Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/GXWE9o3Md3OnmirO54Ws7kdTmag.roa
File: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (raw, json)
Hash identifier: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=
Subject key identifier: 19:75:84:F6:8D:CC:77:73:A7:9A:2A:CE:E7:85:AC:EE:47:53:99:A8
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 01941FFA26E522244D1BBF7EAA8748D9B753
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/GXWE9o3Md3OnmirO54Ws7kdTmag.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.48.0.0/16 maxlen: 16
192.124.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:26:e5:22:24:4d:1b:bf:7e:aa:87:48:d9:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=197584f68dcc7773a79a2acee785acee475399a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:e3:98:d9:a1:11:ff:5f:61:69:69:c6:b2:
6c:47:6e:58:66:ad:be:80:6c:3a:e7:09:6b:90:6b:
32:49:84:87:93:04:f1:38:b5:bd:78:5b:20:09:1b:
ca:20:2f:0e:57:01:2b:00:48:00:2a:ec:ef:0a:e2:
d4:24:e1:31:96:7f:88:73:35:fc:cc:07:28:95:15:
41:ca:45:e4:fd:d1:8e:1f:d1:c4:f2:80:a4:bb:26:
fd:56:41:4d:5f:24:26:60:76:5c:8c:20:6e:2b:7c:
9c:cf:d0:fd:5a:56:d8:e5:07:8d:29:bc:91:21:37:
a7:2c:c9:54:c3:aa:42:dd:84:54:e5:20:cb:3c:64:
99:87:e5:20:72:ef:f5:d1:6f:87:8d:be:02:8a:d5:
be:ab:25:b7:80:f7:5f:7b:72:88:f3:25:4d:e6:e1:
50:8b:30:1f:a2:87:72:77:81:6a:7f:d6:81:b2:80:
42:a0:6b:26:8f:af:b2:96:5f:ae:a6:bf:1d:e8:6c:
de:3a:a7:87:a0:f8:cc:73:3c:07:e9:1b:9c:1c:cc:
a5:64:e5:4f:62:c1:bc:ab:d1:ac:48:62:4f:1a:f4:
a8:bd:74:70:d8:d6:ec:4c:6e:34:ae:d7:1d:a9:df:
7c:22:0b:a5:72:d6:2b:e5:47:c2:00:12:57:46:05:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:75:84:F6:8D:CC:77:73:A7:9A:2A:CE:E7:85:AC:EE:47:53:99:A8
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/GXWE9o3Md3OnmirO54Ws7kdTmag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.48.0.0/16
192.124.243.0/24
Signature Algorithm: sha256WithRSAEncryption
91:02:21:62:e9:e8:1b:44:9e:7a:c6:55:6a:fe:0a:d4:5a:71:
f0:58:ea:c8:c0:87:e3:b4:05:ab:a8:de:82:47:45:ac:48:80:
29:bc:65:7d:21:bb:21:cf:f5:59:2e:26:81:1e:ce:db:71:55:
57:9d:b5:60:fc:82:e1:27:1c:b4:95:6c:e8:68:ae:6a:e2:05:
5d:7a:ab:30:f4:be:1f:4f:e7:7a:6a:4a:45:91:e2:cd:fd:c6:
14:d6:3c:b1:54:9f:74:a2:80:50:c4:77:ca:ed:6b:c7:55:3d:
1c:be:ac:f5:11:fa:38:eb:3e:08:bb:63:cf:ce:aa:78:54:3d:
60:17:f0:bc:31:2e:d9:55:b6:ea:4d:85:24:da:e5:5d:96:34:
8b:67:81:33:e0:58:ac:5a:a5:24:9b:dc:49:d3:51:86:9b:21:
92:3f:80:95:ca:39:91:c1:36:75:e0:2e:bb:e6:eb:85:74:05:
13:a5:4c:e2:52:20:aa:28:b1:39:7a:06:4c:68:9c:0d:fd:32:
ba:d5:fc:dc:dc:df:11:59:ef:33:ea:07:36:b3:33:d0:27:c0:
10:83:22:97:ff:b0:4c:09:c2:db:3c:af:e0:70:9b:64:75:81:
3e:0e:97:c2:99:71:38:ee:0f:4b:ca:3d:c1:25:5a:8e:21:e9:
55:64:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:20 2025 by rpki-client