Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa
File: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (raw, json)
Hash identifier: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=
Subject key identifier: 19:DE:03:33:3D:56:A1:75:4F:7F:F6:17:7D:1F:4E:51:38:3E:EC:B2
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019422FB441E3640D4FECFAE436CF1AF15E3
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa
Signing time: Wed 01 Jan 2025 17:47:59 +0000
ROA not before: Wed 01 Jan 2025 17:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25057
IP address blocks: 2a0a:ab00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:44:1e:36:40:d4:fe:cf:ae:43:6c:f1:af:15:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 17:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19de03333d56a1754f7ff6177d1f4e51383eecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:d5:ab:74:85:be:a8:ce:9a:8e:a5:8c:98:
e5:5a:3d:a7:27:79:8f:fd:f1:95:b7:be:47:86:5a:
34:5a:5e:0a:7f:ef:3a:27:63:bd:0a:85:e7:5f:2b:
af:90:b0:ea:55:e6:68:84:10:de:5e:f9:46:8f:0b:
61:c8:f6:fa:d8:9e:b2:17:38:74:9d:27:c2:3f:68:
b4:12:ab:96:b8:e5:44:62:b5:03:1e:d7:50:da:49:
91:ce:1f:48:1e:43:bf:eb:cd:d7:a3:0c:8d:86:17:
5e:8e:e7:1a:ec:03:c1:b8:e5:66:f3:fb:23:11:65:
78:5a:eb:b9:11:d2:4b:73:40:08:39:33:6d:4a:82:
23:c2:1b:93:29:99:26:95:2d:29:af:cc:e9:77:23:
37:dd:76:ac:53:ed:b1:29:7e:30:f7:98:31:af:9d:
4c:7d:a8:ca:64:c0:dd:5b:5d:55:15:d2:82:52:0b:
5d:01:76:79:b2:0d:34:ab:12:97:e8:76:44:e8:50:
5a:7c:e6:25:62:9e:13:05:6b:93:35:49:1b:c0:54:
6a:b6:3f:f6:a6:93:91:17:39:69:4d:0c:db:89:51:
b8:cc:7f:2a:c1:4f:d8:94:80:3a:f4:26:c2:32:aa:
cd:89:c8:11:23:46:b0:9b:6e:76:c1:87:7e:b1:cf:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:03:33:3D:56:A1:75:4F:7F:F6:17:7D:1F:4E:51:38:3E:EC:B2
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
01:ff:e8:c8:6c:31:33:42:99:b3:5f:29:63:64:53:8f:47:36:
fb:b1:34:03:1b:71:74:e4:a6:0d:64:c6:ee:e4:44:df:e9:2a:
37:ab:af:b6:c0:7b:96:a4:7d:08:4f:42:84:12:17:77:f5:b1:
94:e0:65:9e:f3:67:43:8b:1b:68:6e:f3:ac:13:c0:5b:60:49:
28:0f:96:89:a0:69:b5:b7:66:3b:04:05:a4:8f:94:9d:cd:40:
25:fc:b6:38:02:2d:06:8a:2f:07:ff:74:8d:67:30:19:3c:93:
8b:4b:d8:2d:67:cb:03:9c:cd:d8:4c:4e:38:1f:6d:22:83:c1:
39:3b:31:a7:68:ca:ea:4b:f0:cf:ec:17:04:75:15:35:03:1a:
c1:f9:48:1a:a8:bf:97:29:66:8b:3d:4b:39:17:c0:eb:7e:f8:
a8:61:5c:ac:52:d7:07:5d:ca:1e:10:60:2b:b6:7c:d0:7d:fe:
c0:e5:b8:d6:00:cf:e4:37:7a:9d:79:85:8c:5c:87:99:56:75:
0e:ff:9b:e6:e4:d8:03:03:63:21:42:59:d5:70:a6:7d:92:b4:
12:7e:e2:9f:ae:89:8d:e3:74:cc:7f:46:da:c0:78:2f:57:16:
ff:55:69:83:fb:eb:0c:f6:d3:f6:81:71:1c:04:19:a8:5f:2e:
57:28:f2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:57 2025 by rpki-client