Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa
File: GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa (raw, json)
Hash identifier: NOyHUSRyn/zm35BU84aYQfd0YAX7k067uz4v2RofCv8=
Subject key identifier: 1A:48:98:50:AD:23:DA:7C:71:6D:63:2A:87:19:E1:76:AF:F4:12:77
Certificate issuer: /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial: 01942143E185A818D5E9981D512C33324033
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57801
IP address blocks: 91.212.112.0/24 maxlen: 24
194.0.45.0/24 maxlen: 24
2001:678:70::/48 maxlen: 48
2001:678:90::/48 maxlen: 48
2001:678:9c::/48 maxlen: 48
2001:67c:26d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e1:85:a8:18:d5:e9:98:1d:51:2c:33:32:40:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a489850ad23da7c716d632a8719e176aff41277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:33:f5:13:7d:c0:61:28:16:95:cd:e2:a3:
31:92:80:e7:1b:f0:3f:5b:ad:7d:ba:ef:45:d0:c7:
55:a6:11:e4:7a:44:61:c7:64:71:21:45:1b:2f:5f:
a4:57:f1:dd:12:c8:1c:92:ec:d4:1a:07:5f:20:cf:
c1:a2:09:49:cc:49:f9:3b:0e:5c:02:20:8b:05:d5:
f9:8a:65:1b:85:c6:75:b7:7e:09:b9:25:43:ea:03:
bd:9a:2d:be:cf:58:4b:08:60:2f:25:bd:6b:17:f1:
88:41:e4:61:00:51:de:02:14:a4:7e:d7:cc:23:8b:
60:ca:fd:e5:7f:90:a0:38:c1:b1:c5:2c:da:b3:1b:
19:6f:4a:a2:2a:5c:17:78:9f:db:f1:a4:ca:1c:de:
95:7a:97:d0:76:44:20:28:58:ba:56:4b:3d:ca:6b:
45:4b:fd:c3:58:de:ff:85:92:0a:6a:db:0d:16:db:
db:dc:c1:96:f0:5c:9d:96:fd:a9:52:c7:cd:ff:52:
f4:5c:b7:5e:3c:82:3b:00:89:4b:2e:61:ff:32:8d:
e8:d4:36:e8:21:3e:ab:3d:98:33:42:e0:4a:bd:1b:
e6:ae:f6:04:4f:2a:91:8e:ef:a4:99:0e:0b:38:0c:
1c:77:50:c7:10:94:8a:13:5b:84:08:ec:04:3e:ae:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:98:50:AD:23:DA:7C:71:6D:63:2A:87:19:E1:76:AF:F4:12:77
X509v3 Authority Key Identifier:
keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.112.0/24
194.0.45.0/24
IPv6:
2001:678:70::/48
2001:678:90::/48
2001:678:9c::/48
2001:67c:26d4::/48
Signature Algorithm: sha256WithRSAEncryption
36:88:e7:8b:db:51:2e:c4:48:c2:84:21:1c:a5:bf:91:9c:0c:
74:1f:2a:54:88:10:1d:cf:4c:16:78:23:8a:da:cd:74:93:af:
39:a0:11:d1:e2:50:55:87:12:c8:45:eb:28:7b:fa:35:e3:55:
6d:b2:e8:92:71:a0:91:6c:34:92:29:0a:a0:63:32:52:d0:58:
25:81:33:8f:49:83:76:6d:ec:46:4d:be:6a:4c:7e:ae:e3:ff:
c1:c3:bb:9e:be:28:a9:8b:7d:68:a0:b3:46:82:4f:4a:11:a8:
e7:34:16:0a:1a:ed:9a:03:9c:18:aa:39:5f:5d:37:6a:46:95:
8d:33:c7:eb:98:a0:a8:4f:b0:3c:83:23:3a:c2:cc:54:c9:8d:
cb:a3:3a:fc:c0:7e:74:01:18:1f:91:a7:ad:31:73:af:8a:71:
a9:69:d4:f8:3f:19:32:a2:65:05:80:ed:47:48:91:a8:b5:f2:
65:7a:c7:23:50:9f:87:0b:df:4b:16:e7:13:24:ce:32:90:09:
a0:b0:7f:ad:bc:c3:a8:80:8e:01:c5:ba:23:62:03:3a:1d:10:
75:22:a5:d0:d3:fe:ba:cc:e7:aa:70:f3:b4:7c:94:16:73:67:
e1:21:c3:12:bb:43:ab:bd:de:6d:ea:ed:69:c5:27:89:aa:fb:
ab:fa:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:40 2025 by rpki-client