Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/GONoBaS0nACGnEjc-yHuqDoDlew.roa
File: GONoBaS0nACGnEjc-yHuqDoDlew.roa (raw, json)
Hash identifier: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=
Subject key identifier: 18:E3:68:05:A4:B4:9C:00:86:9C:48:DC:FB:21:EE:A8:3A:03:95:EC
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 0194266ADBC01BE5204C7E791C1583713259
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/GONoBaS0nACGnEjc-yHuqDoDlew.roa
Signing time: Thu 02 Jan 2025 09:48:44 +0000
ROA not before: Thu 02 Jan 2025 09:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41179
IP address blocks: 80.90.7.0/24 maxlen: 24
2a02:cb43:2003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:db:c0:1b:e5:20:4c:7e:79:1c:15:83:71:32:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Jan 2 09:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e36805a4b49c00869c48dcfb21eea83a0395ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:0c:45:c7:7c:48:0a:fc:8b:74:99:6a:72:
d7:ff:26:19:c9:6d:03:3d:8e:22:4d:2d:9d:0f:d6:
e5:61:92:9f:5f:f7:cf:59:1d:a5:85:4d:8e:09:f7:
12:dc:a5:0d:3a:77:9d:89:57:59:62:85:e4:4a:ee:
41:28:1f:01:1b:19:42:d3:23:02:77:a9:1b:42:06:
df:3e:a9:f6:06:e3:48:53:8b:48:31:ec:4f:5d:5d:
61:e6:69:fe:09:1b:41:7b:4a:92:7b:18:f5:54:84:
f0:60:f6:67:8f:3e:cc:77:87:62:3a:51:97:2a:b1:
f4:2d:2b:a5:b7:28:a0:51:e3:16:fc:3d:39:fd:b2:
0c:d8:51:ab:dc:4e:ae:d6:5f:a7:38:3f:13:98:d0:
48:4e:b2:8c:3d:be:f1:dc:2d:ce:9c:57:c8:d8:f8:
17:cb:ed:4d:aa:d8:cb:8f:de:3f:8f:76:34:01:ba:
56:2b:ba:9c:08:ef:9a:bf:88:9d:f4:5d:e8:db:ec:
95:5f:24:79:b3:4d:06:1f:bd:db:a0:5f:35:1a:fb:
0a:54:56:4a:49:07:66:54:47:7c:d8:f9:85:79:38:
68:7b:56:5a:f7:db:8c:bb:9a:72:99:8b:30:52:fa:
f0:6a:12:f5:bb:34:50:b2:be:31:d8:b6:66:9f:57:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:68:05:A4:B4:9C:00:86:9C:48:DC:FB:21:EE:A8:3A:03:95:EC
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/GONoBaS0nACGnEjc-yHuqDoDlew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.7.0/24
IPv6:
2a02:cb43:2003::/48
Signature Algorithm: sha256WithRSAEncryption
82:2f:31:de:d7:a9:be:01:40:5a:21:60:75:dd:3d:74:09:06:
d0:81:77:bf:0d:fd:85:0b:d2:31:cf:68:25:3d:05:82:8e:05:
4b:62:a5:e8:ee:7c:5b:44:b3:0b:3b:8f:e6:57:ab:49:3a:2b:
76:de:9e:01:d2:37:5e:cc:d0:ab:ff:b8:90:a7:46:66:e7:0d:
80:43:cc:44:55:9e:77:12:75:ec:cd:e1:22:9f:c3:42:1e:d1:
fd:ba:47:15:11:a9:4d:29:36:53:11:0b:de:1f:6b:45:dd:00:
ea:dd:6f:a2:9a:2f:5c:4f:ad:fb:d6:17:95:37:e9:e3:aa:b3:
b2:02:55:6d:4f:5b:37:a6:9e:2c:1d:2a:c4:35:a8:29:b2:f7:
01:6c:56:f2:43:88:7f:22:0d:be:1f:59:67:67:da:8f:b4:ad:
32:83:d8:0c:bf:b4:be:17:e2:7b:b7:17:0c:c3:38:f5:fa:d3:
e7:b2:46:2a:e4:8b:ba:3d:75:e1:c8:13:4d:c9:ce:b9:ea:8b:
66:84:f7:d0:32:71:cc:6d:fc:94:d1:40:e9:50:b4:fe:81:61:
b3:20:2d:f4:5f:d4:c9:b1:be:34:85:ba:04:5e:3e:f7:d1:3d:
fc:f2:c5:1c:53:ad:84:48:23:15:37:8f:b1:1d:3f:42:04:46:
fa:34:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:57 2025 by rpki-client