Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/GnLPhl-uubIHiJcLCe32AtNVedI.roa
File: GnLPhl-uubIHiJcLCe32AtNVedI.roa (raw, json)
Hash identifier: LKVZHVLK3iMItZJyemMoVsYH74yczBlm/GhJ5T/Cyfk=
Subject key identifier: 1A:72:CF:86:5F:AE:B9:B2:07:88:97:0B:09:ED:F6:02:D3:55:79:D2
Certificate issuer: /CN=2cac38240bfa5ddafe861328d174c9fd7a4ec761
Certificate serial: E9B96B
Authority key identifier: 2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/GnLPhl-uubIHiJcLCe32AtNVedI.roa
Signing time: Wed 23 Feb 2022 20:19:50 +0000
ROA not before: Wed 23 Feb 2022 20:19:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 212.52.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15317355 (0xe9b96b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac38240bfa5ddafe861328d174c9fd7a4ec761
Validity
Not Before: Feb 23 20:19:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a72cf865faeb9b20788970b09edf602d35579d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:54:fc:76:35:51:43:bd:d5:e2:7d:b4:b3:
76:82:f6:58:b2:fc:4e:e0:db:a7:10:db:22:11:b0:
88:ca:3e:08:90:6f:c1:f8:77:50:ac:5d:24:52:f7:
34:f7:33:99:12:35:53:cf:a9:9e:a5:de:9f:16:68:
c6:d2:eb:58:8d:9d:f2:36:30:a1:94:dd:a2:25:82:
41:b1:a4:31:8b:03:ca:10:8a:24:44:9a:65:ca:f5:
6c:7f:ec:5c:2e:23:b5:5f:0a:d3:f6:15:1a:58:ad:
b3:92:c4:e0:4f:7f:2c:1c:b8:75:69:69:e5:1c:ac:
a1:b8:1b:e3:ed:81:9c:61:84:3f:4c:d7:fb:ea:de:
52:2e:1c:d2:73:3b:4c:f3:d6:c4:53:84:06:ee:39:
79:ec:fb:84:6e:dc:c4:16:91:e0:1f:43:2b:60:de:
a1:b6:b7:59:85:43:3f:a6:e2:7b:4c:8c:df:0b:91:
a9:1f:92:65:13:34:b6:e3:3a:a3:00:73:e9:ab:64:
86:e0:07:4a:8d:b0:f1:a6:2b:78:ae:0d:3c:77:67:
de:a5:c5:fa:f3:94:2b:e2:7a:e1:a3:c7:ce:0a:25:
a7:b4:4b:70:2d:c2:3d:57:c5:ba:07:25:76:e0:94:
8b:a4:83:5e:99:25:8c:87:2e:f1:1b:ec:60:82:02:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:72:CF:86:5F:AE:B9:B2:07:88:97:0B:09:ED:F6:02:D3:55:79:D2
X509v3 Authority Key Identifier:
keyid:2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/GnLPhl-uubIHiJcLCe32AtNVedI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:55:ec:4e:27:86:74:56:bc:bd:65:80:ea:94:72:91:d1:0b:
7d:92:f8:33:74:14:8c:bb:b8:06:f4:5c:a1:a5:3c:82:5b:25:
a8:52:c2:18:71:1b:2e:96:1b:d0:1e:9a:39:2c:89:be:d5:af:
3f:22:b5:89:8c:28:8b:fa:df:47:44:e7:15:00:3f:0f:d3:8a:
30:a5:83:f3:5e:bf:71:b6:53:e3:32:a3:61:5e:f1:a2:5a:08:
e0:e6:55:01:b2:0d:99:97:2a:85:34:ad:51:9b:b1:37:4c:3e:
aa:cb:8b:bf:22:d8:f9:ab:4f:5d:d9:eb:44:19:2e:6e:6d:4b:
88:f6:31:29:f3:2d:ca:e1:0e:43:b9:29:fc:e2:f6:f3:ee:d6:
05:4f:51:1e:e6:8c:8a:9c:f1:4a:20:24:97:f0:04:c5:43:5f:
4d:6b:63:d8:fa:20:4b:12:74:85:26:a5:33:00:98:f1:c4:34:
1c:c2:6c:06:ca:8a:f9:d3:92:06:34:e3:bb:ca:a3:82:36:b1:
97:39:e4:d5:33:f3:18:8d:fe:12:22:56:9d:65:33:e2:35:09:
84:91:02:d8:3a:50:05:ab:15:5f:f9:a9:85:4e:e3:f1:ee:4e:
1f:1d:ed:8a:b5:da:06:1d:f7:1f:a4:20:4c:f8:fc:9f:1a:6b:
24:55:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:31 2025 by rpki-client