Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/gpM2Niv38-bAPpYWDWu_AiD_7fU.roa
File: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (raw, json)
Hash identifier: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=
Subject key identifier: 82:93:36:36:2B:F7:F3:E6:C0:3E:96:16:0D:6B:BF:02:20:FF:ED:F5
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 019421B23B1F8AC314794DBD82DEFC84B1AD
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/gpM2Niv38-bAPpYWDWu_AiD_7fU.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29601
IP address blocks: 139.123.224.0/24 maxlen: 24
193.24.64.0/24 maxlen: 24
193.24.67.0/24 maxlen: 24
193.24.70.0/24 maxlen: 24
193.24.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3b:1f:8a:c3:14:79:4d:bd:82:de:fc:84:b1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829336362bf7f3e6c03e96160d6bbf0220ffedf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:dc:08:a3:7f:3b:14:86:62:ca:ee:54:dd:
25:ce:38:83:63:9e:89:ad:52:1c:06:70:40:bd:23:
17:60:b6:c0:0e:88:9f:e6:aa:5f:65:8e:94:72:58:
9a:bc:19:16:41:96:ad:9f:20:39:9d:61:70:c0:1d:
85:01:f0:0f:2d:62:7a:5c:3d:9f:df:c7:4c:6b:0a:
8f:99:f1:1d:78:a9:33:a7:ac:4f:16:75:2f:e1:9d:
6f:6d:4b:51:20:a0:9a:63:29:31:a1:37:f1:ee:70:
94:a7:1d:7f:de:cb:4c:13:9b:92:05:83:fe:9b:fd:
5c:92:42:e7:51:b9:ab:1d:3b:11:33:05:15:b2:f0:
58:00:24:1a:9d:fa:de:25:96:20:eb:13:26:47:04:
ba:8b:52:5f:1d:13:13:72:e9:8c:0b:eb:fa:b9:a2:
0a:d8:5a:04:be:e6:97:a6:b2:69:11:c1:13:f6:19:
79:1d:41:38:b2:ee:d2:2a:8e:c3:87:66:37:33:9c:
c0:f7:14:98:cc:00:26:3d:52:9f:3a:7f:cd:f9:72:
fe:72:fc:23:db:c3:eb:45:39:1d:72:07:29:3b:8d:
96:8a:1c:56:4c:a4:c0:46:b8:51:83:7f:10:09:4a:
a4:67:15:8b:5d:13:0b:7a:cc:18:62:c6:a7:22:50:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:93:36:36:2B:F7:F3:E6:C0:3E:96:16:0D:6B:BF:02:20:FF:ED:F5
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/gpM2Niv38-bAPpYWDWu_AiD_7fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.123.224.0/24
193.24.64.0/24
193.24.67.0/24
193.24.70.0/23
Signature Algorithm: sha256WithRSAEncryption
58:5a:6e:25:a2:da:bf:25:37:e0:3d:2c:1e:8a:5b:5b:48:5f:
ee:bb:9d:5d:55:2e:f1:9d:cb:d5:4c:95:cb:22:81:d8:3e:63:
e6:9a:04:3e:54:b5:51:cd:0c:92:8e:7e:77:f1:5a:44:29:38:
5c:f1:a8:24:5e:b1:95:85:b4:1f:4a:9b:9d:95:2d:c1:1a:e0:
63:d9:c9:ff:27:93:ed:6f:bc:67:a0:da:80:41:9f:b2:80:5a:
0c:37:b3:70:0c:58:67:36:df:d2:4f:13:c6:b8:51:47:77:ce:
f1:65:43:0b:bf:1f:31:72:ca:6d:d6:f0:1a:38:e3:0e:51:4c:
b4:e8:a3:2c:89:e6:84:fe:58:13:2d:06:f8:72:b3:ae:23:46:
76:3d:a9:b3:a6:14:bf:4e:dc:9c:6b:fc:7e:39:44:3c:a6:ae:
6c:44:37:bc:03:7a:f8:59:ed:a8:db:3d:1c:0f:19:5b:20:9c:
ec:66:19:8e:98:cc:c5:4e:b4:e2:78:30:a5:97:81:ac:ca:ce:
6a:12:55:5a:75:79:c8:d0:47:0b:2d:4e:17:92:7b:b4:d8:65:
d1:e9:b1:84:47:8d:0e:8d:04:ca:da:52:38:7a:e4:b3:74:79:
cd:b5:c3:ed:49:9b:b7:6f:83:9d:16:df:f2:6b:a3:78:4c:c0:
89:b6:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:26 2025 by rpki-client