Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/GKmbp7Z1bWckwI35pX9vElMqHxg.roa
File: GKmbp7Z1bWckwI35pX9vElMqHxg.roa (raw, json)
Hash identifier: cu8RyR3ws/zygZ3d2HLRyIiMgvblqsU/iHclec10Fu8=
Subject key identifier: 18:A9:9B:A7:B6:75:6D:67:24:C0:8D:F9:A5:7F:6F:12:53:2A:1F:18
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 0194236981CB241DAB54171CF62905666CCD
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/GKmbp7Z1bWckwI35pX9vElMqHxg.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 213.132.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:81:cb:24:1d:ab:54:17:1c:f6:29:05:66:6c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18a99ba7b6756d6724c08df9a57f6f12532a1f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:48:f9:f1:b4:5f:7e:ca:5b:85:8f:90:f0:
7f:6d:48:b5:b1:c2:a8:82:f3:3e:1d:bb:3b:b3:3a:
b8:0d:d0:e4:0b:8f:50:03:01:04:2f:c6:9a:50:34:
31:fa:3a:fc:a6:8b:ad:7c:76:39:78:df:f0:68:35:
8b:07:28:a4:1c:46:40:2a:bc:b0:41:07:21:73:c6:
22:2b:37:41:82:23:41:69:60:fa:ae:92:49:4a:cd:
14:bc:b9:de:23:7c:b3:e8:cf:26:24:ab:b9:e1:49:
cc:c7:95:d1:9d:87:c5:8e:b2:f3:2d:53:49:0c:08:
d0:1b:7b:65:95:36:30:be:8b:91:88:3e:20:be:60:
a7:4e:ad:7b:de:65:c7:f7:e5:36:7d:73:80:5f:8e:
6a:7f:4e:be:39:d1:e6:a6:18:3e:7e:7d:79:e0:32:
37:16:e6:06:3e:91:e3:48:d6:80:74:2c:fe:fe:14:
52:c1:e9:e3:2e:ff:af:c9:59:f2:8c:6e:b3:a9:7e:
19:f4:ab:9c:e1:71:d2:c0:c7:37:ec:fa:9a:4a:97:
ec:bf:a0:d6:a8:00:b1:9a:88:44:5e:fc:e4:1f:23:
54:93:86:e9:a8:f5:95:6b:fb:ba:a5:57:d6:6b:a4:
ea:e0:5c:b4:9d:4b:80:f1:3c:5c:65:f0:50:2b:85:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:9B:A7:B6:75:6D:67:24:C0:8D:F9:A5:7F:6F:12:53:2A:1F:18
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/GKmbp7Z1bWckwI35pX9vElMqHxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:16:b6:53:23:d9:50:94:2b:60:60:fe:b8:b1:aa:21:64:2f:
62:8f:88:6e:fe:91:85:95:07:5d:02:25:e7:72:21:f5:b1:55:
7c:1d:26:99:40:26:71:13:8f:ed:08:db:0e:7a:34:05:88:13:
6a:48:24:f1:e5:dc:d1:d2:55:96:1a:b9:7c:31:58:6d:f0:2a:
de:51:ad:f2:60:f2:e0:6d:f1:cd:71:bc:dc:2e:9b:fc:3f:05:
d9:fe:24:72:ac:e7:95:53:64:a4:c2:b8:a1:65:0e:cf:8f:ea:
7a:13:8c:61:af:80:47:b8:8f:3c:e2:24:7f:a6:ba:02:a6:90:
06:be:b6:93:2d:30:86:65:45:ec:be:e8:a9:40:c0:a0:44:49:
e8:f2:f2:0d:bc:ec:79:aa:c0:51:76:8a:66:4a:63:9b:c4:c2:
7a:91:83:57:7f:62:9e:a8:a8:cf:21:b0:66:61:04:c6:65:c2:
78:83:34:12:79:e6:c6:74:ee:cd:ac:be:99:ab:80:29:19:b0:
70:a6:29:a4:d7:e6:ce:0e:c9:82:6f:61:76:5b:45:68:75:92:
41:80:cb:af:f6:d9:37:8c:b4:d0:3a:e7:6b:98:6c:44:42:62:
46:71:d5:bc:c0:e2:db:c8:ef:20:c9:9e:37:92:86:cd:6a:b6:
d6:11:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:31 2025 by rpki-client