Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/G-4MkLr94NS2-9Ku0UWb3AXttl4.roa
File: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (raw, json)
Hash identifier: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=
Subject key identifier: 1B:EE:0C:90:BA:FD:E0:D4:B6:FB:D2:AE:D1:45:9B:DC:05:ED:B6:5E
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D6169DB30EE50EE2E0A5A3F288FCA
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/G-4MkLr94NS2-9Ku0UWb3AXttl4.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15626
IP address blocks: 130.0.232.0/21 maxlen: 21
2a02:c6c1:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:61:69:db:30:ee:50:ee:2e:0a:5a:3f:28:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bee0c90bafde0d4b6fbd2aed1459bdc05edb65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:10:f7:35:73:e9:98:b1:fd:4f:8a:98:99:
5e:b4:75:2f:5e:01:5c:ca:87:fa:1d:59:3c:cf:99:
a9:1d:74:59:bb:dd:d7:b1:34:db:b0:d1:c8:09:7f:
1d:06:62:9c:8f:cd:c2:02:07:e3:d3:40:42:6c:5c:
66:bf:ba:ae:4d:9b:3b:07:74:19:67:c7:30:cf:49:
ac:00:b1:2a:26:a1:33:01:21:c8:43:7e:b2:6c:a0:
0e:04:5f:b6:99:30:52:78:5e:cf:67:2e:24:c4:87:
ef:c8:be:68:24:82:f7:b4:f9:52:92:d7:a1:b0:d6:
ef:46:fc:73:45:d4:78:69:eb:47:bb:22:1a:15:b9:
ee:4b:17:a8:07:fe:26:5f:be:c2:2b:47:04:15:f5:
ef:6f:48:6f:aa:a7:18:1d:4c:e1:b9:13:3e:40:9f:
20:e8:67:72:0d:fc:0f:70:a8:1e:f2:fa:b0:36:e4:
7f:45:9c:a8:9e:6d:ec:c1:68:b0:eb:5b:34:e8:6f:
18:fd:ca:40:69:1b:b6:18:97:fd:87:aa:30:19:0b:
13:56:d3:87:bf:60:2c:56:2c:84:f9:af:a9:92:10:
2b:83:cc:39:a1:a5:78:61:a9:87:cc:b5:43:5b:c6:
10:5c:34:04:0d:fc:09:f9:35:a3:b8:06:a9:73:a9:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:0C:90:BA:FD:E0:D4:B6:FB:D2:AE:D1:45:9B:DC:05:ED:B6:5E
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/G-4MkLr94NS2-9Ku0UWb3AXttl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.232.0/21
IPv6:
2a02:c6c1:c::/48
Signature Algorithm: sha256WithRSAEncryption
4d:2a:bc:30:47:bc:fb:05:d7:48:70:0f:ba:66:d7:23:56:ae:
61:c4:83:c7:34:d6:06:9b:52:46:e9:97:06:f8:39:61:ff:91:
24:fd:3a:da:27:9f:da:31:9f:59:68:8a:43:d5:54:2f:f9:be:
5f:9e:64:72:4a:61:56:79:54:fd:3b:86:31:75:c9:93:c7:ff:
b0:58:e7:68:f1:5e:4f:b5:23:79:7a:d2:84:08:32:77:dd:80:
5d:f7:69:f6:05:bc:05:62:48:6a:7c:3f:7d:4a:47:83:96:5e:
54:44:28:91:ef:5e:eb:f0:7a:4e:90:95:a9:6e:24:2f:ae:54:
ef:f3:a6:44:bb:e8:13:b4:da:c4:15:d5:b5:06:65:ee:e6:d0:
67:ff:a6:8b:34:01:f6:2d:6f:6a:53:ee:70:a9:aa:41:2e:92:
3a:78:8b:51:54:85:48:7d:bc:48:13:11:5e:f8:fb:d4:36:14:
b3:92:1f:a2:0f:d1:7a:05:b4:38:0c:3a:e7:29:60:e4:29:30:
cc:8f:64:c7:9a:74:e0:f5:09:ad:e1:a7:95:d8:d9:dd:53:e4:
91:c5:33:c3:4e:38:b0:f4:94:dc:39:6b:75:c3:58:7d:c4:ad:
f5:c9:6e:5e:ff:50:99:f5:37:95:b0:14:a6:3b:a7:eb:44:4b:
ce:b7:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:51 2025 by rpki-client