Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GCwFLO244jAPQTiSwvH_7wP3JXI.roa
File: GCwFLO244jAPQTiSwvH_7wP3JXI.roa (raw, json)
Hash identifier: of2bbZQOee5l+E9xaZU82wWlVsmugWg1CGTNtobMZLU=
Subject key identifier: 18:2C:05:2C:ED:B8:E2:30:0F:41:38:92:C2:F1:FF:EF:03:F7:25:72
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F02F75BD3C65C4E6AAAD7A5B4ECDC
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GCwFLO244jAPQTiSwvH_7wP3JXI.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64464
IP address blocks: 185.72.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:02:f7:5b:d3:c6:5c:4e:6a:aa:d7:a5:b4:ec:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=182c052cedb8e2300f413892c2f1ffef03f72572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:f8:b7:47:97:d4:35:6d:ec:40:77:c0:c7:
68:14:b8:52:b8:ff:53:f5:a0:1d:69:af:46:23:a4:
c8:e1:da:4b:1d:db:d4:bc:c6:2f:29:82:c7:93:5d:
04:fe:21:eb:00:60:28:1f:fa:8c:c1:ff:83:de:3b:
00:82:fe:3e:1e:97:80:a9:b7:3a:bb:ca:66:95:31:
24:fb:95:9f:80:3f:e5:fa:dd:6b:66:2e:dd:a1:4b:
f8:13:ad:83:de:c1:9d:00:48:9f:1d:fe:8e:84:1d:
c8:4d:dc:57:c0:5f:13:b2:f5:7f:d5:c2:8c:e6:09:
dd:d9:f3:71:b7:64:5e:4f:69:94:02:1c:20:34:f4:
19:1b:91:b0:83:56:bc:20:ea:e7:32:ba:65:18:6a:
ce:a4:3e:f4:fd:33:4c:e3:e3:16:77:db:25:7d:e7:
b2:d6:91:e2:f2:20:23:86:0d:82:05:a0:fa:2b:03:
19:e0:fc:a7:4a:83:eb:4a:d5:5d:06:aa:2e:cd:59:
2a:b1:fb:3d:95:3b:77:25:f9:dd:29:ce:2c:2c:a1:
4c:94:5a:81:36:79:9b:90:8a:75:05:cc:f4:77:f8:
05:8a:6f:a3:18:f1:05:ee:0d:d7:13:3a:d8:b8:56:
86:17:b9:e6:30:3f:0e:0e:89:ca:a9:99:cb:c7:3f:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:05:2C:ED:B8:E2:30:0F:41:38:92:C2:F1:FF:EF:03:F7:25:72
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GCwFLO244jAPQTiSwvH_7wP3JXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:78:c0:50:7e:c5:b4:7a:67:4d:ae:11:f8:60:c9:cd:7f:e8:
74:24:e8:f9:fd:dc:87:37:8d:09:3a:44:05:85:a3:83:f3:1c:
af:8d:1e:2e:25:15:ac:7a:2e:bc:48:25:08:4c:b1:7a:e9:c1:
8d:d8:2d:c1:e2:69:85:b8:ab:ff:64:b0:6f:0d:9f:62:bc:d3:
0b:2a:d6:d8:0d:7c:f2:11:c5:ef:e0:d3:d9:2a:ed:e9:2a:4f:
fe:e3:9e:bf:69:36:15:a8:50:aa:71:5a:0c:8e:af:a8:35:df:
c7:4a:0a:d3:94:bd:fb:bc:53:e2:01:be:73:b3:f4:a2:74:cd:
0f:e6:3b:b5:2f:05:1f:a8:70:99:87:92:38:6f:21:97:62:db:
c2:a2:d2:b2:6b:d5:80:87:e3:7f:0b:20:af:36:e7:bf:54:60:
1f:4a:b3:b1:0b:42:5d:8f:e8:bc:56:6f:5a:50:07:f2:74:73:
f5:03:17:69:0a:a3:1d:fa:58:f2:a5:bd:a4:75:a7:12:20:9d:
ff:33:50:09:72:22:14:71:db:7f:2b:bf:fc:53:8d:e9:a6:0d:
5e:1e:1f:8f:72:91:bd:6f:d7:1d:68:ea:fa:99:b5:fb:99:37:
1f:c2:50:f7:90:21:94:7b:cb:5c:d5:b2:71:c1:0a:87:0b:ae:
a5:dd:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:56 2025 by rpki-client