Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa
File: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (raw, json)
Hash identifier: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=
Subject key identifier: 1A:7F:16:FF:9F:99:34:31:49:B1:F8:95:0B:19:AE:B9:C6:F0:7C:A9
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01942747077287A5A0DA4183FA2A61B20ABA
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa
Signing time: Thu 02 Jan 2025 13:49:13 +0000
ROA not before: Thu 02 Jan 2025 13:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202505
IP address blocks: 2a0f:6580:107::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:07:72:87:a5:a0:da:41:83:fa:2a:61:b2:0a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a7f16ff9f99343149b1f8950b19aeb9c6f07ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:56:dc:bd:00:eb:b3:2a:10:03:b4:1f:3f:
19:04:c3:46:98:fa:4c:d3:58:39:3e:9a:54:1e:0f:
65:7c:4b:aa:51:6b:9e:4f:12:1f:80:69:2c:82:a2:
b6:26:20:a0:fa:24:0a:ad:81:55:85:f0:ad:f2:b4:
f1:b2:84:33:fd:63:2d:8c:e2:a2:86:19:81:dc:66:
5c:8e:30:0c:ff:b4:92:87:9d:48:d1:f6:08:c2:ed:
65:9e:90:12:87:c0:c7:f2:cc:80:d1:e7:36:a7:53:
20:c9:05:30:2f:04:b5:cd:f0:31:d4:e1:df:b1:8f:
09:2b:88:e6:e5:60:ce:67:3d:30:d2:da:52:f2:43:
2a:75:1a:10:de:22:35:19:f1:f0:90:ea:50:f2:1d:
46:c0:3e:e6:32:37:74:6f:ff:f8:36:31:57:73:66:
e0:21:a8:ba:c1:1a:d4:0d:e9:e9:f6:b7:6c:91:db:
05:5a:ab:44:0b:af:e4:7b:cd:ba:6a:da:e5:06:76:
8b:cb:05:29:ad:cd:80:00:92:ed:76:dc:e2:bc:5b:
be:95:28:29:91:4e:25:4b:80:9e:bb:b3:c3:13:38:
dd:42:be:4b:5e:e6:95:6c:4c:56:be:e6:07:04:93:
41:a1:fd:8b:99:14:d0:16:c0:92:20:ea:49:8f:9a:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:16:FF:9F:99:34:31:49:B1:F8:95:0B:19:AE:B9:C6:F0:7C:A9
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:107::/48
Signature Algorithm: sha256WithRSAEncryption
62:21:27:be:24:09:cd:e7:f0:a7:78:7f:83:49:f0:67:21:c1:
fc:1a:da:9b:2b:20:23:a1:35:0a:d3:81:ee:6d:23:c4:8b:64:
07:2c:10:22:7f:5a:f8:dc:64:54:54:ec:db:ee:40:b6:cb:d5:
b7:56:22:9b:e6:0e:25:26:36:71:85:14:f4:33:26:9f:83:9d:
8a:41:c7:8c:a7:6d:50:34:44:f9:25:fb:64:93:bf:77:29:b9:
f2:a3:f8:88:43:be:61:b0:94:bb:2b:6d:92:18:d7:ce:46:6a:
62:fd:d8:43:64:89:f7:80:77:36:f5:d5:70:af:86:d1:b6:cf:
49:a4:a6:da:8b:f6:d6:b2:cb:55:55:14:9f:b5:04:65:8e:b2:
46:1d:9d:d8:61:59:ae:54:59:61:18:74:f3:da:0c:7e:90:35:
08:42:47:28:7d:43:26:e9:a5:dd:02:9d:06:11:02:c4:ff:6f:
31:30:d3:cd:c0:f6:e4:3e:0e:00:21:e5:49:47:61:4e:e3:50:
42:20:9d:73:6e:34:01:7e:39:24:e3:44:c5:a3:c0:b6:05:c8:
65:a8:25:58:65:1a:a0:4a:49:87:d0:dc:79:b7:61:c3:38:ff:
36:9e:cc:73:77:ca:8b:9a:c2:6a:f4:b1:a2:a1:6f:fb:96:ab:
8c:06:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:13 2025 by rpki-client