Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GxlDQiNeRlshf53miAx19J4RPC0.roa
File: GxlDQiNeRlshf53miAx19J4RPC0.roa (raw, json)
Hash identifier: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=
Subject key identifier: 1B:19:43:42:23:5E:46:5B:21:7F:9D:E6:88:0C:75:F4:9E:11:3C:2D
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC7E680B4E01715A3E83161BD9865
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GxlDQiNeRlshf53miAx19J4RPC0.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141039
IP address blocks: 45.82.33.0/24 maxlen: 24
185.65.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c7:e6:80:b4:e0:17:15:a3:e8:31:61:bd:98:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b194342235e465b217f9de6880c75f49e113c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:70:a2:f0:46:62:ff:a2:43:8a:8d:60:82:
a6:51:e6:fd:75:cf:fb:5c:7b:e7:b7:bb:23:94:c2:
a2:17:20:ff:1c:3a:c7:f5:a4:0a:a7:99:e5:23:17:
c4:4b:ba:d2:c7:49:aa:fd:09:e7:ab:62:72:d3:60:
fe:16:3f:64:b5:cf:52:e4:78:86:ed:a9:4b:b1:ed:
49:a2:b9:46:9d:e0:b3:27:e5:ed:e3:1c:62:2f:36:
83:55:74:53:11:d0:16:2e:77:c9:12:f8:5e:38:78:
82:d4:73:8f:91:11:7a:14:1a:43:f6:bf:97:0f:2a:
fb:af:b4:89:91:e5:9d:12:b6:f0:69:1a:13:00:93:
7e:88:22:57:cb:26:c7:fd:f4:0c:4f:96:c4:41:45:
37:48:79:21:59:5a:39:05:1b:f4:8a:a1:9d:d3:aa:
94:46:1f:dc:f7:c1:7c:1b:41:b2:c4:aa:6e:9b:91:
41:d8:da:eb:8e:8c:de:1a:25:b7:b1:da:5a:b9:6b:
21:57:72:72:2e:06:a9:fa:51:e8:db:e1:6c:a7:58:
f3:3f:8c:60:15:b6:6f:fd:f4:77:ff:f9:f9:24:12:
4f:98:2c:0e:23:8c:36:9a:7e:f8:64:e0:2d:71:e7:
df:ce:90:6b:7c:33:00:94:c0:84:70:6d:f7:92:f8:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:19:43:42:23:5E:46:5B:21:7F:9D:E6:88:0C:75:F4:9E:11:3C:2D
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GxlDQiNeRlshf53miAx19J4RPC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.33.0/24
185.65.50.0/24
Signature Algorithm: sha256WithRSAEncryption
83:08:5a:10:4e:47:96:29:b7:69:91:b7:2f:b1:ca:11:40:93:
b2:fc:23:80:c3:19:f0:80:57:c3:ad:f7:c9:4d:65:91:0f:df:
e4:79:a2:8c:7f:44:c7:b1:ec:ba:5d:0f:d5:0a:84:40:26:01:
d3:2c:7f:3c:10:4b:e4:a5:71:57:06:bb:95:9d:be:12:87:70:
91:2f:70:6d:20:b8:5a:0b:d3:1f:cf:92:c5:2a:36:6f:be:75:
2b:2b:a6:28:05:e9:e3:85:f1:ec:38:2b:c7:64:18:fd:33:34:
1a:76:37:d7:15:13:cb:9e:b0:44:13:0b:73:c1:b3:4d:73:cd:
b5:32:0b:8f:0d:78:90:f1:01:45:5c:87:a5:87:52:f7:96:68:
f5:73:1a:f8:64:e5:2c:2f:39:37:7d:c8:43:38:77:c1:21:22:
7f:bc:9c:07:f4:66:2f:79:a0:71:7c:6e:c3:c1:08:10:cc:1a:
d7:1d:5d:de:e6:32:8b:85:fa:76:32:f1:4b:87:7f:06:d1:66:
3e:aa:93:07:99:8f:d5:a6:e4:28:85:32:95:b3:05:e1:45:20:
b4:e6:4f:f7:4c:72:0c:60:0a:ae:5b:09:20:62:d0:61:12:76:
66:4b:f1:ff:e3:80:89:0d:a7:15:f8:76:3b:d8:30:ac:9a:5e:
f1:5c:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:58 2025 by rpki-client