Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa
File: GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa (raw, json)
Hash identifier: BfdX5BDfo9Z5mEIhjqpFA0KNYyZ0ceyNKC3cFcLwZOU=
Subject key identifier: 19:5E:FE:92:D7:E5:52:BD:89:97:D0:6E:1B:85:BA:C8:83:96:4C:2D
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019428273D65EC189321771C2374864E5FA6
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa
Signing time: Thu 02 Jan 2025 17:54:07 +0000
ROA not before: Thu 02 Jan 2025 17:54:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11426
IP address blocks: 45.81.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3d:65:ec:18:93:21:77:1c:23:74:86:4e:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=195efe92d7e552bd8997d06e1b85bac883964c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:b1:12:fd:97:12:82:17:0c:69:9f:39:6a:
52:d4:7d:8e:77:46:09:0e:bf:78:74:8a:f3:1b:fc:
5b:3c:86:1c:11:b4:11:0b:e8:74:3c:60:b6:49:e6:
2f:1b:a2:10:2e:2a:3f:9b:b1:3e:7b:3f:14:f9:fa:
99:1f:38:99:35:2c:4f:07:e8:64:54:83:fe:c8:60:
65:0f:ee:63:26:2b:e8:8a:7d:93:19:f1:a3:9a:2a:
b1:9a:81:e2:80:52:8e:23:0d:56:4d:d4:0c:8e:8d:
8f:f4:3d:6d:b9:08:91:cc:32:4c:fa:65:50:55:98:
ab:c4:12:92:7f:75:21:83:14:23:0e:1d:28:0f:2b:
62:97:e1:01:a9:27:d1:e1:59:43:9f:54:07:86:43:
35:b6:ff:1d:a6:b5:26:38:a5:9f:21:af:59:d9:7a:
58:58:9d:25:35:19:8d:48:ee:32:88:d0:b5:5b:81:
60:c9:9d:b2:51:25:e0:70:b7:15:97:7e:e9:f5:54:
82:86:ba:aa:7c:49:38:21:03:16:f5:49:06:18:a9:
25:86:c8:c9:74:5a:1d:74:af:85:3e:29:df:91:a6:
b1:e4:14:bb:e9:90:92:09:12:5b:77:24:fc:5d:9d:
4d:80:57:3e:b9:bc:35:d5:d1:54:f1:83:bf:da:c3:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5E:FE:92:D7:E5:52:BD:89:97:D0:6E:1B:85:BA:C8:83:96:4C:2D
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.26.0/23
Signature Algorithm: sha256WithRSAEncryption
19:ac:19:89:2a:b9:36:39:2f:a8:cb:a9:3b:ac:ed:62:74:a9:
9c:51:c7:04:1e:c3:91:33:42:45:47:23:d1:2b:7a:b5:be:11:
44:2b:65:ee:f6:d6:90:99:07:33:aa:ab:c1:98:0f:41:e3:47:
92:fd:b4:3b:91:f6:3a:44:06:f7:cd:66:41:13:54:91:e5:bd:
38:71:e2:f2:c1:22:71:89:e3:d2:65:94:92:34:ee:af:c4:2d:
36:46:1a:51:59:65:31:b4:2f:24:39:e5:05:d2:16:a1:28:8b:
6d:cf:f2:d7:f8:e1:2d:90:1a:c3:17:69:09:de:9e:26:db:b3:
ec:6f:bb:43:5f:5b:ca:20:29:8a:8a:a4:cd:1e:dd:4d:c3:f6:
7c:7d:db:01:8b:77:ba:46:9f:10:c3:fe:d1:21:e7:5d:d2:84:
31:3a:bd:c2:93:24:62:cb:52:3b:f2:33:dd:48:07:2b:cb:76:
bf:5d:5f:fd:02:c9:cc:6b:38:27:aa:f2:2e:76:a3:2d:2b:f9:
10:29:af:ad:47:ea:91:f1:c0:61:d4:74:9c:59:b9:90:96:c1:
16:01:75:b8:40:95:65:0c:52:24:ec:8b:4e:f0:7d:20:3f:6b:
09:07:f7:89:5f:89:c8:ff:29:d4:de:80:df:60:fc:b0:7a:28:
50:90:d4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:22 2025 by rpki-client