Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GYDa6uF4PXtvgFCZif9U8DfyJhs.roa
File: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (raw, json)
Hash identifier: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=
Subject key identifier: 19:80:DA:EA:E1:78:3D:7B:6F:80:50:99:89:FF:54:F0:37:F2:26:1B
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194221FFCD61DD83F5626D0F6C40E09C2AB
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GYDa6uF4PXtvgFCZif9U8DfyJhs.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 45.131.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fc:d6:1d:d8:3f:56:26:d0:f6:c4:0e:09:c2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1980daeae1783d7b6f80509989ff54f037f2261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:1f:9c:a3:c0:6b:2b:0d:ed:7f:89:f1:9c:
f8:4a:fe:8c:0e:7e:2a:72:e3:82:d0:4e:38:63:8d:
4c:ea:a3:96:48:f8:f7:bf:af:e8:07:f7:48:c9:a6:
9b:dd:a0:53:9a:62:aa:ff:8e:d9:84:b3:ac:1a:05:
61:34:9d:fb:73:6d:85:5e:22:c6:6e:33:2e:d1:d4:
84:5d:4a:47:27:e9:d3:43:87:0a:15:a1:32:80:79:
73:43:28:50:7c:fd:2e:a4:d9:06:bc:fa:d3:16:60:
7f:97:f0:7b:fb:6c:26:50:ce:d1:95:82:3d:23:7f:
90:0e:84:91:17:59:00:7b:8a:2d:aa:7e:f2:58:4a:
3f:af:14:62:ee:a1:2b:f5:44:b2:ab:03:72:f1:77:
1f:9b:b7:d4:2f:ef:06:b9:bb:9c:a1:be:cb:70:3b:
2f:a8:96:61:ad:ae:ef:0a:4a:78:f8:89:af:d6:61:
8f:b3:fe:fd:cb:15:6b:2d:90:80:53:15:91:a9:8d:
f3:eb:bc:37:c7:41:fa:fa:25:3e:72:94:c1:ed:5d:
68:d7:d3:30:eb:65:46:6a:0e:d4:c9:5c:e5:90:83:
da:9b:6d:41:c1:36:42:de:58:f2:51:09:42:ba:2e:
2e:f9:26:8c:63:27:a0:e3:f9:a0:8e:2d:78:26:7b:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:80:DA:EA:E1:78:3D:7B:6F:80:50:99:89:FF:54:F0:37:F2:26:1B
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GYDa6uF4PXtvgFCZif9U8DfyJhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1d:3f:19:9e:2b:66:bc:c4:07:92:04:4e:aa:df:5f:fa:2d:
28:94:cf:1e:42:a6:71:76:9a:7d:dc:a4:3a:5b:86:7b:66:50:
dd:c8:d8:78:dc:cf:da:3b:3a:22:80:bb:c8:08:e4:82:8e:00:
23:6e:52:fe:4e:80:d2:de:6d:d0:f0:8b:ea:36:aa:8d:0e:56:
c7:cb:90:65:da:22:9d:66:85:21:eb:d6:14:26:92:67:aa:1c:
8c:63:54:32:82:9f:45:44:4a:08:bb:73:1a:b9:4b:01:13:81:
40:0a:5c:d7:04:38:53:71:c2:32:29:e0:fa:90:a6:4a:7c:b1:
cf:89:87:e4:15:f4:a0:33:0a:3c:10:4f:87:6a:52:6e:ea:0d:
8c:89:20:29:92:8e:17:09:10:1f:80:68:db:92:69:cc:7f:e9:
4a:51:6e:b7:38:e3:0c:70:26:cd:a0:f1:9c:91:54:e4:97:be:
ce:fb:25:1a:15:2d:2e:49:be:dd:87:a8:8d:e0:e5:60:7b:6a:
89:fa:f6:71:9a:97:eb:96:78:99:f0:87:97:c4:a5:4e:9e:d3:
f8:47:94:ae:17:65:89:67:55:81:3a:f4:49:5e:ce:e6:2b:ed:
5f:e1:a4:90:6c:03:e5:78:e1:7e:ca:87:82:b2:2c:a5:65:bb:
c3:27:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:27 2025 by rpki-client