Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/goJ06I4X-EH8W30V7EVn5y0FKWk.roa
File: goJ06I4X-EH8W30V7EVn5y0FKWk.roa (raw, json)
Hash identifier: 3tlp0UONPTSFHKc2l1cIXSXdpnGW/o8EYSwZkHrH5Bs=
Subject key identifier: 82:82:74:E8:8E:17:F8:41:FC:5B:7D:15:EC:45:67:E7:2D:05:29:69
Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial: 0194221F9BCFAB9B62A3398AD1EDC768B0FC
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/goJ06I4X-EH8W30V7EVn5y0FKWk.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200233
IP address blocks: 2a13:181::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:cf:ab:9b:62:a3:39:8a:d1:ed:c7:68:b0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=828274e88e17f841fc5b7d15ec4567e72d052969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:55:ed:37:c7:b6:c1:3e:b3:02:fe:f5:f1:
c1:be:41:01:73:ab:e3:24:22:f4:30:cf:7b:05:78:
a4:13:4b:4f:87:06:e8:e7:94:88:e1:8e:00:5f:57:
b0:af:07:f5:aa:18:be:10:d2:35:7a:54:97:08:54:
01:a9:2b:04:8f:f3:21:ce:93:c5:3a:33:38:7f:a9:
e7:bb:b1:dc:21:59:4d:2f:3b:b0:ec:2c:fa:67:13:
3f:68:4b:db:98:4e:4b:35:97:cb:a1:89:71:4b:4f:
a9:bc:0f:89:25:96:de:44:b3:39:53:1f:fc:e3:5f:
98:68:06:c6:7c:8c:96:09:07:c0:12:74:ba:d9:39:
9e:ff:c5:40:d8:de:8e:ee:a9:d4:4d:e1:4f:e2:58:
c9:5c:bf:40:33:84:20:69:36:f3:cc:b0:56:13:48:
e5:b9:a4:51:f2:3d:1f:1f:9e:48:b2:78:8d:55:b8:
52:f1:20:39:60:6b:1b:18:84:56:02:f7:91:a8:7b:
17:f1:28:ef:62:78:d3:09:ca:21:36:fe:5b:2e:de:
fe:e6:98:76:84:1a:5e:bb:f3:db:5e:d3:a8:04:86:
e7:a4:78:98:5f:21:7b:99:70:bb:74:7c:dd:88:a8:
59:d8:b9:2b:ce:c1:06:77:f3:51:66:29:35:15:db:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:74:E8:8E:17:F8:41:FC:5B:7D:15:EC:45:67:E7:2D:05:29:69
X509v3 Authority Key Identifier:
keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/goJ06I4X-EH8W30V7EVn5y0FKWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:181::/32
Signature Algorithm: sha256WithRSAEncryption
63:8b:95:3c:25:ec:b5:6f:d5:92:6e:57:6f:8e:71:d4:bf:69:
0c:28:8a:85:7d:98:d3:76:d8:be:b4:1b:22:1e:80:2b:d6:f9:
6b:b6:29:29:c7:6d:fa:9c:86:3e:41:19:16:51:30:94:d7:26:
62:22:13:24:16:3a:f2:0e:91:92:da:c3:13:b1:cf:15:84:9c:
92:17:4b:53:f8:8b:2b:f8:fb:3f:f6:70:17:49:db:64:d4:df:
2f:6f:8c:97:71:c5:eb:03:9c:35:f5:fc:89:19:e2:81:58:79:
a4:a2:02:6e:fc:cf:1e:a5:ee:e1:8e:f4:ab:19:d2:9f:aa:df:
ce:9f:58:e1:be:37:93:e9:69:6b:7a:67:93:09:0e:25:06:be:
25:68:8c:fa:a3:6c:63:f8:98:19:76:ff:fb:e1:fe:19:b3:18:
64:2d:97:29:3f:d3:3f:81:5e:9c:3b:99:1a:45:c7:9c:3b:12:
b8:cd:9c:34:bf:e7:56:05:24:c8:71:e1:cd:91:49:b8:f7:39:
0c:1f:af:d1:0f:48:c7:dc:3e:0a:18:49:22:a7:7b:69:82:51:
74:0d:9b:7d:80:10:f1:99:d4:d9:d3:60:24:14:e7:8d:fb:d5:
41:77:b4:85:57:f4:51:2a:1d:10:ac:ee:40:71:7a:8e:26:32:
2a:e0:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:25 2025 by rpki-client