:45:c8:28:e3:ea:
a4:48:70:68:9a:64:19:8f:a1:85:a6:15:53:47:1a:e1:25:9b:
be:76:52:24:5e:9a:92:d5:d8:93:b5:fc:1f:51:d3:be:d8:bb:
9c:75:8b:90:a5:af:eb:65:c4:cd:22:b1:60:e1:d8:76:b8:23:
d1:b7:c7:55:ce:07:35:6a:78:a2:04:04:86:5d:e9:ed:ec:a1:
4c:af:de:7a:8f:e2:6f:c9:fa:58:27:0e:fe:79:43:71:ff:d5:
7f:f5:58:a9:c9:01:f7:16:6f:bd:d2:ba:d9:64:fc:a8:7e:42:
bc:93:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:30:33 2025 by rpki-client