Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GWO5xgNxsSeAL0cKZ11mlMFA_5Y.roa
File: GWO5xgNxsSeAL0cKZ11mlMFA_5Y.roa (raw, json)
Hash identifier: eDAPdGo/XSCCbAybQBU4awqfxZqhBeWpUhbvG4BJjMc=
Subject key identifier: 19:63:B9:C6:03:71:B1:27:80:2F:47:0A:67:5D:66:94:C1:40:FF:96
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01946B381AD6C8C62E29C3F42B1B2AFE362A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GWO5xgNxsSeAL0cKZ11mlMFA_5Y.roa
Signing time: Wed 15 Jan 2025 18:27:06 +0000
ROA not before: Wed 15 Jan 2025 18:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214477
IP address blocks: 2a11:f240::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:38:1a:d6:c8:c6:2e:29:c3:f4:2b:1b:2a:fe:36:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 15 18:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1963b9c60371b127802f470a675d6694c140ff96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:01:2a:19:42:78:bf:cf:37:65:7c:06:ee:
bd:81:2f:71:b8:d6:b2:2e:46:47:b6:64:eb:74:e9:
fe:f2:40:1e:5d:59:bf:4f:5d:18:95:ca:31:15:c7:
db:e1:dc:03:ef:e7:a0:d9:18:26:d7:d2:bf:47:34:
54:4c:2b:27:88:68:6d:4a:2b:96:1c:20:e3:26:d9:
9e:54:68:c3:5e:ed:5f:33:b3:d3:13:2b:3a:d0:aa:
4e:a7:c8:6c:7f:b2:4a:dd:23:2c:24:67:98:8c:84:
a6:b4:cf:a1:73:85:81:58:7d:09:ba:57:87:ad:9d:
60:e3:ae:f4:8b:7f:00:44:fb:a1:d2:94:12:ce:16:
84:a7:d5:aa:c0:13:75:d2:a1:47:5f:18:41:e7:8c:
90:aa:b0:0d:23:ea:da:dc:5c:f0:17:b4:9f:58:77:
0e:14:a0:f8:71:bd:f0:0f:c1:db:39:fa:6f:71:75:
ae:f9:48:d2:a1:14:aa:4b:bc:53:23:ea:94:a3:43:
b5:ec:49:3c:22:f3:60:0b:c3:30:a0:57:fd:d9:b9:
73:82:18:87:e2:fc:9d:89:03:13:5d:12:f4:96:2c:
24:cf:18:dc:48:be:aa:96:97:a0:7d:76:18:4c:8f:
9c:52:a8:28:b9:a2:84:bf:ec:66:b1:da:ee:c1:b3:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:B9:C6:03:71:B1:27:80:2F:47:0A:67:5D:66:94:C1:40:FF:96
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GWO5xgNxsSeAL0cKZ11mlMFA_5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f240::/29
2a12:6f40::/29
2a12:7740::/29
Signature Algorithm: sha256WithRSAEncryption
62:26:4e:ef:f2:f7:e0:ef:70:1f:f9:79:c5:cb:45:5e:93:d6:
61:f9:3d:b5:cf:39:fb:9e:3f:df:04:94:08:bc:1d:8e:c0:63:
22:fb:01:10:aa:af:2d:c7:fb:52:e4:b0:92:17:4e:0e:da:32:
69:11:14:2b:08:7e:c1:ca:de:58:42:83:7c:32:27:6b:1d:1f:
94:42:11:ae:ad:30:99:5e:5a:67:f8:0a:8b:65:e0:95:99:be:
b0:b6:15:0b:0a:b1:aa:be:2b:70:24:1a:c0:d0:e0:01:68:57:
39:9e:b6:65:d3:0e:bf:34:c3:5c:7b:c3:c5:e3:73:76:92:d3:
26:c2:60:43:02:a8:d7:f7:0e:c5:29:4b:f3:14:4d:aa:c8:4c:
05:f5:84:b2:7e:aa:07:d2:26:6b:72:b7:ef:ab:97:e9:7f:a4:
04:9c:94:e1:95:df:72:4e:92:f7:6a:a5:46:4d:fb:7b:b5:c8:
e1:71:08:9a:1e:7a:5a:30:f8:4a:18:1e:21:ef:51:19:fb:a7:
83:42:73:eb:77:77:21:5d:e3:7d:aa:31:bc:d7:62:d7:5e:8e:
7e:16:4d:93:d0:6c:e1:6a:0a:e8:1d:8e:e9:15:f9:a9:75:45:
0e:4c:cb:b5:00:98:25:5f:02:c0:11:d8:f2:35:eb:07:af:50:
19:44:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:59:05 2025 by rpki-client