Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa
File: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (raw, json)
Hash identifier: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=
Subject key identifier: 81:AD:15:3D:6D:6C:DD:74:87:A6:01:28:85:C2:CD:C4:DE:C9:FE:84
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0195CD6085B68C45E7D3CCCC000DE1A2B83A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa
Signing time: Tue 25 Mar 2025 12:56:49 +0000
ROA not before: Tue 25 Mar 2025 12:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211352
IP address blocks: 217.147.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:60:85:b6:8c:45:e7:d3:cc:cc:00:0d:e1:a2:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 25 12:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ad153d6d6cdd7487a6012885c2cdc4dec9fe84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:be:d9:9a:db:60:7a:42:d8:aa:77:79:64:
ea:56:1b:e8:7f:6e:bb:e1:ac:0a:a2:e8:7d:44:0a:
8a:94:58:2a:bb:ba:ff:17:95:5c:19:c5:22:5a:5f:
de:f8:ca:e5:fc:82:f2:7e:bb:d2:55:32:ee:7c:6d:
7d:68:b5:02:4c:a3:32:76:ef:4f:fe:39:af:27:f7:
92:a4:34:81:e8:cb:16:2b:5f:f2:b9:71:98:5a:ee:
15:7c:67:c4:3d:3f:aa:c1:93:ed:79:e2:11:89:83:
fd:90:f3:d4:d9:d8:6b:0c:27:b9:12:26:e7:d4:6a:
3d:0f:5d:0b:c3:bc:ef:49:ef:d1:7c:0b:5e:f7:85:
be:57:be:f8:b9:7d:07:a8:19:fc:0a:0a:93:56:61:
d2:e0:0c:72:dc:45:1c:06:48:74:9d:0b:04:32:2f:
dd:71:03:c8:2f:d4:58:30:90:2b:49:ca:61:46:1d:
c6:32:bf:3e:16:0d:69:86:dc:df:d2:96:93:eb:5e:
56:03:16:09:20:0b:0a:7e:77:7b:ef:64:db:e4:13:
e4:10:e6:f7:cb:54:c0:ca:59:b4:e6:a2:77:33:89:
0e:c1:1a:5e:63:b7:8b:70:dd:2c:28:b6:b8:f2:a0:
6a:6c:19:1d:d9:82:9c:fa:27:26:51:c1:39:db:f5:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:15:3D:6D:6C:DD:74:87:A6:01:28:85:C2:CD:C4:DE:C9:FE:84
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:81:ae:d4:67:69:d9:f1:cf:19:f1:fd:b3:91:2e:c2:12:5a:
d8:2a:e2:90:d8:73:f0:a6:01:72:a5:c5:25:99:7a:be:a7:7d:
9b:11:0b:c7:72:c1:91:8a:91:f2:9e:ac:69:e5:9e:70:0a:63:
d9:87:6e:f2:44:6d:74:ea:bd:21:12:83:ed:90:93:f3:9a:7a:
59:b7:a2:84:f3:3e:76:c1:cd:c5:bb:f5:04:57:86:67:26:b3:
bc:d2:1b:21:a4:5d:a7:9e:5d:11:8f:e7:7e:05:c8:ad:e1:45:
ca:2b:b3:7d:52:eb:84:1e:37:a8:b7:a6:56:c2:53:6a:b0:7d:
82:ca:5d:05:08:75:bd:e8:06:57:a3:b2:83:3e:d7:04:d1:7d:
2c:52:e5:9d:0a:5c:55:68:2e:d9:53:5f:bf:5e:cf:a9:b7:fa:
45:44:ea:92:ad:58:fd:bc:f3:a4:c5:24:fa:e9:3c:93:4b:75:
b7:7c:6f:79:a7:04:92:98:94:69:7c:af:bf:49:e6:ec:a7:14:
35:44:82:b9:24:a5:f6:11:23:da:6b:1a:b9:9c:be:ba:12:2b:
14:9a:3b:49:a0:e8:6b:2c:89:18:4e:b1:dd:78:1f:9d:35:a6:
79:8d:de:b8:3a:36:0c:ab:6e:58:a8:6b:d7:1e:9b:2d:d0:3b:
69:4b:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:36:10 2025 by rpki-client