Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gdrMCsbE7OtRIp2zUeKTODZ9Exw.roa
File: gdrMCsbE7OtRIp2zUeKTODZ9Exw.roa (raw, json)
Hash identifier: ljEcrNjpmU5icaTTRrfGOVImaLu7wnOYQQvRVb4HUQc=
Subject key identifier: 81:DA:CC:0A:C6:C4:EC:EB:51:22:9D:B3:51:E2:93:38:36:7D:13:1C
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222041D787FC9076818A19D31D389386
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gdrMCsbE7OtRIp2zUeKTODZ9Exw.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212243
IP address blocks: 2a0e:8f02:f015::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:41:d7:87:fc:90:76:81:8a:19:d3:1d:38:93:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81dacc0ac6c4eceb51229db351e29338367d131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:9f:4b:0a:61:5a:3a:31:8a:f3:73:ea:b7:
82:b2:9b:a4:34:a1:e9:76:4b:05:1a:7f:20:68:7a:
ff:e6:6b:0a:2d:bd:c5:ca:91:84:3a:e6:34:43:8a:
4a:93:23:8b:99:8b:72:3e:1a:3a:50:8a:05:6d:6c:
0a:a5:85:e5:13:59:89:96:87:93:17:2d:c1:27:19:
fb:a5:82:18:c6:87:25:30:f6:ca:bb:c8:9a:ed:00:
68:b9:44:70:d2:f2:11:07:cc:d3:4e:19:cf:7f:d6:
a6:53:76:44:fa:a4:da:ab:f8:04:b8:63:8e:c2:6f:
ef:50:87:12:88:cc:85:26:53:03:b6:55:ca:04:2d:
fe:2e:84:36:c4:91:a7:11:c5:15:ec:2e:86:da:00:
be:56:73:98:be:64:ef:48:3b:fb:a9:91:38:4c:09:
9b:49:42:ec:b8:1f:e0:9b:3c:a6:aa:4e:25:f7:52:
5d:29:87:c7:d7:b8:32:e0:d2:75:1d:b3:06:18:d2:
9d:db:30:11:4a:80:b2:ba:94:97:33:9e:84:6b:12:
4c:7a:ba:6c:d3:bc:fc:ed:b0:ab:42:27:94:61:20:
57:1d:dd:e5:72:19:72:20:6a:66:d8:18:b6:b1:17:
b5:66:d7:b5:7f:92:29:62:81:e3:47:c8:7a:89:73:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:CC:0A:C6:C4:EC:EB:51:22:9D:B3:51:E2:93:38:36:7D:13:1C
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gdrMCsbE7OtRIp2zUeKTODZ9Exw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f015::/48
Signature Algorithm: sha256WithRSAEncryption
9c:ab:75:51:89:cb:36:e5:b1:3f:ad:8d:4c:bb:9d:ae:1e:2d:
ca:0a:04:67:8f:f1:d5:22:ce:8e:6c:72:c0:11:3f:26:e8:c1:
e4:ed:07:c6:5d:1e:7b:e6:78:00:d5:3e:e7:27:96:38:b3:ca:
e2:2b:47:73:4b:67:d3:ee:06:67:34:e5:cd:42:61:e0:37:2b:
da:c2:37:61:63:51:1b:65:c6:39:95:cd:5a:21:04:fb:07:a3:
d8:dd:e9:e4:11:13:17:a9:bf:5e:85:91:2d:d9:b3:59:26:ce:
c4:00:6d:81:4a:99:38:ef:84:31:3b:f6:e3:c6:55:cc:71:16:
56:2f:7a:64:fd:1b:06:e0:ad:d4:26:e3:7a:6d:87:3b:f4:ca:
4a:2a:87:72:f5:f4:b7:c7:2c:af:43:14:b7:0f:67:97:1c:b5:
2a:d5:f6:5e:27:3b:56:e0:0a:53:16:14:7b:6b:8f:06:4b:95:
47:bb:55:9b:63:15:f0:e7:53:af:9a:17:f5:e4:19:89:96:ef:
8d:57:82:60:83:0d:33:6b:6e:eb:80:cc:d8:28:61:56:db:c1:
c5:31:f3:49:6b:30:7c:9f:c3:9a:49:51:c0:ec:8b:89:ab:7f:
8b:b5:9c:06:89:2b:b1:5a:8a:51:09:48:3f:5a:6b:1b:f8:b7:
bf:09:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:11 2025 by rpki-client