Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/GKu-p3Q8C03WVkqTxeqIm4KQHug.roa
File: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (raw, json)
Hash identifier: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=
Subject key identifier: 18:AB:BE:A7:74:3C:0B:4D:D6:56:4A:93:C5:EA:88:9B:82:90:1E:E8
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 019420682A7DE5D1F08BB6544C42F308C6F1
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/GKu-p3Q8C03WVkqTxeqIm4KQHug.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199058
IP address blocks: 45.158.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2a:7d:e5:d1:f0:8b:b6:54:4c:42:f3:08:c6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18abbea7743c0b4dd6564a93c5ea889b82901ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:7e:87:81:4c:c7:07:8a:23:57:4e:60:2b:
8a:24:c9:72:2e:3c:37:04:f4:a0:df:30:76:d3:a0:
bf:6b:0f:49:e7:0e:d0:6e:49:10:23:7c:ec:2f:ab:
0d:88:3a:b0:86:5f:ce:0b:15:d8:22:53:63:31:89:
ed:fa:b0:d9:d2:92:41:e3:ae:c3:58:44:58:ae:a3:
37:61:df:88:26:3b:f6:ea:cc:63:ae:36:10:0d:83:
00:65:c7:d7:9d:46:6e:8c:ed:b0:c4:a3:97:d8:3c:
95:a0:ec:0f:bf:68:d9:39:0d:41:51:13:21:e4:c7:
37:7a:61:3a:67:e2:02:40:83:65:66:9a:a2:f7:f8:
18:a9:ac:e1:ed:d4:06:c8:af:80:52:06:23:71:a2:
88:ea:87:e4:b6:31:ee:12:55:a7:95:18:62:2c:77:
92:c0:37:a7:fa:80:81:a0:4a:30:8e:b4:95:6b:e0:
62:46:ca:dc:22:e4:10:a2:00:8d:ed:fa:f9:73:42:
73:4e:14:77:c5:ae:c1:ae:6e:64:5f:e2:f5:a5:e0:
19:dc:e5:95:49:08:71:58:23:cc:59:37:d0:f7:24:
15:85:55:d7:31:c2:65:c3:b7:f5:94:79:81:c0:c0:
ae:4a:ab:10:8c:47:82:7d:65:a9:b9:73:3b:bc:7a:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AB:BE:A7:74:3C:0B:4D:D6:56:4A:93:C5:EA:88:9B:82:90:1E:E8
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/GKu-p3Q8C03WVkqTxeqIm4KQHug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.127.0/24
Signature Algorithm: sha256WithRSAEncryption
61:89:0c:40:80:63:bc:90:72:f5:0c:27:70:b4:9b:b3:64:74:
d1:1d:80:2b:3e:88:f3:b4:2c:50:8c:b2:d2:75:68:c5:b7:cf:
ed:40:30:40:64:d0:89:f0:e8:e6:c1:de:cf:90:21:06:3b:8e:
45:e8:06:15:9c:d8:28:8f:2c:a2:44:96:f8:72:a2:29:a5:a4:
a3:05:6b:50:a3:5e:9b:59:c0:f3:5d:8c:13:4e:e9:fc:34:c6:
77:d1:21:fd:27:11:11:79:4a:4c:80:cb:a6:fc:f7:23:4d:59:
3b:ed:0e:ae:41:2d:b7:46:e6:ce:e4:f6:75:45:01:9e:05:28:
ed:93:32:18:16:f5:56:61:c5:9e:71:3a:a6:91:3f:bb:87:d2:
b9:5a:96:63:ad:9d:98:1d:c1:24:89:71:d1:f9:cb:79:8c:4a:
c8:b5:e1:d0:f1:3b:12:6e:94:12:46:43:62:76:0d:60:c8:b0:
82:03:05:5a:58:d0:e7:a1:e6:73:12:58:7d:33:d5:6c:f5:b4:
0f:ae:65:55:b4:c7:b2:62:6c:af:19:2c:83:ff:0c:bb:07:34:
73:d6:ac:54:77:d2:6c:05:a1:62:60:2b:4c:5e:fd:8a:ea:44:
90:61:f8:87:d2:86:ec:3f:92:64:7a:2c:90:a0:36:8d:c5:31:
81:70:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:18 2025 by rpki-client