Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/gNCJ8z6bSBl79SrK62vAHCtFifE.roa
File: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (raw, json)
Hash identifier: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=
Subject key identifier: 80:D0:89:F3:3E:9B:48:19:7B:F5:2A:CA:EB:6B:C0:1C:2B:45:89:F1
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019430B55A82F961672AE5376ACEA2ADF42A
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/gNCJ8z6bSBl79SrK62vAHCtFifE.roa
Signing time: Sat 04 Jan 2025 09:46:18 +0000
ROA not before: Sat 04 Jan 2025 09:46:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62078
IP address blocks: 2a06:d1c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:b5:5a:82:f9:61:67:2a:e5:37:6a:ce:a2:ad:f4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jan 4 09:46:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80d089f33e9b48197bf52acaeb6bc01c2b4589f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:90:b3:d6:36:84:78:92:04:25:45:b9:3d:
7b:28:4f:bd:ee:ec:d8:db:b9:bd:09:12:5f:c8:30:
04:57:39:18:e2:05:62:48:35:1a:55:c5:b3:26:55:
2e:c6:c0:30:f8:4a:52:c8:d3:7a:e3:af:95:26:c4:
36:d7:d2:ac:89:aa:90:63:d0:05:5e:35:ce:d0:57:
9e:4f:d3:4c:e1:dc:24:47:cb:c3:5d:24:28:46:37:
ed:54:e6:73:0d:24:8c:d9:f3:4d:21:72:ae:c8:a5:
80:a3:ec:0b:9b:2a:6b:3b:42:e7:fe:a8:ae:49:7c:
62:4e:3d:b1:ac:50:b4:28:7c:62:18:a2:09:bf:1f:
e1:67:85:fb:96:f7:51:ec:b8:33:8c:67:cb:0e:c3:
86:9a:03:fe:6d:fe:3d:99:01:f1:7c:80:fe:a1:42:
fe:29:2b:32:8e:71:42:b7:2d:f9:78:d3:14:93:02:
78:21:49:f4:e8:6e:a4:c1:e8:14:4a:d9:2c:e1:a1:
84:92:3a:16:82:c5:7a:a1:d1:93:f5:23:a4:db:48:
34:85:24:31:b2:eb:cd:07:93:82:f6:a0:e9:16:32:
47:93:90:aa:8e:ea:16:27:8f:ee:a5:63:22:13:69:
df:64:fd:a7:49:c2:73:80:32:f5:25:af:46:f2:07:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D0:89:F3:3E:9B:48:19:7B:F5:2A:CA:EB:6B:C0:1C:2B:45:89:F1
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/gNCJ8z6bSBl79SrK62vAHCtFifE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d1c6::/32
Signature Algorithm: sha256WithRSAEncryption
0d:1a:1d:58:f3:1f:7a:d4:ad:31:5d:88:69:9a:d7:60:fc:b2:
c5:47:9d:04:79:13:f8:e3:69:dd:fa:3d:f1:b6:9b:bd:a8:f3:
a8:69:fa:3e:a4:fe:72:7b:99:8d:d8:1b:10:1c:29:75:ae:06:
42:cb:02:76:af:cb:19:e3:79:83:b0:12:5f:19:44:f0:e3:30:
1a:f2:12:70:c7:0f:7a:ab:e1:61:37:40:a6:ab:1a:61:f6:18:
01:1e:8f:17:db:fc:07:93:e6:e2:f9:c2:ba:e0:a6:ab:21:d3:
80:8e:b4:69:7e:fc:d2:55:ff:b6:92:91:a3:78:ac:ad:29:93:
6b:0e:9e:f7:5e:ea:08:88:5d:43:d7:41:35:03:66:61:71:45:
eb:c6:86:b0:16:b2:d4:65:7e:f1:57:12:b2:7e:62:8e:15:c1:
c5:6b:99:74:de:a6:1d:4c:92:7e:eb:45:e9:1b:ee:d4:3f:fe:
7c:48:00:e3:64:62:00:8d:ec:7c:dd:10:8e:4d:11:92:8f:8c:
ee:cf:e3:f3:6d:98:f3:c0:4e:f0:8c:f9:76:fb:c3:da:d6:5b:
78:ff:93:49:16:d8:f6:d8:00:d2:56:38:b7:0f:4c:19:0b:cf:
7f:80:94:99:f0:b0:6e:30:1e:31:7e:fd:b5:f7:93:9a:81:07:
fc:34:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:40 2025 by rpki-client