Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/GcKfucNUUVz-7vyixtAh-QuGRfI.roa
File: GcKfucNUUVz-7vyixtAh-QuGRfI.roa (raw, json)
Hash identifier: v8Sc+jly3u765ZdMrsvYMkW3uHhat3p13GoGqDpMyrI=
Subject key identifier: 19:C2:9F:B9:C3:54:51:5C:FE:EE:FC:A2:C6:D0:21:F9:0B:86:45:F2
Certificate issuer: /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial: 0187B7FCA7FE1D74C74A0357D1025B55CE20
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/GcKfucNUUVz-7vyixtAh-QuGRfI.roa
Signing time: Tue 25 Apr 2023 10:36:41 +0000
ROA not before: Tue 25 Apr 2023 10:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:fc:a7:fe:1d:74:c7:4a:03:57:d1:02:5b:55:ce:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Validity
Not Before: Apr 25 10:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19c29fb9c354515cfeeefca2c6d021f90b8645f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:63:32:9a:4c:19:6d:94:65:c5:42:af:68:
91:d7:7c:35:cc:82:95:42:14:f8:2d:57:55:22:61:
9b:d7:4f:bc:5d:79:3a:d3:d8:50:45:b3:d3:d0:74:
7a:d3:07:16:e9:10:ef:bb:ae:9d:88:fb:1c:8b:39:
84:5f:29:ff:51:64:3a:80:1a:fd:df:53:1b:fd:56:
4c:2c:bd:99:e3:92:74:b4:c5:21:7d:30:ff:06:37:
45:9e:c6:2b:bc:13:91:e9:74:af:35:27:1b:82:56:
10:ed:89:b9:4b:78:b0:95:68:ea:76:15:c6:91:71:
26:24:8e:ec:b1:d2:d2:14:03:51:3f:fd:9f:9f:d7:
f0:8a:6a:88:e0:21:95:b1:2f:ed:29:a2:88:78:62:
e6:9a:b7:87:bc:ab:80:1e:b4:37:c4:93:e9:2e:95:
8c:83:ec:a2:d2:6b:d6:5c:71:f3:db:f8:c5:c1:be:
0f:26:5c:eb:41:71:18:41:a7:66:11:f9:95:18:27:
c0:9b:32:57:88:ad:87:00:f4:99:9e:40:96:7f:49:
fa:6f:af:17:61:35:63:af:03:5c:f5:d5:8d:2a:c1:
f4:13:1e:0f:58:37:64:51:af:b0:f2:93:bd:4e:07:
ab:fd:7e:fa:91:9e:13:42:27:55:91:3b:c3:65:8f:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C2:9F:B9:C3:54:51:5C:FE:EE:FC:A2:C6:D0:21:F9:0B:86:45:F2
X509v3 Authority Key Identifier:
keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/GcKfucNUUVz-7vyixtAh-QuGRfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.120.0/23
Signature Algorithm: sha256WithRSAEncryption
70:e5:85:9f:c7:37:fd:7e:77:a6:0b:34:45:e1:da:80:ae:2f:
7f:b6:47:42:cc:5e:3d:6b:29:9e:f9:42:1a:3a:82:ce:9c:45:
d3:16:6b:28:e1:79:a9:5b:07:4b:dc:d4:7d:90:17:3b:a0:ca:
37:77:6e:29:d8:7d:ed:1c:b7:d2:b9:60:af:c8:ae:d7:6f:5d:
84:b7:e6:5b:8f:5b:4e:18:7b:9a:6f:fd:ba:b1:79:15:7a:5a:
cb:fe:68:44:2b:08:a6:e1:a4:3f:b3:5e:8b:ee:ad:03:ff:03:
35:23:95:60:fe:a5:f8:4d:79:14:94:cf:e5:0e:de:ed:f9:b1:
5b:56:4c:5b:e0:27:07:66:5e:db:73:b7:13:69:91:0b:b8:12:
5a:0b:8b:f8:21:49:4f:20:24:d5:0a:9f:c5:4a:78:6d:61:70:
d3:5c:bd:64:42:21:86:87:24:33:f1:2f:4b:2e:a4:2e:17:ac:
b1:8e:82:39:5c:c3:d5:45:96:82:af:15:c4:26:3c:62:e0:14:
95:05:40:76:57:3e:15:69:85:03:7a:c5:70:df:1e:ff:93:1a:
8d:8c:62:f1:e5:a9:33:4f:cb:18:94:9e:81:56:24:a7:66:3b:
1d:99:a2:f4:78:31:d3:3d:98:06:45:a5:cf:d8:8d:52:3b:90:
a1:e1:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:25:54 2025 by rpki-client