Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/GGgXcPcm_VptZUKYb8GMmNRReBo.roa
File: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (raw, json)
Hash identifier: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=
Subject key identifier: 18:68:17:70:F7:26:FD:5A:6D:65:42:98:6F:C1:8C:98:D4:51:78:1A
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 01941FFA1F72C778B16C057EA72495012E26
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/GGgXcPcm_VptZUKYb8GMmNRReBo.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1f:72:c7:78:b1:6c:05:7e:a7:24:95:01:2e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18681770f726fd5a6d6542986fc18c98d451781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ce:0b:f6:f4:8c:37:2a:60:16:f5:76:e3:b0:
dd:eb:11:f3:51:d5:56:af:92:33:32:e1:55:48:b8:
b8:0d:3f:4f:c7:aa:6c:54:c5:82:44:e8:eb:ca:d9:
ec:fa:c4:82:ff:dd:68:5e:27:03:54:e7:85:b1:34:
ee:ec:e8:7d:39:08:23:97:82:5e:d7:c1:4b:a7:d5:
aa:f7:95:af:da:37:8d:e5:b3:7c:43:c2:a2:a9:86:
c1:fd:d2:80:3f:63:ac:db:ad:39:20:df:9d:d3:1a:
be:c5:fd:87:6e:1f:f8:1b:5c:1e:8c:53:72:e9:b5:
3c:a9:d4:f2:e1:ea:24:10:d2:12:56:e0:c8:88:f5:
08:c7:f4:10:3d:54:12:42:90:35:51:de:32:68:2d:
52:58:86:96:6f:2f:39:b1:97:1c:68:a6:46:28:00:
a5:8c:87:1d:0f:fb:a2:8b:4a:a4:ed:84:77:61:c3:
e9:27:d7:9b:81:98:20:9f:bb:18:40:c2:cd:80:6d:
ad:51:67:c5:ee:b9:51:fb:fc:a1:7c:f3:f4:12:b6:
34:8d:4d:d4:cf:cf:cd:1f:4f:7a:f5:d8:b3:06:d9:
ab:e5:7e:7d:2c:4e:9b:cd:5b:9b:f7:40:0a:d6:26:
10:81:c3:f2:ab:b1:1d:be:a4:aa:73:59:c7:61:ab:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:17:70:F7:26:FD:5A:6D:65:42:98:6F:C1:8C:98:D4:51:78:1A
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/GGgXcPcm_VptZUKYb8GMmNRReBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:92:ad:c7:3a:ec:51:18:42:c6:36:45:7f:12:fb:79:aa:87:
db:88:47:f3:24:e6:26:f6:c3:6e:33:c5:0d:16:75:b2:28:26:
44:1a:8b:c0:ac:ae:ae:52:c1:fc:55:d3:b2:99:f5:2a:50:b8:
9e:f7:3d:0d:5d:4b:9e:cd:cf:65:17:53:42:bf:21:4b:d1:cb:
c9:ba:ec:79:1b:d5:49:f7:45:79:68:a7:71:7a:b7:49:35:2d:
64:e3:c8:e4:ce:82:75:78:d3:38:4b:e0:74:e7:03:50:ff:f5:
d0:cd:bc:d9:4f:f0:56:99:13:99:06:ad:45:1d:e4:53:a7:1f:
ed:9f:be:82:f3:51:fc:8d:7b:6d:b1:44:47:4e:22:73:ab:29:
aa:cf:c6:7e:e8:b2:d0:f3:69:6d:f5:1e:60:28:37:6c:3f:fc:
2f:af:72:86:1b:e9:e3:86:b4:62:3a:af:f8:f7:ff:3b:1f:9d:
6d:8e:4e:40:c0:2f:de:e2:0c:18:3c:0d:4a:6f:87:7f:e7:79:
70:d5:61:10:94:22:09:5e:ab:75:8b:46:4b:96:32:ae:a9:8c:
be:db:3c:a9:5e:e1:6e:7f:3f:b4:6f:ef:65:76:ee:6d:d4:c0:
fd:dd:d9:58:75:85:09:c8:69:d9:e5:7a:94:01:3f:08:30:ce:
98:4e:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:24 2025 by rpki-client