Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa
File: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (raw, json)
Hash identifier: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=
Subject key identifier: 18:FD:90:FD:6A:3E:FF:22:B8:78:FD:90:0E:77:3A:E4:23:19:9B:D3
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 0194228E325721188DE16A991E2349ED8375
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5401
IP address blocks: 2001:1440:201::/48 maxlen: 48
2001:1440:202::/47 maxlen: 47
2001:1440:202::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:32:57:21:18:8d:e1:6a:99:1e:23:49:ed:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18fd90fd6a3eff22b878fd900e773ae423199bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:77:dd:09:ee:69:1d:da:76:d5:7f:9f:c4:
aa:63:7c:db:72:eb:25:f3:f7:6a:f9:b1:1a:a2:05:
a2:af:3c:61:45:64:58:80:76:2e:99:25:2d:f7:67:
03:5b:e6:9e:7a:89:43:6d:f2:62:c4:0a:4a:b9:4c:
78:2d:3e:d8:e9:05:27:f4:e4:fd:9f:c8:6f:fc:f0:
14:dc:f5:d5:85:97:9c:2f:03:a2:67:90:80:3e:db:
d7:8f:8f:0a:04:d9:ca:aa:07:7c:5b:3e:41:c5:f4:
31:a1:26:1f:ad:8f:ca:45:41:dd:50:08:e1:77:da:
92:96:c5:97:9b:08:09:ed:66:66:f1:a0:52:26:96:
c7:df:ee:7e:33:87:43:5f:dd:c2:41:fc:69:1b:21:
2a:1c:3a:78:34:e6:9d:92:ee:da:d4:cb:19:a7:aa:
a9:f5:56:89:56:da:c4:d0:80:2a:45:03:48:9a:59:
c8:d9:07:21:83:8a:96:6a:26:94:d4:29:3f:c9:a8:
9d:5d:8f:d8:63:89:2f:3d:7d:26:a2:2f:e0:cf:49:
81:b0:43:6f:e3:14:0d:55:1b:82:ba:96:61:04:45:
3d:6c:b7:ca:b8:25:a8:e4:ac:a9:48:a5:05:fb:1f:
94:70:77:83:0d:a7:d1:7d:46:a9:cf:f9:7f:ae:a5:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:90:FD:6A:3E:FF:22:B8:78:FD:90:0E:77:3A:E4:23:19:9B:D3
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1440:201::-2001:1440:203:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:24:d9:08:52:de:83:f7:bc:dd:4a:cd:c3:53:76:6d:81:aa:
b7:14:3d:df:8a:ee:5f:57:c2:fb:67:4e:a6:80:fe:01:cf:23:
44:35:53:f8:c4:66:ce:fd:44:72:43:1c:a9:a4:45:eb:67:92:
9b:b2:2a:96:bb:7d:57:d1:ff:c6:70:a1:8d:58:37:0e:f8:e5:
24:3c:c7:85:71:78:4b:bf:a3:f9:55:b7:4c:eb:24:50:8d:eb:
93:b0:cf:09:c1:a7:53:e0:6c:64:e7:84:41:40:88:2b:eb:0e:
68:98:68:65:b1:13:f8:ab:18:f5:2e:bf:3c:bb:95:73:12:e6:
d4:74:2f:dc:3b:8c:c3:b6:d4:4a:b0:fc:c6:25:3c:af:28:ca:
a4:9c:36:ed:c2:94:6e:42:69:30:52:67:3e:89:41:82:6e:29:
86:cb:11:1b:47:9c:64:ab:0a:72:2e:1f:98:31:de:51:4d:43:
7f:22:ae:7e:aa:16:ca:9f:9c:1d:e1:e8:d5:a9:73:1a:67:95:
d1:24:51:fc:27:5c:e1:a8:23:19:f1:c1:0a:29:0f:76:ec:7b:
b2:ea:9b:03:40:2c:c7:42:f8:a4:b9:83:5f:bc:fe:8f:55:12:
3d:11:03:c8:1d:05:87:a5:ea:6a:ea:55:1c:30:25:cb:bd:ed:
1e:46:09:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:50 2025 by rpki-client