Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa
File: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (raw, json)
Hash identifier: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=
Subject key identifier: 1B:B9:6B:0E:1D:E7:83:E1:96:F9:C6:6D:4C:35:CF:FF:85:32:79:EA
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 01941F8C1D01D8AB7808F61CF63CBE21CCB1
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48611
IP address blocks: 2a00:dcc7:2200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:01:d8:ab:78:08:f6:1c:f6:3c:be:21:cc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bb96b0e1de783e196f9c66d4c35cfff853279ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:59:70:d2:31:49:8f:97:ad:e0:ea:02:56:
c3:20:e6:95:52:fa:76:9a:eb:88:2e:b2:26:f8:be:
11:80:4b:25:46:f5:b9:09:13:ca:01:67:a8:16:8e:
40:ec:79:43:44:ac:93:64:53:c6:fa:64:c3:75:88:
d0:55:ca:bd:33:f6:ba:0b:db:fe:16:59:9b:8f:c2:
9f:4f:97:25:f0:ac:a2:e2:25:a6:46:25:97:7e:4b:
0d:88:7f:29:01:7b:65:05:12:0e:0d:de:5b:be:d8:
d2:c2:92:cd:10:b9:8c:db:90:8e:6b:9a:0c:c2:fe:
42:94:c2:b6:8f:43:36:5b:5a:a2:f3:1d:3c:60:2c:
d4:2b:2d:ef:a3:9d:c5:d8:38:2d:c7:96:b2:a3:2d:
6a:e4:0c:79:e0:0b:09:83:5b:a2:28:ef:9c:44:a7:
a5:7e:82:7b:36:41:52:d2:f5:24:1c:04:35:5a:1a:
ce:2d:3d:1e:e1:81:af:24:b5:f6:8c:92:36:2d:c6:
d3:fd:7b:be:47:46:a7:03:f1:09:2b:b3:73:eb:41:
19:f1:b8:f8:a5:0f:37:32:a9:7a:c3:4b:96:5a:65:
cd:ce:c9:38:99:b1:0e:df:52:bc:7f:47:c9:53:29:
40:a0:5f:2a:21:d7:e5:d8:bb:bb:d1:85:9c:c4:d1:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:6B:0E:1D:E7:83:E1:96:F9:C6:6D:4C:35:CF:FF:85:32:79:EA
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dcc7:2200::/40
Signature Algorithm: sha256WithRSAEncryption
4c:52:8d:78:06:a2:aa:c7:96:e1:32:05:f1:47:9c:66:ce:99:
6f:45:0a:0d:90:c5:9c:11:e4:43:33:14:de:74:a2:38:22:04:
b0:3f:b2:88:05:0c:1b:22:c2:01:c4:f4:7f:88:2d:2f:e8:72:
fe:a2:6b:7c:eb:27:e2:7b:5f:f4:e9:2c:38:56:ca:5a:a6:44:
a8:27:d0:d2:bc:e7:e3:43:34:cf:4f:9d:a6:61:4d:b5:4b:ab:
28:e9:c7:43:f9:63:44:d1:e1:46:6d:f9:54:0e:af:ca:51:9b:
c8:68:00:dc:13:a1:44:66:6c:77:9f:7e:c2:4f:ab:ac:5f:c3:
40:71:f4:df:78:2b:95:9a:22:eb:e6:ee:82:c7:60:19:1c:2f:
fa:9c:54:dd:46:31:38:5c:2a:bb:24:27:da:10:55:f7:8d:f8:
e0:b4:bc:0a:8c:2c:1c:af:c2:88:cd:14:e2:fe:f8:1e:8a:09:
61:25:e9:20:4c:ed:3a:0b:42:37:8c:48:6e:de:81:d8:c2:73:
61:61:fc:79:14:c2:21:b3:87:6e:45:19:9a:a3:33:0f:7c:4f:
36:2c:eb:2f:46:9e:0a:1b:e8:8c:5f:b7:73:75:a0:c6:d4:9a:
07:a8:5a:2e:0e:73:a9:aa:58:d8:3d:05:73:30:1e:bd:98:fd:
22:f6:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:56 2025 by rpki-client