Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ggsqbp05hSkj-lUgn2wLOMYutwo.roa
File: Ggsqbp05hSkj-lUgn2wLOMYutwo.roa (raw, json)
Hash identifier: IvS4WaFz9T1e+MRgZAbUqIYF1nEWMgTKGF0q5Px9n/g=
Subject key identifier: 1A:0B:2A:6E:9D:39:85:29:23:FA:55:20:9F:6C:0B:38:C6:2E:B7:0A
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 01941C30F8A84425727BA6D9A79458E680FA
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ggsqbp05hSkj-lUgn2wLOMYutwo.roa
Signing time: Tue 31 Dec 2024 10:09:18 +0000
ROA not before: Tue 31 Dec 2024 10:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60996
IP address blocks: 128.0.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:30:f8:a8:44:25:72:7b:a6:d9:a7:94:58:e6:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Dec 31 10:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a0b2a6e9d39852923fa55209f6c0b38c62eb70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:d9:5c:fc:5a:44:29:2d:09:07:17:5d:b8:
0b:71:08:ba:4d:fb:ac:83:21:06:26:05:d4:2d:be:
12:a7:46:8c:51:03:12:7b:91:d7:54:9d:d5:19:fd:
41:4d:5c:c4:30:ee:ac:9e:88:1e:fa:65:f2:7e:71:
90:95:c0:d2:2c:42:f6:35:d7:23:2d:1d:75:79:a3:
d5:c7:59:c5:a9:bb:65:24:65:e5:69:b1:c3:e9:56:
6a:7f:af:47:7b:9a:03:03:d2:59:d4:ca:cc:a4:d9:
87:4e:9b:91:c9:53:5c:6f:50:f4:8c:f3:d6:62:7c:
53:e8:bb:61:0d:e5:19:9b:d8:9e:f4:a3:28:b8:d7:
e3:6e:b8:1f:9e:96:c1:37:84:30:34:66:ab:3e:2b:
9c:75:ca:02:7c:99:05:68:1f:dc:00:25:84:67:06:
8f:93:00:c8:49:6b:3a:8d:cb:71:41:f7:3a:7f:77:
bb:d9:a7:10:84:86:29:1d:a7:14:03:76:bb:08:c8:
db:39:a1:12:61:94:63:fa:35:b7:45:03:94:e9:76:
73:86:19:2f:a1:54:17:0d:b7:47:05:35:42:aa:3b:
15:a2:ec:18:d3:81:f2:74:dc:8d:04:31:cb:80:60:
93:95:80:11:4a:78:8b:32:96:1e:e2:2c:57:4f:37:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:2A:6E:9D:39:85:29:23:FA:55:20:9F:6C:0B:38:C6:2E:B7:0A
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ggsqbp05hSkj-lUgn2wLOMYutwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:86:89:ba:3c:5f:ba:b3:26:1c:0b:6f:0f:97:3c:fd:25:28:
37:97:9e:ff:95:6d:25:50:a5:3e:62:af:65:15:3a:0d:6b:4c:
39:8b:0f:b4:eb:8e:d6:20:8b:7d:eb:22:c4:12:8b:d4:91:d2:
13:16:85:b9:17:0d:b4:22:0a:be:46:9a:4a:78:e2:75:b6:35:
45:37:51:0f:3c:ea:bc:79:2d:1e:d0:50:8e:89:56:4e:5d:6f:
14:cf:30:a8:3e:c6:32:2c:1e:6b:08:21:52:ae:be:eb:e8:1b:
13:06:0f:7f:03:a7:c6:5a:de:ce:f9:f8:04:d1:a9:8b:fe:00:
fa:b6:b3:82:58:4e:05:f4:91:75:bf:e7:82:d3:63:94:82:6b:
24:f8:d6:6b:c2:9f:d4:f5:88:c8:eb:2c:4f:14:ec:da:85:d0:
dd:9a:1e:b4:92:95:8c:f8:2e:74:26:4a:b7:19:f0:25:9f:9b:
28:6e:b2:4b:34:68:d1:cf:c8:43:1c:8a:ed:c8:f3:f6:37:42:
fe:d6:a8:c2:0e:03:18:40:7f:0d:c0:9e:e8:73:ac:84:ae:65:
bd:ed:c4:46:c2:5d:50:cd:f3:c8:0a:0e:48:35:05:3c:cf:0c:
91:50:ec:79:c2:4c:c3:3f:b4:ac:94:fc:34:13:91:58:7a:d2:
11:fb:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:23 2025 by rpki-client