Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/gPbim5HyI5_coGPfod5GORXHFJM.roa
File: gPbim5HyI5_coGPfod5GORXHFJM.roa (raw, json)
Hash identifier: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=
Subject key identifier: 80:F6:E2:9B:91:F2:23:9F:DC:A0:63:DF:A1:DE:46:39:15:C7:14:93
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC41B288CC74A61BF3D1076B9208E9
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/gPbim5HyI5_coGPfod5GORXHFJM.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211236
IP address blocks: 94.188.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:41:b2:88:cc:74:a6:1b:f3:d1:07:6b:92:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80f6e29b91f2239fdca063dfa1de463915c71493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:52:00:35:26:4f:b6:f6:06:4d:dd:23:7d:
10:b7:86:a2:b0:a3:b8:e7:2a:00:11:bd:b9:30:e8:
5b:01:b0:73:11:01:64:b3:1b:16:0e:28:1f:cb:80:
d8:9c:fc:b2:62:98:57:0b:78:98:72:94:28:3d:ac:
e6:e9:60:cb:c3:ce:87:89:f5:b2:64:00:95:f2:e8:
3f:b1:e3:46:91:a6:bb:76:6a:b8:b0:79:4a:36:44:
ae:8c:76:57:00:34:4a:58:83:a3:37:18:7c:4e:27:
35:de:3c:56:f3:eb:a0:fb:9b:1f:f2:9f:43:d8:d2:
e3:f5:9b:94:d2:3b:9d:9b:9e:a1:bb:30:0e:4a:94:
1a:22:5d:b5:e3:94:f8:e6:10:d0:90:04:e1:2e:09:
53:81:8e:b7:0c:c5:25:33:68:f1:a3:ff:2b:3c:f7:
ca:76:de:04:87:94:f6:4e:75:9b:79:d5:96:49:da:
c2:e9:97:e2:80:e8:ba:12:ff:10:43:ee:72:0a:a4:
b7:df:25:e2:b3:13:9f:fd:cc:61:60:56:4e:3d:8b:
c6:e0:f7:d2:fe:0b:79:27:8b:1a:f4:12:b7:b3:8c:
0a:9a:15:78:da:a7:b8:71:7d:a7:ac:97:e1:35:e2:
5b:e8:45:67:c0:fe:10:f2:bb:78:23:5d:9e:46:99:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F6:E2:9B:91:F2:23:9F:DC:A0:63:DF:A1:DE:46:39:15:C7:14:93
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/gPbim5HyI5_coGPfod5GORXHFJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:89:a7:ae:0c:62:d3:a1:81:98:ad:04:43:7c:f6:86:a1:53:
4d:ab:27:75:1a:36:ca:f9:0c:04:68:ab:5d:d4:8b:d3:e8:d0:
58:ca:d9:c8:33:37:1e:af:a4:d2:f1:d7:e8:e8:cb:42:e8:d7:
34:71:5e:8e:9c:1e:d8:a7:bf:7d:fa:79:e4:7b:80:43:6e:56:
d0:64:c7:41:13:cf:f2:98:fc:35:94:13:ac:e8:5a:1a:0e:1a:
89:ee:50:70:35:d8:f0:b5:14:93:b5:18:74:9f:63:fc:d9:d4:
4a:cf:7d:30:a9:1a:08:28:af:99:98:02:be:44:f4:c0:9d:b6:
99:af:17:2d:a5:18:b5:ee:04:99:ee:b8:fa:eb:4b:96:64:be:
46:a2:3e:a6:fd:a4:d1:55:41:24:46:0e:e4:61:da:30:25:dc:
20:0a:a0:b5:08:85:15:2e:a5:2e:a3:1b:f5:89:8d:23:e2:35:
66:05:cd:b3:c6:ed:b3:13:5a:04:c5:0f:21:2d:3c:08:e3:46:
6d:df:b4:6a:4b:9e:59:63:1e:b8:39:a0:d4:d2:7d:56:62:85:
27:32:c1:09:47:9e:89:8c:97:bd:c1:6c:22:d2:cc:9a:d9:4a:
9a:27:f8:4a:93:31:7a:ad:e0:bc:e8:66:0e:da:b0:fe:33:13:
32:1b:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:17 2025 by rpki-client