Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/GmKN4KxqgbXlK5yC6foLwWm2cEw.roa
File: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (raw, json)
Hash identifier: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=
Subject key identifier: 1A:62:8D:E0:AC:6A:81:B5:E5:2B:9C:82:E9:FA:0B:C1:69:B6:70:4C
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC778E5D903308EB3194A932B57B4
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/GmKN4KxqgbXlK5yC6foLwWm2cEw.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41921
IP address blocks: 213.33.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c7:78:e5:d9:03:30:8e:b3:19:4a:93:2b:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a628de0ac6a81b5e52b9c82e9fa0bc169b6704c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:97:df:ec:a3:dd:a3:dc:ac:8d:45:0b:50:
d4:94:10:c3:b5:63:e5:95:e6:98:9a:27:4c:28:b3:
ff:cc:8d:3f:b4:8a:5c:c7:18:5a:0a:4a:47:8b:0e:
2c:ad:fe:b1:e0:be:89:54:23:74:a1:a1:ea:6a:10:
39:53:36:91:bb:e6:50:67:15:d0:b3:80:a0:c4:7b:
92:36:2c:fb:03:43:d5:9e:50:1b:52:49:02:8e:47:
07:80:06:28:ce:43:78:76:98:fd:94:8c:d1:90:ed:
b9:4a:fd:ae:b9:84:00:78:e5:23:d3:c1:30:bd:fd:
d5:5e:b8:b4:0f:5c:f0:5f:b9:fe:6b:bd:1a:6b:7a:
7e:5a:3a:36:04:59:1d:a8:ff:e7:a4:8c:a6:e3:b8:
93:9b:cd:27:d4:f5:71:9d:96:c0:76:41:6c:69:9c:
88:76:43:9a:7f:05:8d:d2:27:f0:f1:da:6f:5b:1d:
b5:c6:8f:1d:da:5e:4d:66:59:9c:c7:12:a9:2e:9a:
f0:bb:75:86:e2:d8:19:5c:97:de:7c:89:a7:ed:a8:
95:2c:6c:91:3a:7e:79:27:6b:69:38:1a:57:d3:f6:
5d:49:19:40:9b:84:ec:2d:06:f9:03:ae:74:e9:13:
a7:76:b4:58:dd:ef:4a:73:a2:72:c8:da:54:dd:2a:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:62:8D:E0:AC:6A:81:B5:E5:2B:9C:82:E9:FA:0B:C1:69:B6:70:4C
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/GmKN4KxqgbXlK5yC6foLwWm2cEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.33.116.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2e:99:85:04:7c:eb:4f:59:e0:2a:22:7e:e4:f9:50:99:d8:
c5:87:92:5f:38:ea:9a:77:07:b8:3a:c4:c7:27:8b:8f:85:c4:
34:fd:b8:51:ea:b9:8f:20:cc:cf:96:8f:d9:8e:d9:fa:e2:89:
19:cc:b5:c7:ea:df:c9:37:4f:4f:25:2d:ed:bd:a9:e4:fd:df:
3b:24:01:cf:67:4b:47:c8:b6:1e:6a:5f:8a:3f:f3:e7:98:90:
e3:c1:c6:f9:dc:9c:1a:8e:b5:de:4a:44:74:7f:2d:08:d7:dc:
a8:0c:53:8b:77:a8:c2:7e:1e:8f:19:99:a9:df:a5:67:e0:ff:
13:ec:1c:6a:70:48:78:9f:b8:3f:7e:8f:ba:2a:b9:bf:c2:cd:
e4:a6:6d:53:1c:6c:62:c2:2a:37:a4:8f:69:d7:d1:e1:c0:4b:
f6:58:06:98:13:5a:a2:10:45:f3:6c:cb:b2:16:f5:77:0f:ce:
56:d6:4f:ba:4d:8d:91:5e:e4:79:ac:aa:0c:1e:e6:8d:1e:de:
22:37:78:e0:8e:bd:2e:eb:a5:15:b2:6c:5a:06:87:09:9a:66:
e6:8f:9b:fd:70:5c:f7:a1:ef:14:bf:09:30:46:3f:df:88:9e:
75:3f:46:e3:92:58:bf:bd:bc:fd:17:dd:e1:ca:ab:59:4d:72:
be:94:cd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:46 2025 by rpki-client