Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/GKSQanExligYvTlhCHXIb80j450.roa
File: GKSQanExligYvTlhCHXIb80j450.roa (raw, json)
Hash identifier: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=
Subject key identifier: 18:A4:90:6A:71:31:96:28:18:BD:39:61:08:75:C8:6F:CD:23:E3:9D
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 019427B3F1923C48702D1902E825C28489AC
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/GKSQanExligYvTlhCHXIb80j450.roa
Signing time: Thu 02 Jan 2025 15:48:11 +0000
ROA not before: Thu 02 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49040
IP address blocks: 85.217.238.0/24 maxlen: 24
85.217.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:f1:92:3c:48:70:2d:19:02:e8:25:c2:84:89:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Jan 2 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18a4906a7131962818bd39610875c86fcd23e39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:36:fe:4d:f5:d9:1e:ff:fd:46:e1:3a:99:
6d:ca:0d:0a:97:dc:ca:c1:85:b9:4d:28:3b:8e:00:
79:d1:27:39:03:56:97:3e:35:15:b6:b4:d8:dd:c6:
54:3b:3e:1e:0e:ab:48:bc:62:66:54:82:f0:ce:35:
54:d6:0e:47:ff:6a:4a:a8:fa:c5:ce:5b:2b:ee:70:
0a:01:ac:ef:b0:b8:b6:24:7e:80:81:09:43:26:a5:
95:e0:d6:5c:54:5b:01:e1:2f:7e:7c:41:21:cf:27:
81:c0:c8:20:a0:25:6e:bd:07:f0:3c:06:b0:c2:5f:
6c:e7:4e:9e:3b:23:04:28:5c:26:31:c3:f0:18:32:
f4:fa:6e:ab:67:d7:af:99:0e:bb:52:cb:f9:8b:19:
41:52:e5:fe:0b:60:a1:81:ad:44:c0:aa:15:96:61:
09:3c:b7:d1:40:ee:9d:15:a2:b8:7d:3b:5e:4a:d4:
a3:12:60:ff:84:e6:18:ad:74:d0:d3:80:6e:4a:cc:
07:3d:73:7f:97:cf:ec:7b:c8:d5:3e:e0:e3:cd:7a:
9c:9e:e8:b4:d3:5f:89:f5:02:f2:f1:18:e5:5c:f5:
1f:a0:cb:16:89:01:fe:dd:46:1c:a6:6f:62:b2:d4:
c8:a6:fc:c4:55:a6:64:ce:b9:07:e6:09:e5:6e:e8:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:90:6A:71:31:96:28:18:BD:39:61:08:75:C8:6F:CD:23:E3:9D
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/GKSQanExligYvTlhCHXIb80j450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.238.0/23
Signature Algorithm: sha256WithRSAEncryption
71:04:c3:7d:52:44:d3:08:ed:6d:ce:d1:da:88:b1:34:6d:8f:
a5:15:66:36:ff:b2:7c:3d:3e:c0:d0:27:4c:44:12:f3:b6:0e:
2d:7c:4e:88:1a:16:6a:fe:c1:54:94:2a:3c:2a:dc:97:1f:a4:
fd:47:4f:24:f2:2e:32:5c:87:f9:a4:07:75:5e:7b:af:ac:1a:
af:5b:e9:0f:d2:9a:62:e8:69:fd:6a:15:d5:92:8d:fa:aa:d5:
06:4b:e5:33:de:dc:91:5b:37:0a:5c:ab:39:69:fc:d1:29:2a:
9d:17:72:bd:70:f1:1a:bb:98:e5:f2:48:32:c0:b9:e2:e6:d4:
40:8b:9b:db:73:f3:39:16:e6:87:83:ef:9f:88:90:db:16:40:
2f:83:eb:3d:99:9f:7e:36:7b:56:04:e4:a0:f4:de:8f:19:5b:
c9:7d:5b:90:d7:0f:a8:18:14:3c:02:7c:2a:ef:6e:7a:9c:8c:
dc:8d:5a:92:b0:4b:fe:3a:2b:74:0b:24:7a:ec:f2:6e:b8:6f:
11:8e:1a:f9:90:ae:8b:41:6a:0b:e3:f6:5d:69:39:f9:e5:3e:
7e:7b:0e:41:87:ce:9d:02:4f:d0:7a:b3:e4:cc:9c:0d:32:69:
f2:f7:40:ac:3d:3f:38:b4:cd:98:0c:39:08:49:4f:f5:d2:97:
db:a7:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:39:50 2025 by rpki-client