Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/GscfecpegOFfpMoknfniRAYQkAM.roa
File: GscfecpegOFfpMoknfniRAYQkAM.roa (raw, json)
Hash identifier: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=
Subject key identifier: 1A:C7:1F:79:CA:5E:80:E1:5F:A4:CA:24:9D:F9:E2:44:06:10:90:03
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 019420D664A5A838D6BD9E6DDDC45CA687B2
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/GscfecpegOFfpMoknfniRAYQkAM.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200046
IP address blocks: 45.8.27.0/24 maxlen: 24
185.38.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:64:a5:a8:38:d6:bd:9e:6d:dd:c4:5c:a6:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac71f79ca5e80e15fa4ca249df9e24406109003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:43:7a:5e:de:18:e3:19:78:f8:ea:d0:86:
20:d3:de:39:69:aa:04:85:a2:57:ad:c8:cb:08:2e:
88:0b:dd:85:1c:12:a8:14:82:b4:b6:01:1e:bd:82:
b8:34:45:4f:6a:35:ed:90:9d:d1:c0:06:cc:de:fc:
ca:43:a2:e9:b9:16:d7:2d:c0:51:3b:fe:7c:14:d4:
3a:8d:b0:64:46:44:78:3a:0b:11:e5:d0:d8:db:d4:
d2:bb:3d:7c:0e:cb:cf:d9:aa:df:ab:3c:08:fc:ba:
f6:3f:51:c7:d4:4e:75:67:99:e2:2c:34:7c:32:44:
b1:87:39:a9:f2:eb:70:10:75:c9:24:cd:47:5c:76:
fc:e5:a6:51:ae:56:d1:ef:a8:32:7f:ff:68:58:47:
50:23:65:dc:01:a9:cd:b4:08:e2:e3:17:31:63:11:
19:57:d2:3c:4a:e3:7a:97:56:66:d2:77:f8:17:c3:
3b:aa:ab:f5:73:8c:17:1d:68:45:ac:99:b2:fc:4e:
76:67:b8:ec:ec:8a:e4:c0:76:1d:57:98:0c:f5:ad:
a5:d2:ab:e0:e2:23:fc:32:76:73:37:ec:49:fa:5d:
e2:62:1f:65:71:09:95:e9:0c:ec:c7:48:9e:fd:71:
60:1b:6a:99:87:51:f6:0c:cc:18:9c:3a:1a:cd:64:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:1F:79:CA:5E:80:E1:5F:A4:CA:24:9D:F9:E2:44:06:10:90:03
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/GscfecpegOFfpMoknfniRAYQkAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.27.0/24
185.38.60.0/22
Signature Algorithm: sha256WithRSAEncryption
92:aa:5d:d1:d8:b4:fd:72:fc:de:76:97:05:59:3d:74:7b:4a:
4b:88:c7:b2:7a:3a:c7:b6:a7:3a:ed:ef:f3:2e:69:ec:2b:08:
48:ab:58:7c:2b:4d:36:55:9d:00:ef:7f:32:98:9b:b7:ec:58:
ac:ca:22:fd:b5:81:42:b9:cc:af:52:f1:43:c4:f8:e9:88:05:
9f:af:cd:7e:7f:bd:d6:de:da:1a:36:b5:ae:d0:71:d8:2f:0c:
38:f9:f1:03:5d:90:03:8e:78:7c:55:7b:39:0e:f7:25:fd:97:
c6:27:e3:9a:46:81:62:e2:0f:6d:37:63:03:b5:4c:29:58:20:
17:4c:1d:12:7c:c4:51:6d:0f:40:58:4c:13:d5:f4:95:97:e8:
f6:3e:0d:0a:c6:f7:90:51:a8:45:78:db:b9:b1:13:8f:fa:ee:
8d:89:d8:00:52:ed:69:62:96:bb:48:00:45:fa:48:e2:5a:9b:
12:81:a3:37:84:af:f9:da:54:f0:c9:a4:f0:11:f6:b1:61:e1:
ae:ef:9b:1b:c5:dc:45:9b:8d:31:9b:e9:2a:36:da:ee:6f:35:
31:09:bf:32:d4:01:34:2a:ed:cc:d3:5a:4d:0c:71:70:66:08:
4b:55:c4:b7:c7:0c:31:28:4c:39:b2:8d:4a:ce:05:0c:6a:66:
ee:8d:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:04 2025 by rpki-client