Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gczW35cqQlBADOQAWeSQ-bYxRMo.roa
File: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (raw, json)
Hash identifier: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=
Subject key identifier: 81:CC:D6:DF:97:2A:42:50:40:0C:E4:00:59:E4:90:F9:B6:31:44:CA
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5BB14735877D449E4CE295C59D2F0
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gczW35cqQlBADOQAWeSQ-bYxRMo.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216183
IP address blocks: 80.246.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bb:14:73:58:77:d4:49:e4:ce:29:5c:59:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ccd6df972a4250400ce40059e490f9b63144ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:b5:08:00:40:99:80:88:23:71:2a:65:d8:
95:59:68:bb:2e:6c:4f:69:ec:79:e2:b0:cd:ad:65:
e8:45:aa:f8:29:f9:88:90:f5:e4:1f:5c:f0:a9:0f:
e1:af:9d:9d:11:8d:be:b4:48:2a:05:00:32:bc:e4:
f1:aa:ac:8b:95:b1:0f:23:b5:a4:a7:3b:1c:a3:6d:
dd:b9:0b:df:6b:d0:c1:d4:c0:30:99:9e:9a:e0:27:
57:da:4a:5b:46:42:94:15:22:07:3c:4d:40:84:53:
9f:94:05:60:f1:ba:32:42:6a:ab:c4:f1:e6:e2:f6:
1e:29:cf:49:ac:f1:1e:86:9d:ce:fe:60:f1:d3:5a:
d8:ff:5e:8c:20:ab:17:66:64:89:7d:26:a7:a4:6a:
40:74:0b:8c:aa:2e:e0:73:0e:e7:51:30:c6:eb:a3:
3c:15:ce:1b:cd:2e:49:ec:a8:90:df:bd:03:8a:9f:
ee:e1:14:d4:b5:de:67:96:7d:29:a6:22:31:62:cd:
90:68:de:1f:05:f2:e2:02:8d:ce:01:5e:b5:46:c6:
b1:44:4b:2e:1c:b9:c1:ac:8f:80:ea:95:67:ba:00:
61:e0:f1:16:0b:fd:9f:f3:03:98:fe:7d:fe:66:c0:
47:c2:c1:61:8b:30:95:dd:1b:10:d3:e3:10:2d:50:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CC:D6:DF:97:2A:42:50:40:0C:E4:00:59:E4:90:F9:B6:31:44:CA
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gczW35cqQlBADOQAWeSQ-bYxRMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:59:c9:ad:d7:de:b8:14:00:33:bd:1f:a2:cf:39:cc:84:4a:
dd:e4:d7:98:26:09:2c:18:06:a3:41:08:6c:e9:1c:a8:b5:1f:
71:6c:75:f0:66:5b:d8:25:de:a6:78:59:1c:d4:54:64:3f:01:
35:5b:47:91:54:b4:11:c7:be:6a:04:34:22:aa:fa:47:1f:e9:
3d:ff:5e:33:65:ca:5d:e6:ea:e0:45:65:5c:62:e7:8d:8d:c7:
31:9c:8b:1b:90:3c:61:c6:98:43:91:d5:3a:b4:41:a5:6a:69:
41:36:a1:2d:a0:fd:b3:1d:4c:bc:ab:8b:60:bf:f3:73:e3:7c:
d0:33:d9:23:66:54:76:c6:4b:e6:84:bd:ff:53:7a:5f:6e:56:
14:70:44:c7:cd:4f:90:6b:1a:f2:6e:b4:5a:8d:bb:7c:02:49:
bb:69:a5:89:2f:b5:61:73:66:fd:45:a0:5c:4a:e7:c3:30:12:
d0:b4:8e:1a:17:d9:44:e6:c3:ee:47:e1:27:cf:aa:a4:18:76:
3b:72:f6:58:f4:af:28:96:7d:f5:01:cc:2e:7c:33:ab:87:98:
9e:b0:89:5b:40:42:b3:06:49:fb:44:6d:6a:98:b9:86:b1:65:
76:b1:6b:4e:0b:85:c7:4e:37:33:9e:33:22:88:13:db:87:8d:
9b:76:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:20 2025 by rpki-client