Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/gdCbju7iq0jqbnL3F15jB2y6w9k.roa
File: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (raw, json)
Hash identifier: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=
Subject key identifier: 81:D0:9B:8E:EE:E2:AB:48:EA:6E:72:F7:17:5E:63:07:6C:BA:C3:D9
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 01941F8C5404C298FD3963791314C90233D7
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/gdCbju7iq0jqbnL3F15jB2y6w9k.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 194.77.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:54:04:c2:98:fd:39:63:79:13:14:c9:02:33:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81d09b8eeee2ab48ea6e72f7175e63076cbac3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:74:54:d2:37:19:bb:51:c0:ef:e3:30:e6:
77:40:a6:ad:2a:3b:2e:12:e5:d6:49:c4:97:c1:d6:
63:c3:39:89:53:2f:97:2c:9a:e1:91:bb:65:6f:74:
48:4a:aa:16:9e:fb:2f:b8:67:61:2b:98:73:e7:85:
75:85:24:e3:6a:b1:10:89:a1:66:0e:1c:67:a6:a5:
81:5b:f8:52:23:95:d6:51:33:69:67:1d:19:4d:98:
99:b3:26:50:d0:bd:65:71:9f:c1:c3:8c:6b:7b:0d:
0c:67:06:ff:89:b2:e2:a5:91:5d:7f:b2:10:51:40:
f9:33:7a:e2:3e:66:b2:c4:a7:8f:a3:3e:1d:6d:57:
e5:f9:51:e5:aa:f4:f1:f2:57:e8:5c:b8:03:ad:dc:
91:a5:83:e8:16:11:d9:12:02:53:4c:b7:13:98:a8:
cf:36:4e:3f:0f:ae:26:08:bc:ce:80:1f:dc:76:33:
1e:5e:a9:47:0f:6e:02:3b:9b:bf:88:8d:a2:28:e2:
0b:1d:58:7e:f7:d0:c0:31:59:50:c7:59:61:a0:b1:
70:02:a5:ff:fb:6c:6b:55:56:2f:b9:37:74:34:4d:
67:0f:f8:89:da:e7:ec:cf:0c:c4:92:f7:c5:0a:b9:
e2:6b:80:9a:2e:91:ac:28:02:9e:9d:9d:e0:21:2b:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:9B:8E:EE:E2:AB:48:EA:6E:72:F7:17:5E:63:07:6C:BA:C3:D9
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/gdCbju7iq0jqbnL3F15jB2y6w9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.145.0/24
Signature Algorithm: sha256WithRSAEncryption
90:74:df:63:38:3c:f2:ca:41:2a:5e:c7:6a:d6:fe:3a:5f:1c:
a1:85:1a:a5:39:20:a8:9e:b8:05:cc:d8:bf:13:87:9c:33:fb:
99:9c:7e:6a:1d:12:fc:f6:d3:84:39:cf:4c:57:7b:12:a1:e8:
98:8d:a2:a9:27:28:ef:e7:ce:96:36:2c:ce:94:c7:6a:d3:9f:
c4:99:b6:80:3c:c6:2d:12:cd:66:b8:5b:12:37:bc:a9:33:92:
81:dd:39:b1:9a:cc:d1:a8:33:c0:8d:73:15:81:3f:c5:d9:0f:
2a:c1:01:a7:68:88:20:c0:bf:01:e3:3f:e6:5a:7d:55:a9:e6:
17:aa:4c:be:6b:81:7d:ad:b2:46:18:ae:f3:44:d3:58:82:77:
76:23:80:6b:eb:6e:ab:77:7a:30:9f:d8:d7:5b:d8:93:07:c8:
f0:81:51:48:c3:99:1d:24:c4:33:c4:58:7e:95:1d:a1:0f:b6:
56:6a:e7:5c:31:d9:55:7a:bd:b3:64:3f:6c:ab:f5:52:ea:56:
5c:6e:49:d3:93:03:42:b6:09:4a:0d:af:9f:40:09:a8:1a:b0:
ff:e9:68:2b:80:b8:fa:f8:4c:07:10:08:e7:d3:2d:99:79:13:
43:5e:9a:77:e2:2e:70:ab:d7:03:c0:06:a5:9a:fe:4c:6d:24:
43:38:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:24:57 2025 by rpki-client