Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GkulWb9O_JudfoJFvg0VKRWcC-c.roa
File: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (raw, json)
Hash identifier: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=
Subject key identifier: 1A:4B:A5:59:BF:4E:FC:9B:9D:7E:82:45:BE:0D:15:29:15:9C:0B:E7
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB65D24D8D3134F56B6EF0E7AF4E9E
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GkulWb9O_JudfoJFvg0VKRWcC-c.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210625
IP address blocks: 2a0c:ab07:2000::/36 maxlen: 36
2a0c:ab07:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:65:d2:4d:8d:31:34:f5:6b:6e:f0:e7:af:4e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a4ba559bf4efc9b9d7e8245be0d1529159c0be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:be:2f:96:fa:30:6a:45:07:85:2d:ae:03:
61:c5:79:df:57:a9:7f:dd:a3:d2:20:70:bb:6e:c3:
c5:e4:24:e2:20:c5:a5:8f:a5:57:d6:76:5c:2f:3b:
ce:c9:31:b5:0c:bb:79:6f:61:a3:0e:68:fb:dc:5d:
2e:f0:31:16:ed:56:fb:95:99:76:c7:16:a3:fa:49:
60:4f:64:c9:2e:19:e6:83:8d:6a:11:fe:7b:a2:59:
96:0a:b3:33:95:78:27:1a:69:21:3e:dd:a4:ba:46:
ed:16:bd:ac:65:70:a5:fe:63:b0:1b:da:83:4b:eb:
55:9f:b2:55:0e:c9:6a:1a:85:15:06:4b:20:75:5f:
85:9c:e0:a8:06:51:5a:03:9b:01:93:97:31:66:09:
b7:7b:a5:36:6f:59:18:f5:91:05:66:2a:fc:d1:25:
3e:eb:8c:5d:91:69:15:19:1d:e2:dc:99:46:f3:1d:
59:ff:f1:09:a8:14:51:1f:5b:a2:e1:3d:91:78:72:
3f:b6:ac:3f:bd:48:f2:b9:80:f7:28:09:11:ed:50:
15:65:e7:d5:3b:a3:01:ca:a2:ac:1c:1f:64:9c:e6:
4a:53:a8:3b:ad:7a:51:89:c7:49:9b:f9:51:c9:9a:
ef:56:a3:de:86:ad:c2:38:7f:ec:08:6b:8f:af:55:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:A5:59:BF:4E:FC:9B:9D:7E:82:45:BE:0D:15:29:15:9C:0B:E7
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GkulWb9O_JudfoJFvg0VKRWcC-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ab07:2000::/36
2a0c:ab07:8000::/36
Signature Algorithm: sha256WithRSAEncryption
40:37:93:c7:12:ef:9b:22:34:32:81:2b:dc:a2:88:c2:60:d9:
96:1e:12:02:74:91:47:7c:34:c8:7a:b8:b5:be:e6:8d:75:b2:
44:4b:d2:aa:a7:d8:b5:55:0d:00:b1:67:34:5f:5c:76:53:70:
bd:d0:ff:08:d6:73:db:59:f7:56:bb:3f:ed:8f:1e:71:e0:2a:
f8:ee:9a:75:84:a3:03:13:db:d7:78:8d:af:3e:f2:3a:6f:68:
52:09:3c:f1:bd:56:b3:19:0b:0f:60:7a:c2:86:38:e2:d4:5d:
23:1a:5a:34:ec:48:90:99:55:03:73:fb:fe:1f:16:48:96:e4:
40:11:a2:34:6a:8e:39:99:9c:49:ba:11:a6:29:0a:43:2f:70:
e4:9e:1a:f5:97:43:6e:03:e0:ea:d1:53:a0:de:8c:df:eb:67:
ac:ec:1d:c5:3d:c5:92:0f:8e:44:aa:98:5c:eb:88:19:60:32:
94:fc:9c:f0:7e:56:3f:72:c1:64:ab:4f:72:e9:10:01:8c:d9:
8d:f1:69:0a:75:28:a6:e7:46:22:cb:f3:95:3f:90:16:23:44:
d5:10:c2:30:f7:c7:07:b6:c3:e3:f6:0a:4a:63:1b:27:b9:6b:
1f:d2:a3:9a:5c:14:19:c3:f0:50:c2:a8:08:02:c8:c8:fb:8c:
29:6b:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:23 2025 by rpki-client