Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa
File: Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa (raw, json)
Hash identifier: D6alHFBw87PSRUedkFujLNRW9+yoaIFCiBA4D58vz5s=
Subject key identifier: 1A:48:FE:FE:C3:68:23:5F:D5:E0:0A:B4:01:1F:7A:EC:92:7B:88:80
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D63C18DBD20A286C7944F2B8488F5F
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206238
IP address blocks: 45.80.168.0/22 maxlen: 22
45.83.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3c:18:db:d2:0a:28:6c:79:44:f2:b8:48:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a48fefec368235fd5e00ab4011f7aec927b8880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:3e:8d:41:aa:a8:d9:41:bc:b3:12:05:dc:
18:f4:48:8f:9e:c3:56:e1:3b:30:fe:46:7e:89:6a:
f0:80:b5:d7:06:d4:0d:88:e1:e8:8d:6c:a3:44:d7:
d9:75:e5:85:15:68:8b:c0:ab:3d:08:89:37:9a:29:
81:e9:a1:de:7a:52:b4:05:23:b6:ba:b0:50:6e:75:
89:67:21:de:28:1a:91:8a:63:1c:4e:3b:16:d7:92:
01:90:24:07:45:3c:8f:6b:e5:90:db:c5:bd:b2:9b:
bc:7a:3e:ba:a1:ac:75:a9:86:79:a4:49:16:de:ef:
9c:7e:1b:c7:0c:0d:3b:71:75:f7:eb:01:05:40:f6:
e9:ea:1d:80:18:70:0e:74:d4:fe:80:4b:a5:69:0b:
49:0a:f2:da:85:79:b9:24:3c:f6:24:01:9e:9a:b0:
a4:60:fe:76:f0:b8:6b:cb:78:0f:78:26:b0:8d:e3:
91:f9:d3:6d:43:7d:a8:bf:fd:30:df:24:ba:66:27:
38:77:8a:3c:36:6a:85:ae:2c:d0:c9:ff:43:71:dd:
a6:b6:a1:3e:46:9a:68:fd:0f:88:65:5e:36:51:b1:
55:81:58:e1:93:03:45:ca:1a:70:bc:53:e8:8a:d2:
61:fe:83:21:88:25:6d:49:9d:17:62:19:8b:90:49:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:FE:FE:C3:68:23:5F:D5:E0:0A:B4:01:1F:7A:EC:92:7B:88:80
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.168.0/22
45.83.4.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d9:75:11:22:9c:7e:db:b9:a3:b8:4d:18:35:12:9a:a4:63:
8c:03:bc:82:4b:12:be:12:91:5c:93:ae:ef:8d:22:b7:37:64:
e8:c8:4e:08:98:f5:63:76:7c:4a:ee:1a:5e:1c:9b:be:16:bb:
c7:cf:94:7b:ac:d3:47:1e:98:05:31:29:f0:ae:3c:d2:93:db:
4e:6b:5c:c4:57:36:da:df:31:e8:64:27:39:32:ae:e1:e1:d7:
91:59:e5:0b:91:44:4c:bf:2e:5f:8e:72:41:39:4f:96:8b:62:
75:b5:90:4f:f2:6b:54:6f:5c:dd:42:8f:70:31:2d:84:8b:55:
51:10:c7:88:67:f7:da:5b:8f:50:c3:f3:00:ea:2d:29:ab:3f:
2e:d7:12:c9:a2:45:9a:12:06:3e:f4:ac:d3:fa:de:54:8c:a9:
7f:33:be:2e:4d:5f:10:04:a0:c4:d4:2b:c3:cc:ee:51:49:2c:
c8:a6:ff:1d:bb:50:67:24:1e:d9:83:3e:12:00:ec:95:5b:e9:
20:fa:e7:de:df:e2:82:f8:b8:81:64:09:fe:0a:e4:5b:3c:6d:
29:b5:62:16:83:45:13:83:2f:e6:85:7b:5f:0b:18:b7:2d:4d:
00:f3:bb:a5:e3:32:39:0f:f7:ff:52:38:9b:e8:db:83:01:e9:
7f:32:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:42:20 2025 by rpki-client