Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/gjjNG2AUNgoUUT8zwJCb0qV39gA.roa
File: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (raw, json)
Hash identifier: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=
Subject key identifier: 82:38:CD:1B:60:14:36:0A:14:51:3F:33:C0:90:9B:D2:A5:77:F6:00
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01942067EF08640960C1BFA1AC45CFD7E4FE
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/gjjNG2AUNgoUUT8zwJCb0qV39gA.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42675
IP address blocks: 45.15.16.0/24 maxlen: 24
2a0e:1c80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ef:08:64:09:60:c1:bf:a1:ac:45:cf:d7:e4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8238cd1b6014360a14513f33c0909bd2a577f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:3f:9c:d1:1c:46:9b:df:f5:a0:e0:ed:c5:
39:c8:e4:26:93:4f:4f:18:65:88:25:18:ad:87:7b:
93:d1:78:50:9e:9e:7a:ee:c3:85:97:8c:c0:f2:17:
4c:ac:e8:4a:f1:ac:08:56:f3:2c:47:ad:dc:f0:56:
7e:1f:0d:3b:07:74:96:b4:f3:d6:66:e2:27:17:d2:
e3:6f:79:39:7a:a7:b6:5c:e0:ad:f9:d4:4d:9e:71:
2a:b3:21:de:de:36:19:4b:04:5f:71:d6:2e:b8:28:
9b:7d:3c:bd:1a:3f:cc:5c:d3:76:ec:18:eb:53:c2:
49:3a:7e:f2:49:e8:72:80:07:a9:0e:39:c8:2f:e5:
d2:c9:1b:cb:ff:6d:77:87:fb:40:60:5e:34:9c:88:
b4:15:e4:7d:a9:5c:55:57:33:86:d5:de:b8:7d:30:
cc:74:db:fd:6d:e2:55:38:88:05:ca:ff:f8:84:35:
f6:91:51:c8:b3:9c:30:a7:38:a6:b0:eb:18:39:e0:
59:9e:f8:db:ae:67:4a:eb:27:23:99:5b:b9:8c:a4:
dd:ea:f3:ca:85:cf:af:20:40:5e:b5:0e:2b:23:16:
60:55:90:72:a4:d3:96:f8:fb:74:1c:9c:bf:da:e2:
c1:0b:ec:50:a6:17:0c:5f:0b:18:6f:6e:4b:97:28:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:CD:1B:60:14:36:0A:14:51:3F:33:C0:90:9B:D2:A5:77:F6:00
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/gjjNG2AUNgoUUT8zwJCb0qV39gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/24
IPv6:
2a0e:1c80:1::/48
Signature Algorithm: sha256WithRSAEncryption
7b:d7:06:68:2d:3f:8e:7d:1b:b9:29:39:d6:06:a1:d8:45:9b:
1b:63:68:c4:38:4f:a6:f9:e4:12:16:b5:0e:5b:26:84:49:53:
25:ce:5f:bb:d0:6f:1c:03:3f:c3:a4:ad:95:d4:f5:67:a7:b4:
6d:b8:b0:4d:99:42:0e:fb:75:a1:7d:25:ce:a4:d9:b2:bb:81:
20:f6:c2:2b:fd:08:1a:2b:21:22:9f:cc:a6:a4:79:ee:dd:64:
1d:91:a0:c2:e2:6b:d4:f4:b0:83:8f:b0:2c:2a:33:35:93:be:
ee:95:f8:20:ae:e6:38:fa:07:91:4e:48:9b:1c:aa:31:7f:a9:
54:29:a0:f1:eb:13:7d:6d:a7:8f:68:4d:70:94:2b:e2:8b:52:
bd:90:ae:9e:fb:d6:6e:89:42:de:4f:ba:34:ce:1d:12:92:b9:
7e:6b:03:df:2e:b8:9b:16:3a:a7:3f:08:ae:e6:c0:12:6c:ed:
7a:26:47:f8:4c:c7:c6:ed:b1:c7:2a:6d:6c:95:ec:2b:07:99:
21:4c:03:53:e0:07:23:95:37:ea:26:b0:0a:44:b7:0b:ef:b2:
39:85:17:50:0e:23:df:0e:6c:df:b1:9e:96:3e:3c:93:95:bf:
c4:07:94:ac:82:52:38:3c:6d:a9:24:d1:b7:da:95:7f:e8:46:
87:ab:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:57:57 2025 by rpki-client