Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/G-l8_nIjGXR2g3ie6C0b-DsumJM.roa
File: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (raw, json)
Hash identifier: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=
Subject key identifier: 1B:E9:7C:FE:72:23:19:74:76:83:78:9E:E8:2D:1B:F8:3B:2E:98:93
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D437E677C2CFEA7E44944AF9C299D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/G-l8_nIjGXR2g3ie6C0b-DsumJM.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39083
IP address blocks: 5.252.232.0/22 maxlen: 24
80.78.132.0/22 maxlen: 24
194.120.126.0/24 maxlen: 24
2a07:6f40::/29 maxlen: 48
2a0d:2140::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:43:7e:67:7c:2c:fe:a7:e4:49:44:af:9c:29:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1be97cfe722319747683789ee82d1bf83b2e9893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:c2:24:6a:2e:55:25:dc:2b:86:de:b3:6d:
c9:a8:aa:7d:f1:2a:09:61:ab:b9:23:b5:9e:25:16:
b9:fb:f7:09:fb:4b:8e:c0:08:15:dd:f3:20:68:c1:
f2:39:00:6e:c5:bd:5b:da:97:44:7d:ff:4b:d8:a6:
0d:4e:2f:34:46:b9:97:34:b7:66:24:a5:4f:74:02:
80:5a:ef:7d:61:82:85:64:5a:74:b1:7d:17:e8:64:
05:a2:ad:6a:44:24:f6:81:10:70:e6:f8:9a:c9:64:
c4:e0:9b:56:98:cb:f7:e5:ce:e2:28:67:f4:8e:61:
17:4e:a2:0b:b9:d3:b7:07:b0:66:6e:fb:26:7a:56:
30:08:a2:b6:e0:c6:7a:0f:73:c5:29:c7:33:46:db:
2c:c4:dc:2c:73:7f:15:2d:6d:4f:cf:07:6b:e6:e4:
42:bf:a5:72:7b:07:55:c6:d6:a2:e7:c0:3d:1b:66:
09:ab:9e:9a:6f:74:9d:52:f9:38:c3:bc:b5:90:be:
4a:e4:05:ee:13:3f:ba:15:bc:0f:56:e2:24:a6:4d:
d5:e2:4d:7b:1e:4a:35:1c:cc:5f:be:a8:45:b2:c0:
96:9f:c8:26:19:1e:03:bd:79:a3:67:09:a0:d3:92:
06:04:fe:57:0e:3b:2a:0c:f5:11:15:6b:74:92:19:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:7C:FE:72:23:19:74:76:83:78:9E:E8:2D:1B:F8:3B:2E:98:93
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/G-l8_nIjGXR2g3ie6C0b-DsumJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/22
80.78.132.0/22
194.120.126.0/24
IPv6:
2a07:6f40::/29
2a0d:2140::/29
Signature Algorithm: sha256WithRSAEncryption
1f:e9:22:4c:7c:29:7f:cd:58:c2:67:2a:44:5a:c4:0d:c3:0d:
b9:7a:f6:94:33:d7:f4:a8:05:cc:35:b7:19:0b:98:16:fa:fd:
c0:94:8a:e6:17:ee:55:cb:27:8d:2f:53:87:c6:b1:ac:42:a4:
ad:c0:b7:96:62:db:63:b7:8d:b5:ef:a0:67:9b:75:98:17:40:
68:bd:c5:5b:ff:34:4b:c7:33:14:96:7b:69:c7:3c:a9:14:8c:
fb:b7:12:55:92:f3:74:ff:ce:7d:9f:8d:91:c5:ee:ba:b1:eb:
42:10:ea:b5:6b:25:bd:58:a6:ec:ed:39:38:24:a2:d9:02:c3:
d7:f0:e7:34:93:d1:25:ba:37:f1:5b:18:ff:57:a4:04:29:1b:
e6:d4:59:7f:71:16:b4:33:ac:77:ae:e8:15:ac:f2:dc:a7:55:
b8:8e:5c:98:41:e4:d3:0b:6e:31:89:be:6b:6a:7e:44:a7:c7:
d1:d2:eb:44:15:11:46:23:6d:7c:b3:0c:b2:f1:e0:43:9c:58:
c7:f0:b5:20:11:57:ae:61:c9:17:dd:70:30:cb:29:78:a0:a6:
55:03:68:7b:09:63:87:8f:1c:c6:3d:a1:02:b1:e0:f9:c9:02:
d1:65:18:da:98:cd:4f:ab:43:09:19:de:19:0e:7f:99:9a:14:
a3:18:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:39 2025 by rpki-client