Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/GLrf-4476lN-mWAGatfWehKzDpo.roa
File: GLrf-4476lN-mWAGatfWehKzDpo.roa (raw, json)
Hash identifier: UBhmVRo+40lzdmL/jOTwvI0uo4yogaRRq+nqy+WHQ4s=
Subject key identifier: 18:BA:DF:FB:8E:3B:EA:53:7E:99:60:06:6A:D7:D6:7A:12:B3:0E:9A
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 01942143F7D1520963C546AB9F47E291D9A4
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/GLrf-4476lN-mWAGatfWehKzDpo.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212638
IP address blocks: 185.214.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f7:d1:52:09:63:c5:46:ab:9f:47:e2:91:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18badffb8e3bea537e9960066ad7d67a12b30e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6f:fb:e7:19:9b:26:89:c2:d6:dc:de:fa:fb:
6a:2b:cf:61:7c:14:fb:bf:9c:f8:fc:fa:0e:45:03:
c9:78:49:3a:6b:c6:41:2a:77:9a:9e:17:80:11:f2:
c7:bb:36:7a:f0:e6:74:28:d8:b7:61:e6:21:97:87:
ae:45:b8:31:99:c2:3b:1e:6f:77:21:20:00:69:00:
06:e2:ae:b9:26:bb:7e:0d:0e:be:29:01:7a:23:df:
ac:8c:2b:cd:8f:d0:79:38:fe:be:30:02:89:43:59:
b8:64:a4:05:db:39:55:a0:a0:d2:81:67:1a:16:55:
34:3b:4b:1f:69:e3:9f:2c:8b:e1:d8:d0:15:33:11:
ea:82:19:74:af:21:65:a0:1d:94:e1:df:90:a2:63:
4e:2d:83:7b:3d:a2:c8:66:32:e6:9a:81:29:3d:8b:
0d:ee:01:82:fb:85:22:4f:53:81:f7:a1:95:38:49:
c5:85:62:24:69:02:5b:0d:3b:1e:5b:aa:62:c5:ab:
91:78:fb:c6:0a:c6:43:7f:66:19:ca:b2:79:9a:68:
b5:4f:c1:51:6d:4f:9a:5c:b9:a2:71:29:1d:54:e2:
21:6f:26:1f:24:ed:7b:1a:54:ec:00:49:03:17:79:
99:53:52:8c:54:ef:c3:0e:09:73:55:8e:53:7a:80:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:DF:FB:8E:3B:EA:53:7E:99:60:06:6A:D7:D6:7A:12:B3:0E:9A
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/GLrf-4476lN-mWAGatfWehKzDpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.43.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7e:ce:58:fb:50:e4:a4:e5:b8:f9:36:1d:6b:1c:0e:33:0a:
fc:35:71:87:75:93:72:a6:36:f3:af:e8:3f:05:b6:0e:e6:80:
f9:7b:18:a3:9e:6c:82:92:cc:c5:e8:46:24:a2:e4:58:ee:25:
7b:2c:28:61:8f:9c:c7:85:71:7e:c9:18:27:1b:6f:61:7e:07:
89:02:f3:0b:4b:13:88:5f:55:82:b6:c6:57:06:63:0e:13:90:
ff:81:3d:c9:de:27:cf:13:df:61:31:2c:61:35:4d:da:2b:ad:
2b:ee:2c:09:e0:58:5f:f3:46:e6:13:1c:d6:bb:da:19:ea:b2:
bc:90:cd:9f:58:e4:4b:95:00:43:0f:6f:43:43:7b:7d:8d:9e:
97:bf:75:06:3e:87:7b:7d:ed:8f:33:bb:a5:80:9c:4a:59:6b:
53:8f:84:3f:ed:b7:a1:2c:77:35:b4:e5:80:19:a0:1c:43:e8:
e6:c9:27:7d:af:f0:7a:b8:4c:f2:fb:ff:bb:3e:1e:8f:be:6a:
00:73:c6:9c:e4:82:28:bb:b1:11:68:04:c6:22:75:58:1e:a9:
f1:d0:eb:2e:29:11:56:d1:bf:a7:c5:81:12:7a:8c:da:b8:a9:
cc:07:c4:36:e0:67:25:9c:56:4a:13:bd:b9:55:8d:c9:d4:c2:
ef:e7:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:07 2025 by rpki-client