Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/GSlFodh40GWtFXJ0cvtNrC5QQZs.roa
File: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (raw, json)
Hash identifier: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=
Subject key identifier: 19:29:45:A1:D8:78:D0:65:AD:15:72:74:72:FB:4D:AC:2E:50:41:9B
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 01942521FB01475C89414C819573E2BBB5DC
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/GSlFodh40GWtFXJ0cvtNrC5QQZs.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2613
IP address blocks: 2a02:2528:2613::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fb:01:47:5c:89:41:4c:81:95:73:e2:bb:b5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=192945a1d878d065ad15727472fb4dac2e50419b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:b8:89:87:49:a0:2a:e7:99:70:fe:64:63:
f9:90:88:76:6f:77:98:59:c2:d9:b6:91:50:3b:6f:
29:6a:c1:b9:26:48:aa:5d:10:b2:30:3e:b3:ba:7d:
10:00:57:ac:40:67:1e:ab:d4:20:f5:80:b5:38:57:
73:a6:1b:07:4f:12:61:d5:b7:4a:ac:e6:a0:97:0f:
c3:14:2c:c4:a5:83:8e:28:bc:26:be:57:97:c5:08:
ad:10:6c:9f:be:30:0d:d3:0a:33:20:92:ec:f6:0b:
92:a6:2f:47:6b:a7:21:a0:f1:2d:5f:39:18:05:bc:
28:08:b9:19:ae:86:5e:55:b7:69:2a:4e:3d:fb:40:
51:22:e0:7f:92:26:da:06:1b:30:3f:08:f8:98:7b:
6f:99:34:51:84:4d:32:9b:59:b9:b6:42:48:0f:15:
e0:27:05:fd:2b:e6:ff:ce:90:d1:e5:4e:29:f2:f8:
50:97:03:01:15:79:97:39:e9:29:a9:b1:0c:27:6b:
64:f6:39:11:63:22:12:78:89:90:7c:fd:f2:9b:67:
1d:5b:6a:9c:ee:17:f4:84:07:ab:4f:70:61:0c:c6:
61:29:f1:d7:14:74:f3:02:49:b2:c9:0e:f3:fd:82:
ae:c2:52:37:a5:d4:d1:3a:90:ae:ce:fd:a9:52:af:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:45:A1:D8:78:D0:65:AD:15:72:74:72:FB:4D:AC:2E:50:41:9B
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/GSlFodh40GWtFXJ0cvtNrC5QQZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2528:2613::/48
Signature Algorithm: sha256WithRSAEncryption
3b:49:f8:61:19:ec:ec:4f:ce:3e:06:71:42:c3:35:64:9c:33:
a5:f0:aa:dc:8f:96:f4:31:7c:fe:34:42:17:30:b4:d2:de:30:
9c:15:80:f2:af:c4:cc:48:96:13:b9:89:ad:51:69:4c:22:d5:
29:18:4d:0f:a1:e6:84:b5:1c:5e:db:32:6a:22:94:5c:2b:b3:
1e:e1:8a:12:c2:87:5e:c4:f5:97:a2:c7:2e:ea:0d:c5:f6:56:
ad:4d:0d:e7:03:40:1f:ab:18:b8:3e:23:21:cd:79:f7:b2:cf:
ff:87:5a:d3:e8:b0:35:fc:23:5e:3a:e8:dc:57:34:ba:fd:3d:
22:dd:1d:1c:67:2b:4f:63:07:9f:ff:a0:30:09:24:0b:47:c1:
84:a7:5e:f4:cf:2f:b0:63:f4:b0:6f:d3:f2:a9:40:f1:2d:8a:
31:99:94:fd:99:ec:cf:41:f6:a6:ef:9d:af:78:b8:4b:7b:50:
cc:bc:7f:0d:fe:7a:33:10:3c:ec:2b:65:f5:92:46:23:e4:9f:
c8:fc:0b:d8:32:83:ff:37:96:1f:ca:03:51:05:ac:be:0c:e4:
f9:d4:53:65:32:d5:25:79:67:15:8d:c5:b7:e3:a5:26:94:3f:
60:e1:eb:e5:0a:0a:3f:cb:92:7f:3e:b0:e9:07:40:59:d7:8f:
d9:ba:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:24 2025 by rpki-client