Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/gdLyflAsCyF8taKXwI9Ohy9cbTg.roa
File: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (raw, json)
Hash identifier: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=
Subject key identifier: 81:D2:F2:7E:50:2C:0B:21:7C:B5:A2:97:C0:8F:4E:87:2F:5C:6D:38
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 01941F8C7A81EA659783C1793F66BB74FCC9
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/gdLyflAsCyF8taKXwI9Ohy9cbTg.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215466
IP address blocks: 2a13:7706:1::/48 maxlen: 48
2a13:7706:6666::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:81:ea:65:97:83:c1:79:3f:66:bb:74:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81d2f27e502c0b217cb5a297c08f4e872f5c6d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:e7:de:4b:41:90:05:cc:b4:ed:29:28:34:
6d:cb:8d:53:53:0d:8d:c2:a0:15:bb:62:90:75:3e:
69:cb:57:0f:4d:4d:4a:cd:36:59:ec:e9:3f:e2:82:
ed:f6:14:5e:14:81:c2:ca:80:79:67:a6:6a:3c:33:
a6:63:97:20:06:09:24:b1:b4:3e:19:d8:35:f9:f1:
c4:38:42:bb:fe:6e:26:41:6c:2d:62:77:c6:8e:72:
f2:0b:9e:cf:3f:ed:6e:ff:56:88:94:db:42:2e:b1:
2c:bf:56:fa:ff:ce:99:02:8a:a3:62:f1:fe:2a:be:
14:fc:ec:10:f4:3f:57:9d:d7:67:12:ee:a5:cd:dc:
91:37:40:86:0f:ec:b8:31:65:50:53:a5:73:ce:70:
b9:cb:73:49:79:21:3a:94:c0:e5:09:1a:67:7d:26:
dc:51:69:a5:20:8c:71:d4:9a:a5:2f:bd:12:a4:ca:
49:f9:cf:89:e4:1b:de:56:c6:8b:23:97:1d:1e:5a:
d7:b0:af:2a:9f:49:4b:02:98:6f:ad:a3:50:07:b7:
6b:a0:1e:aa:28:5e:06:46:5f:ad:28:84:62:aa:48:
7b:81:6f:1f:cf:44:e9:ea:b2:fe:71:f5:a9:a3:04:
62:7e:84:da:33:b4:54:1e:6a:3c:b6:69:68:39:26:
17:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:F2:7E:50:2C:0B:21:7C:B5:A2:97:C0:8F:4E:87:2F:5C:6D:38
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/gdLyflAsCyF8taKXwI9Ohy9cbTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7706:1::/48
2a13:7706:6666::/48
Signature Algorithm: sha256WithRSAEncryption
6c:bb:e3:5a:cc:db:10:ce:2f:ed:30:00:26:a6:03:e9:e3:7c:
3c:c5:a4:d4:38:b6:0e:56:0b:75:90:ea:de:c9:c9:c4:07:87:
af:d8:9f:b0:31:89:03:3d:f3:07:03:88:5b:c6:9c:c6:24:eb:
f8:09:74:3d:68:81:ad:77:2b:6d:9f:11:44:4d:5d:37:23:63:
66:6c:ba:bd:df:71:c9:94:c7:58:5f:03:fb:5f:ea:5f:31:55:
71:b2:8c:d3:9a:ae:9a:d0:73:7b:72:8c:f4:d7:57:1f:48:3e:
3f:89:7e:83:5a:d7:58:8f:2c:4f:21:73:bf:a3:47:2d:51:74:
ce:22:11:66:43:10:d2:77:7d:17:aa:38:70:85:4f:91:7b:e1:
23:ef:fb:ba:c9:8a:1e:4b:8b:f8:cb:f7:b2:e8:07:65:2d:4c:
6b:95:57:a5:7b:23:5c:11:ac:bc:b7:4b:5d:fe:06:70:c4:e6:
52:2b:f4:fe:69:1a:d0:f8:79:17:2a:94:7c:f2:16:a7:a9:9a:
06:36:63:91:8a:47:73:17:1d:19:9d:2e:03:70:43:39:95:c9:
3f:99:18:e1:fb:9e:9d:0b:a6:4b:3e:76:ad:4a:0d:b2:59:9c:
4f:78:97:3a:71:5f:c9:06:d7:81:78:60:f9:fe:25:16:41:ba:
27:91:97:7c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQfjHqB6mWXg8F5P2a7dPzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNmMyOTU4MTQ1ZjQ1ZmFkNWRhZWViMzhiNzViNTJjMDk2
NjEwNDYwHhcNMjUwMTAxMDE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQyZjI3ZTUwMmMwYjIxN2NiNWEyOTdjMDhmNGU4NzJmNWM2ZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS/n3ktBkAXMtO0pKDRty41TUw2N
wqAVu2KQdT5py1cPTU1KzTZZ7Ok/4oLt9hReFIHCyoB5Z6ZqPDOmY5cgBgkksbQ+
Gdg1+fHEOEK7/m4mQWwtYnfGjnLyC57PP+1u/1aIlNtCLrEsv1b6/86ZAoqjYvH+
Kr4U/OwQ9D9XnddnEu6lzdyRN0CGD+y4MWVQU6VzznC5y3NJeSE6lMDlCRpnfSbc
UWmlIIxx1JqlL70SpMpJ+c+J5BveVsaLI5cdHlrXsK8qn0lLAphvraNQB7droB6q
KF4GRl+tKIRiqkh7gW8fz0Tp6rL+cfWpowRifoTaM7RUHmo8tmloOSYXVwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIHS8n5QLAshfLWil8CPTocvXG04MB8GA1UdIwQY
MBaAFD1sKVgUX0X61drus4t1tSwJZhBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQt
NWUxYjA3ODg5MjNiLzEvZ2RMeWZsQXNDeUY4dGFLWHdJOU9oeTljYlRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQtNWUxYjA3ODg5MjNi
LzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhN3BgAB
AwcAKhN3BmZmMA0GCSqGSIb3DQEBCwUAA4IBAQBsu+NazNsQzi/tMAAmpgPp43w8
xaTUOLYOVgt1kOreycnEB4ev2J+wMYkDPfMHA4hbxpzGJOv4CXQ9aIGtdyttnxFE
TV03I2NmbLq933HJlMdYXwP7X+pfMVVxsozTmq6a0HN7coz011cfSD4/iX6DWtdY
jyxPIXO/o0ctUXTOIhFmQxDSd30XqjhwhU+Re+Ej7/u6yYoeS4v4y/ey6AdlLUxr
lVeleyNcEay8t0td/gZwxOZSK/T+aRrQ+HkXKpR88hanqZoGNmORikdzFx0ZnS4D
cEM5lck/mRjh+56dC6ZLPnatSg2yWZxPeJc6cV/JBteBeGD5/iUWQbonkZd8
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:07 2025 by rpki-client