Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/gN1BkwtfLG0CVafSuu-7jUV0eE0.roa
File: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (raw, json)
Hash identifier: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=
Subject key identifier: 80:DD:41:93:0B:5F:2C:6D:02:55:A7:D2:BA:EF:BB:8D:45:74:78:4D
Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial: 019425FD6F8EA85F926235C8D0EE3B980AD5
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/gN1BkwtfLG0CVafSuu-7jUV0eE0.roa
Signing time: Thu 02 Jan 2025 07:49:13 +0000
ROA not before: Thu 02 Jan 2025 07:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51923
IP address blocks: 2a01:1b0:c000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6f:8e:a8:5f:92:62:35:c8:d0:ee:3b:98:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Validity
Not Before: Jan 2 07:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80dd41930b5f2c6d0255a7d2baefbb8d4574784d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:cb:4f:b6:8c:e5:70:91:e1:e9:22:ea:d1:
71:a3:3a:f7:9a:ab:3b:58:85:9b:e7:9c:69:fb:0a:
a8:3f:2f:33:7c:37:81:34:a5:03:a9:69:5f:c9:f6:
56:76:ca:10:07:0f:a1:ee:9f:c8:22:69:43:3d:fc:
7c:59:f2:ba:7d:5f:08:4d:48:b8:92:68:68:ae:83:
92:df:1d:56:e0:ed:f0:77:30:9a:4c:ab:4c:5c:0a:
ff:f8:63:19:78:60:45:2a:da:6e:0a:6c:ef:4a:f3:
97:b0:26:f8:1d:31:cc:ed:17:30:1a:3b:f2:f7:f7:
fa:c0:5b:10:e7:91:bf:76:f1:c8:3c:97:f5:21:91:
c9:25:19:8c:ac:78:f3:d4:36:a8:30:c5:ed:d0:56:
77:29:45:a8:c6:2f:e6:a2:f7:35:2d:7d:67:be:99:
59:94:a2:8a:97:b2:4d:c7:12:92:e9:4e:68:4a:98:
d6:72:3f:54:fb:6a:9a:97:16:32:db:10:e3:da:ae:
bc:f8:25:89:e6:f7:82:0e:af:d6:ac:94:b1:39:ce:
2f:60:97:da:77:39:d3:57:7f:82:2d:44:2f:d0:dc:
e9:85:9e:fe:8d:77:7a:a4:47:58:3c:61:84:6e:3b:
dc:56:b3:3e:60:5a:d9:93:4c:df:59:ad:4e:48:44:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DD:41:93:0B:5F:2C:6D:02:55:A7:D2:BA:EF:BB:8D:45:74:78:4D
X509v3 Authority Key Identifier:
keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/gN1BkwtfLG0CVafSuu-7jUV0eE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:1b0:c000::/44
Signature Algorithm: sha256WithRSAEncryption
80:77:e5:67:58:6c:ab:bc:25:f7:98:90:9f:b8:8c:1b:75:97:
d9:50:cd:52:97:b3:77:8f:af:54:85:99:70:33:9b:9f:7e:b2:
dc:1f:18:1b:51:a0:27:42:05:27:40:80:ae:41:f5:8e:aa:1f:
c6:fb:93:7c:ce:c2:09:fa:dd:07:f1:f6:f7:98:4e:59:45:d9:
45:9a:da:2d:30:74:48:cf:c6:04:0e:0c:ce:cb:e2:2e:40:37:
40:77:41:e1:00:5b:a0:45:d5:e7:58:84:c7:1c:f0:7a:d2:ef:
66:25:c1:9b:ee:9b:04:63:b2:42:98:25:72:72:65:d9:2c:bf:
28:07:67:6b:2a:82:45:9c:03:d7:10:00:08:5e:35:1c:42:a2:
93:67:9b:bd:25:8b:57:9a:08:db:b9:d1:7f:c7:9a:b5:a1:76:
fc:da:a4:17:76:b6:f9:1c:c8:47:e0:64:2d:5c:fb:f8:6a:b3:
4b:28:ed:2f:56:e3:7c:2a:10:18:df:fb:aa:92:6b:ac:bc:1d:
63:f1:95:16:9c:a2:44:96:b4:85:7f:9d:03:2f:85:f6:d3:43:
54:d3:f1:1d:46:4d:62:65:57:d1:20:0e:81:34:49:52:4f:06:
9d:74:96:dc:c0:34:3b:e8:f2:74:32:6c:03:bf:89:0e:0e:fa:
87:60:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:09 2025 by rpki-client