Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa
File: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (raw, json)
Hash identifier: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=
Subject key identifier: 1A:EC:BB:19:BC:F9:AC:F3:1C:E2:21:52:A5:DF:FC:7E:BA:9D:62:AB
Certificate issuer: /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial: 0194266C33BCB1FB10BBCE3FC5AAC814E5A9
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207910
IP address blocks: 2001:678:984::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:33:bc:b1:fb:10:bb:ce:3f:c5:aa:c8:14:e5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aecbb19bcf9acf31ce22152a5dffc7eba9d62ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:f4:dd:ea:96:52:6f:00:be:1a:85:2c:e0:
c4:d1:aa:5d:18:5d:4a:1a:88:ef:ac:54:62:55:5f:
e5:bb:10:dc:80:04:50:09:1f:46:ca:f7:6b:3c:47:
f3:93:70:6c:f5:71:dd:c4:6d:5b:4c:be:43:ed:22:
74:21:bf:13:a0:87:b2:05:d4:29:0f:b4:53:5a:8b:
89:61:06:ef:95:9f:a8:65:69:8f:02:4f:14:5d:ad:
0c:a0:e5:63:6c:f9:31:40:d7:b4:54:02:b0:60:1f:
b5:a3:3b:d6:14:7f:cc:88:b0:fa:65:00:3c:c1:56:
0f:59:e0:74:92:e9:a3:8a:f1:b9:a9:71:dd:92:d8:
20:23:d8:b7:32:67:9b:a6:54:99:44:f5:27:17:57:
28:c8:b5:23:5d:5a:8e:15:4f:0f:15:9f:33:c1:41:
78:4a:0c:c7:7a:60:70:f5:70:02:14:e5:00:22:09:
30:2b:54:29:c1:ae:ad:6a:98:6a:be:e7:a9:e5:45:
af:45:8a:92:e5:9c:f2:29:6f:a4:93:86:11:d0:2e:
33:d8:75:fd:ab:4a:0d:00:71:8c:7e:30:4f:e5:aa:
2c:06:f0:73:3c:99:b2:2f:c0:a3:29:d2:38:0b:27:
23:ef:e9:9e:fa:3a:a7:c0:72:6b:d3:ce:24:43:1a:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EC:BB:19:BC:F9:AC:F3:1C:E2:21:52:A5:DF:FC:7E:BA:9D:62:AB
X509v3 Authority Key Identifier:
keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:984::/48
Signature Algorithm: sha256WithRSAEncryption
7f:6d:b6:1f:fd:f9:bc:1c:a6:e4:51:09:60:1e:47:8c:19:40:
d1:b8:e7:ce:55:0e:ba:36:cc:51:e7:e2:f8:05:41:3b:9f:07:
9d:5d:78:be:4c:2c:37:a4:0a:98:0d:31:3b:b6:61:98:d5:97:
20:30:39:37:f2:0f:d0:cf:89:0e:90:e6:18:68:20:e8:fb:e2:
0d:ce:1e:42:89:93:86:b2:db:a2:18:e7:cd:fa:15:58:83:0a:
9a:47:e2:1a:18:00:be:59:de:aa:10:5a:96:b1:1e:93:13:6d:
6b:e4:63:a9:f6:3b:f4:e5:c5:e2:b4:ee:24:94:c0:0e:e4:df:
cf:bd:a3:90:87:bd:a9:2e:1e:36:10:7c:34:ca:46:d8:74:83:
35:b0:5c:67:33:f2:70:fc:06:09:56:e0:1c:e4:c7:05:7a:7f:
e2:6c:63:4c:16:4f:16:bb:6c:68:cf:26:5e:84:0f:d8:fc:7c:
c2:2e:85:e6:c2:f2:bb:c5:4e:5e:d1:fb:7f:58:e1:1e:3b:39:
ba:c8:84:75:b8:2e:af:80:52:7c:fa:2b:37:f1:43:53:8b:6d:
4e:a4:05:6a:8c:08:79:73:6c:bb:e0:92:0f:ce:28:ae:e0:aa:
d9:a5:fa:61:77:30:c0:c8:03:97:83:8c:b2:b9:88:a0:15:93:
a4:a5:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:24:03 2025 by rpki-client