Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/gM8Vs4rZduYc-FMusqbqCtswvSM.roa
File: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (raw, json)
Hash identifier: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=
Subject key identifier: 80:CF:15:B3:8A:D9:76:E6:1C:F8:53:2E:B2:A6:EA:0A:DB:30:BD:23
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 0194221FDA9E10AC06F090228326D9D8473B
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/gM8Vs4rZduYc-FMusqbqCtswvSM.roa
Signing time: Wed 01 Jan 2025 13:48:20 +0000
ROA not before: Wed 01 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35671
IP address blocks: 212.180.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:da:9e:10:ac:06:f0:90:22:83:26:d9:d8:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jan 1 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80cf15b38ad976e61cf8532eb2a6ea0adb30bd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:f8:c5:b5:e8:39:7f:7e:e2:51:ab:3d:74:
b1:54:c1:ad:2b:6b:01:15:75:3d:31:42:bd:4a:68:
a8:1c:53:70:9f:11:b9:c5:6b:09:ba:c8:22:b2:5a:
a3:d3:82:5f:47:95:cb:57:86:70:b0:c9:0d:36:b3:
b0:7b:04:35:a9:40:2e:6b:79:90:cd:72:6a:43:95:
37:04:c8:f5:75:7a:2d:f9:ca:ce:5b:65:8e:93:97:
c0:23:d7:10:29:e0:ad:56:e6:6d:0a:0d:3a:9f:cf:
ce:77:dc:01:21:2b:1e:09:f4:91:ce:e5:d0:f2:18:
bb:2a:ae:39:08:99:c8:04:66:15:82:fe:89:e6:88:
0a:eb:be:4d:44:a1:40:1f:65:51:a8:ac:cd:f6:ee:
94:9d:12:ae:10:51:34:2e:55:3e:cb:c8:23:89:1b:
a1:34:92:05:67:d9:a5:72:81:93:68:44:8b:c8:be:
a7:ae:bb:61:7e:53:f4:a7:ed:6d:26:81:d0:8d:b8:
9a:0f:e8:f1:8b:7e:b2:9e:2d:30:9d:eb:b7:03:a2:
1e:54:23:84:10:96:13:7e:ad:27:6b:e6:be:d8:2c:
91:3a:41:6a:19:6d:c6:ad:d1:58:b2:23:12:ac:8b:
56:e0:14:be:47:99:29:b4:1f:c9:64:a9:e9:52:ac:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CF:15:B3:8A:D9:76:E6:1C:F8:53:2E:B2:A6:EA:0A:DB:30:BD:23
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/gM8Vs4rZduYc-FMusqbqCtswvSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3f:69:05:50:23:c4:3d:7f:1c:a8:02:a5:04:57:bf:e7:49:
f6:3a:7f:30:0c:b5:39:0c:83:37:ea:24:24:d2:d0:75:1e:c1:
33:b9:ae:80:14:fa:c4:0d:0a:7b:46:16:74:f5:ba:f0:84:8a:
f8:73:e9:73:e5:a0:c3:cd:35:96:0a:f7:13:c8:13:78:d4:65:
3e:8a:18:eb:9b:6a:40:d0:55:d3:cf:9f:ef:e2:31:1d:d3:4f:
88:4e:27:ae:9b:3a:aa:95:54:eb:a6:3e:95:e2:60:7e:e0:34:
8c:5c:35:22:79:78:f0:de:3a:75:cf:ac:db:80:fe:2e:db:bc:
c6:18:07:47:03:2c:5c:90:8c:c1:44:62:cf:de:c0:75:f1:b4:
4c:f8:24:59:4e:bc:c6:a6:b0:c8:65:6f:fe:c1:0d:a0:ed:49:
b8:36:3a:80:74:c4:73:2b:f9:2e:cc:3c:d2:dc:76:50:41:42:
a3:1e:43:e2:04:1b:7a:e1:43:43:6e:c3:4d:74:2f:1d:5a:6d:
c6:0b:8f:fc:e0:17:38:e8:34:5e:50:9b:e0:3a:6b:f9:3e:57:
dc:19:a8:91:81:dc:83:f2:ee:67:f1:2f:7e:4b:3a:a1:f0:77:
ce:2b:ee:6e:74:9c:6b:39:21:1a:8b:a2:bd:f4:f0:b6:58:e0:
76:32:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:51 2025 by rpki-client