Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/ghHksvULyDIQqSl39Y4B0B0JufA.roa
File: ghHksvULyDIQqSl39Y4B0B0JufA.roa (raw, json)
Hash identifier: QyQoACM/1TMM8UODY76bNfl8YCNLHy18NWkC0P5gi1g=
Subject key identifier: 82:11:E4:B2:F5:0B:C8:32:10:A9:29:77:F5:8E:01:D0:1D:09:B9:F0
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 106E28C0
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/ghHksvULyDIQqSl39Y4B0B0JufA.roa
Signing time: Sat 01 Jan 2022 12:57:25 +0000
ROA not before: Sat 01 Jan 2022 12:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.54.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275654848 (0x106e28c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Jan 1 12:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8211e4b2f50bc83210a92977f58e01d01d09b9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:14:01:27:75:96:b6:32:92:82:58:4a:01:
f3:85:be:b6:11:cb:ef:f7:58:4e:ac:f9:80:50:c5:
49:cd:60:70:a2:7c:a5:16:c6:b3:96:c7:52:38:00:
12:dd:7a:a1:8d:7c:81:fe:68:34:86:b1:72:ef:09:
47:4c:15:b5:49:d8:c1:36:ff:e0:2b:7f:55:ae:ab:
4a:18:09:69:e7:04:bc:9a:02:2c:ae:74:b0:21:66:
92:8f:2e:98:db:87:f1:4d:2b:aa:99:6e:75:7e:d6:
c6:15:17:53:c2:08:ae:ff:06:47:d9:39:46:f9:2b:
9c:e4:09:87:f5:f6:b4:18:f8:ad:3b:1d:da:64:f0:
5c:ed:32:e2:01:ae:dc:ab:57:de:16:d1:7a:3d:a9:
0f:30:bf:d8:14:da:86:ee:b9:8a:c8:08:69:56:23:
93:6b:3e:4e:b7:e1:bc:1d:2d:5b:1e:df:06:c8:05:
c4:d7:a6:0e:29:ac:d5:29:ab:bc:cc:50:a2:91:00:
44:4e:dd:aa:ab:9f:ce:1a:77:09:1a:8e:3c:d8:7a:
4a:bb:05:1f:96:9b:6d:98:39:e8:35:a5:99:6e:79:
55:e6:36:65:db:fe:1c:16:37:5a:30:d0:16:5f:a1:
47:67:c0:cf:37:c9:69:80:91:8f:c3:c9:95:9d:ce:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:E4:B2:F5:0B:C8:32:10:A9:29:77:F5:8E:01:D0:1D:09:B9:F0
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/ghHksvULyDIQqSl39Y4B0B0JufA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:bf:e8:cb:1c:36:46:c1:57:c1:65:db:ed:dd:0e:0e:7f:16:
d2:b2:51:6d:e4:84:45:7d:07:92:e5:b1:e1:82:eb:c8:cc:43:
11:05:0a:c1:6c:c6:f5:90:d9:49:1e:e7:29:12:e4:de:80:b1:
46:c7:17:54:06:41:dc:16:4f:8b:71:07:59:21:a9:ba:50:b5:
5e:ae:22:b9:08:96:1e:04:ac:ed:2f:e9:b9:01:1c:86:2a:0b:
01:3c:a6:3c:19:84:7a:41:e0:65:bd:de:6c:d8:fd:3b:02:89:
e5:7c:c2:d6:47:02:50:b3:85:ec:ee:a1:7b:8d:d1:cc:28:ad:
ec:bc:d3:7f:40:90:a4:22:8f:85:d1:fe:94:c9:ca:57:b4:e5:
6c:3c:5e:68:a0:12:34:dc:e8:b7:02:d2:f2:3a:2a:25:32:72:
2a:90:ac:ef:76:23:9f:71:47:74:45:00:aa:d9:8e:3d:7f:82:
be:7b:a4:d9:5d:5b:62:7b:e4:1e:e5:e5:f5:5b:4a:f0:fc:4f:
a8:c2:5d:44:4a:4a:c3:2c:0c:dc:f6:61:20:54:0a:37:eb:51:
d9:34:12:b1:1c:8c:eb:72:a8:e9:eb:72:85:86:a3:24:a2:6b:
ea:62:bc:ef:01:8e:f4:53:ef:a6:b6:75:e0:86:0a:13:a2:20:
50:21:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:44 2025 by rpki-client