Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/G0-RDDt_Q2lP0Ew3poyGeMZve3U.roa
File: G0-RDDt_Q2lP0Ew3poyGeMZve3U.roa (raw, json)
Hash identifier: LkKmmsoeH2tMjWHQsJIhgAzVX6WvQGsEQCrntj06Zuc=
Subject key identifier: 1B:4F:91:0C:3B:7F:43:69:4F:D0:4C:37:A6:8C:86:78:C6:6F:7B:75
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 01942368D767774561A15C94D8F078AC5148
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/G0-RDDt_Q2lP0Ew3poyGeMZve3U.roa
Signing time: Wed 01 Jan 2025 19:47:40 +0000
ROA not before: Wed 01 Jan 2025 19:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50201
IP address blocks: 109.232.88.0/21 maxlen: 21
109.232.93.0/24 maxlen: 24
109.232.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d7:67:77:45:61:a1:5c:94:d8:f0:78:ac:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jan 1 19:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b4f910c3b7f43694fd04c37a68c8678c66f7b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:63:a0:45:fd:b8:59:e5:d7:ad:53:6b:be:
91:ff:e8:33:08:62:36:01:04:62:cd:2b:a0:b3:8f:
8e:a2:31:86:b7:14:aa:73:7f:e7:41:85:ea:fb:45:
36:b2:49:ac:65:6f:a1:3b:b7:be:62:74:18:e1:34:
fc:9d:f8:19:3b:88:aa:f4:67:6e:97:ed:5e:46:57:
6d:3c:15:51:f0:be:19:77:d5:91:9e:4b:2e:54:cc:
fe:22:92:f9:72:66:04:50:22:56:e4:02:df:ee:0d:
3d:ec:e3:66:e0:68:d5:96:5b:0a:01:07:7a:d4:8f:
39:2c:1e:8d:88:81:e3:df:75:1a:04:b3:61:e9:05:
c9:26:7d:33:dd:f4:d8:ae:d7:ee:2b:95:27:4e:cc:
ad:cb:e3:94:31:27:fd:6b:f1:db:d0:ca:37:ed:3d:
d6:4c:3b:db:cf:7b:f1:65:3f:e0:a8:89:72:f0:f7:
a6:14:e8:72:cf:4d:ff:7a:18:04:46:50:fc:0a:35:
69:27:fa:6f:73:62:05:f8:40:8c:f3:89:0b:ef:e5:
5a:f4:8b:2c:31:73:da:11:74:b0:74:f4:07:81:74:
8b:79:bd:2b:0b:a5:f0:ee:82:5e:3b:67:56:b2:0e:
ca:31:ac:66:7e:b6:ce:e2:00:f8:f7:aa:2b:d2:38:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4F:91:0C:3B:7F:43:69:4F:D0:4C:37:A6:8C:86:78:C6:6F:7B:75
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/G0-RDDt_Q2lP0Ew3poyGeMZve3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:cb:6a:56:23:f7:93:cb:c2:48:1e:9a:1c:c4:7d:3b:fd:3f:
b1:4b:56:63:a8:db:2e:09:f1:21:bd:25:fa:15:d6:1d:3b:23:
72:a5:b9:ee:88:b6:a6:be:b4:32:0d:02:ca:ea:ea:a0:7b:e7:
72:aa:20:1e:bc:7c:0c:ec:42:05:74:11:ae:f4:72:94:b0:22:
c8:53:bd:de:3f:65:81:6a:ba:9f:c1:68:19:ff:db:77:24:bd:
6e:ef:de:26:93:91:fe:42:3a:63:85:7f:a2:88:21:22:e9:1a:
eb:78:4b:29:04:d7:cf:21:98:df:56:0a:61:64:d1:01:78:0c:
83:41:22:2d:c9:88:f8:5d:f2:04:e7:0f:6d:20:e9:f5:21:af:
3a:b4:4e:30:2e:9b:75:ae:86:78:a5:38:80:76:99:db:12:a9:
7a:f7:38:22:83:6b:b8:b3:95:0f:28:dd:46:54:a2:04:18:34:
35:c6:37:db:af:77:d5:af:ac:95:2b:cd:0c:6f:9e:38:cb:37:
13:ca:0b:72:ef:fa:d1:c5:01:3d:43:a1:8c:cd:39:3e:c0:49:
3a:2d:71:af:1d:da:06:c9:2d:32:1c:bb:44:40:f4:4a:72:0f:
f2:92:bb:1b:8f:96:3e:c7:2f:6c:15:02:4c:12:d7:63:4b:01:
c0:7e:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:31:15 2025 by rpki-client