Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/GGsR3CTZp_ySYvfRDUPF91N6wRs.roa
File: GGsR3CTZp_ySYvfRDUPF91N6wRs.roa (raw, json)
Hash identifier: +hbDhYAqa8s6kUaFV+M346NJRpWW83Nz49mGZoVut4k=
Subject key identifier: 18:6B:11:DC:24:D9:A7:FC:92:62:F7:D1:0D:43:C5:F7:53:7A:C1:1B
Certificate issuer: /CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Certificate serial: 0194221FEDAE438986A07809374B64769A50
Authority key identifier: AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/GGsR3CTZp_ySYvfRDUPF91N6wRs.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200254
IP address blocks: 45.131.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ed:ae:43:89:86:a0:78:09:37:4b:64:76:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=186b11dc24d9a7fc9262f7d10d43c5f7537ac11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:d7:60:8d:49:17:86:3c:8b:ea:26:e3:64:
54:ee:8a:38:83:9c:76:85:dc:21:bc:1c:9f:23:90:
82:97:f4:86:05:01:f8:1f:91:b0:88:5b:c9:56:9c:
51:fe:45:cb:1f:92:95:6d:1c:38:57:ce:48:dd:75:
72:46:eb:45:91:78:c9:d9:29:a8:12:69:54:10:8c:
f6:ad:a1:e6:27:99:00:83:72:38:b8:52:3a:6e:8d:
d8:0f:17:48:f6:13:28:73:f4:95:9b:44:74:88:a0:
5a:b3:5e:fe:4e:7a:6c:43:40:22:39:34:24:b6:ac:
e7:4e:09:27:37:a9:1b:26:a5:00:60:9c:1e:fd:ef:
31:e2:f4:78:c2:d1:8f:88:f3:a3:6f:53:2a:16:06:
a8:0a:21:fd:52:3d:05:f2:b0:e1:cc:97:1c:39:a4:
b9:19:85:0f:40:de:ff:72:49:f4:a6:3f:de:75:2c:
2b:49:67:87:03:17:7e:41:57:55:93:38:73:a2:da:
5f:d7:41:4b:17:21:68:3b:a3:a1:36:13:f2:4f:fc:
17:cf:4a:87:2d:a3:6c:ef:7f:b8:a1:eb:ef:2b:31:
3d:a6:c8:25:fa:e4:93:8b:40:e3:f8:ad:4b:ee:6d:
68:77:cb:e1:e4:c3:97:2f:d7:2f:79:e8:81:79:18:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:11:DC:24:D9:A7:FC:92:62:F7:D1:0D:43:C5:F7:53:7A:C1:1B
X509v3 Authority Key Identifier:
keyid:AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/GGsR3CTZp_ySYvfRDUPF91N6wRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:6f:ba:35:08:df:fc:dc:32:a9:69:a9:8c:65:87:ce:be:c9:
df:3e:ec:84:5c:d7:4b:30:06:e5:a2:fc:bd:35:cf:b7:0a:86:
0c:64:97:05:be:b0:7e:70:e5:24:11:a6:d4:41:d3:1b:ca:fc:
69:41:9f:aa:db:ff:04:b8:8e:ca:27:c2:8b:5e:17:be:3d:62:
b6:fd:f1:b8:bf:48:58:f8:37:0c:18:0e:8b:c3:33:8c:41:2b:
78:36:c1:9d:8c:f7:4b:fd:7d:fa:83:b2:92:14:13:fc:6a:5f:
ea:7e:32:72:e7:e6:26:73:73:c3:a7:d7:2e:36:01:e4:b3:28:
b8:9c:92:66:37:6a:bb:08:32:a5:79:8d:25:58:b6:8e:30:84:
2b:9b:b3:91:9b:d0:89:d7:51:4b:e2:94:6e:cc:a6:ff:94:b2:
dd:72:90:95:cc:3f:42:14:5b:d5:c4:5f:52:10:8c:63:52:22:
d1:21:8b:ab:71:ac:f5:13:21:12:47:68:35:36:f2:99:77:61:
dd:19:d5:09:b3:78:e9:f6:fa:bb:af:26:6b:08:de:7e:6f:9a:
d1:8f:37:10:32:d8:b0:9b:68:b6:40:6e:46:45:58:8c:a9:76:
1f:0a:e6:e7:4c:7a:5b:37:70:02:5f:47:a7:91:f9:41:15:27:
1a:46:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:48 2025 by rpki-client