Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/GEAFSRO55yyL2hanen4IQZHuURY.roa
File: GEAFSRO55yyL2hanen4IQZHuURY.roa (raw, json)
Hash identifier: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=
Subject key identifier: 18:40:05:49:13:B9:E7:2C:8B:DA:16:A7:7A:7E:08:41:91:EE:51:16
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0194236A26F7D8400A444DBCCDF3C5B58F89
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/GEAFSRO55yyL2hanen4IQZHuURY.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 94.168.0.0/17 maxlen: 17
94.168.0.0/18 maxlen: 18
94.168.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:f7:d8:40:0a:44:4d:bc:cd:f3:c5:b5:8f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1840054913b9e72c8bda16a77a7e084191ee5116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:c1:d1:9b:98:12:af:4c:a6:a3:70:c5:a3:
02:46:06:07:fe:d6:7e:a3:50:46:e7:f3:a5:84:55:
b3:9b:17:9e:46:85:16:24:1d:22:67:2f:ec:d4:db:
c9:53:65:ff:c4:22:61:c6:d2:a7:74:fe:32:2e:d8:
95:27:48:48:0f:27:71:1d:96:6c:60:df:23:08:f9:
d2:6d:af:7d:27:62:e9:fc:99:96:38:04:d7:7f:3c:
d1:41:fe:29:35:3b:60:81:f0:31:0a:18:8a:a3:b2:
ce:d1:83:62:3b:6e:71:ef:74:52:09:7f:9f:f6:62:
ad:45:e7:44:5e:8f:8b:c1:ff:ad:1b:9b:72:fd:ab:
b1:e7:81:e3:aa:1f:32:5a:87:22:f7:a7:e9:81:fa:
85:26:e3:f4:75:ce:f8:7c:0b:eb:fa:d3:e0:fa:f5:
57:39:82:88:f6:a0:dc:ab:b1:b9:d4:0f:ad:9d:90:
35:c3:a1:ef:b3:9a:63:8a:66:ef:52:e4:6f:0e:cc:
6d:8a:03:6d:bb:bf:95:3f:28:35:b1:c8:c6:fa:73:
d9:65:04:d2:74:cf:03:69:8b:a4:0e:d9:7d:bd:b1:
ef:36:02:89:e1:05:da:ff:dd:01:24:ec:d9:a9:da:
de:a2:e5:8c:46:f0:41:e1:e6:da:c0:d8:20:08:c5:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:05:49:13:B9:E7:2C:8B:DA:16:A7:7A:7E:08:41:91:EE:51:16
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/GEAFSRO55yyL2hanen4IQZHuURY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.168.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6b:31:9e:c6:69:1a:b1:9c:01:4d:74:ad:45:d0:1b:2f:ed:a6:
5a:f4:56:06:dd:28:2a:3d:00:e6:93:37:0b:07:d8:c7:11:64:
a1:2c:6d:e6:cf:8e:2b:01:51:0a:06:b4:cd:1f:c0:3d:a8:67:
66:88:fa:8b:56:bf:7a:cf:f7:11:fb:00:82:14:a0:17:1f:f1:
93:25:f7:88:8f:83:fb:b8:14:2d:46:4b:ab:79:74:1d:e3:5f:
c8:6b:33:f8:4e:ac:5c:53:ea:37:42:38:74:c9:8e:4d:f1:f6:
a5:06:90:f0:5a:06:4b:88:bd:eb:40:20:2b:ca:7c:74:54:09:
d4:b1:89:4b:ce:98:7a:92:85:1c:6a:bb:8b:ba:09:9c:4b:a3:
6e:74:7a:1f:a0:5d:dc:63:78:f8:92:ba:d0:fc:5a:01:c3:1c:
20:32:e6:ca:3c:d3:c2:56:f0:e3:57:65:2b:8e:47:6a:07:16:
8c:8f:b4:c6:5f:b0:45:bb:4a:25:6d:1b:9a:ba:72:37:cf:83:
e8:6a:18:ff:44:d5:87:59:ca:ff:39:f0:af:97:8e:b5:03:80:
34:30:51:de:25:b0:94:44:bc:a5:11:e1:43:d0:92:c9:55:a0:
64:dd:03:dc:7a:68:e0:dd:43:fa:ae:c3:ed:62:3b:f7:e5:67:
66:bc:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:38 2025 by rpki-client