Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GzsErYHvOdOuJ48ovK_PlGSGAOA.roa
File: GzsErYHvOdOuJ48ovK_PlGSGAOA.roa (raw, json)
Hash identifier: eX3Dc8wq+TDt2TzkWLT/iqAVYhIefpAqSIAb+qb36LU=
Subject key identifier: 1B:3B:04:AD:81:EF:39:D3:AE:27:8F:28:BC:AF:CF:94:64:86:00:E0
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DFA5090734DE68F72FACD32FF55C36F8
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GzsErYHvOdOuJ48ovK_PlGSGAOA.roa
Signing time: Sat 29 Mar 2025 02:04:49 +0000
ROA not before: Sat 29 Mar 2025 02:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:dfa4:a72b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:a5:09:07:34:de:68:f7:2f:ac:d3:2f:f5:5c:36:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 02:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b3b04ad81ef39d3ae278f28bcafcf94648600e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:20:0c:a4:b6:2f:87:98:ab:33:d5:b7:8b:
fc:da:67:3b:8c:25:3b:02:d4:69:00:f6:bc:3f:f0:
0a:e4:2d:6f:34:55:98:31:af:53:dd:ba:c0:8f:c4:
be:73:90:c9:7c:7a:2d:fe:71:d0:85:80:59:1e:5e:
09:16:e8:11:2f:dc:35:66:4d:15:6a:ce:78:f8:d8:
22:79:7c:c7:ad:24:d6:01:35:ed:7d:2e:78:36:d5:
af:ea:a9:94:42:6d:b4:1b:75:e6:82:06:a5:65:70:
c0:3c:7b:3c:70:d3:90:3c:61:0e:08:53:66:79:fa:
2f:e9:e7:e3:db:ef:d5:8e:5e:78:34:78:73:1e:bc:
f4:c2:e0:a0:5a:a5:00:dc:59:b6:16:d7:fc:52:1b:
d3:84:42:66:65:20:79:ec:44:9c:a2:cb:4c:c1:fc:
c8:6d:c8:58:3a:16:6b:65:3d:5e:4b:4b:18:31:5f:
17:66:27:b2:07:96:54:d2:f7:84:fd:df:58:90:be:
6e:ee:be:9c:a3:5a:15:54:0d:5f:6e:bb:82:dc:ba:
48:5c:0a:fa:e6:8a:41:c9:14:39:72:e8:d0:c4:1a:
46:4b:2b:82:3a:04:a6:60:cf:a3:43:1e:2f:e0:b4:
1e:ff:80:55:d5:2b:ce:d8:17:88:f9:11:91:46:13:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:04:AD:81:EF:39:D3:AE:27:8F:28:BC:AF:CF:94:64:86:00:E0
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GzsErYHvOdOuJ48ovK_PlGSGAOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:dfa4:a72b/128
Signature Algorithm: sha256WithRSAEncryption
79:d4:13:21:26:cc:51:e0:b6:62:ec:c3:bc:ef:b8:d5:24:8b:
3d:60:f7:7b:d0:ae:18:bf:c0:a7:46:15:52:3f:cf:a7:3e:d0:
b5:30:82:79:ad:a1:0b:bf:38:c7:3f:b0:01:f8:79:b4:e9:45:
33:e2:07:3d:b6:df:7f:95:ff:85:49:06:7b:50:f8:28:06:67:
0d:d2:42:86:36:f0:98:c2:fe:91:66:74:25:f2:e0:86:3c:bd:
32:b2:ae:3d:30:d6:16:0c:ed:ac:d7:72:81:64:4b:ad:67:d5:
f6:fe:56:61:d9:d0:09:8b:de:aa:3c:a6:2e:55:ab:03:dd:1e:
02:8f:7a:6a:63:fd:cc:71:b9:0f:99:73:d7:bf:fa:0d:da:5d:
67:6e:ce:c0:11:29:ff:b9:45:c3:f3:80:dd:10:91:e3:1b:0a:
8b:0e:4e:81:87:d8:37:83:65:0b:31:8e:cc:a0:95:d2:cf:d3:
03:38:21:56:e5:9a:77:28:8e:61:13:07:65:4d:1c:19:eb:ea:
72:63:4a:e0:b4:8b:ca:30:d6:02:06:e6:17:4e:4b:de:6e:02:
e6:30:1b:d8:32:c2:3a:89:cf:2a:e9:5d:22:a5:2d:15:06:14:
72:5b:a3:c6:0c:b5:16:dd:38:75:6b:01:6f:ed:ec:d3:9c:bd:
5c:76:9f:74
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZXfpQkHNN5o9y+s0y/1XDb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzI5MDIwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjNiMDRhZDgxZWYzOWQzYWUyNzhmMjhiY2FmY2Y5NDY0ODYwMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF0gDKS2L4eYqzPVt4v82mc7jCU7
AtRpAPa8P/AK5C1vNFWYMa9T3brAj8S+c5DJfHot/nHQhYBZHl4JFugRL9w1Zk0V
as54+NgieXzHrSTWATXtfS54NtWv6qmUQm20G3XmggalZXDAPHs8cNOQPGEOCFNm
efov6efj2+/Vjl54NHhzHrz0wuCgWqUA3Fm2Ftf8UhvThEJmZSB57EScostMwfzI
bchYOhZrZT1eS0sYMV8XZieyB5ZU0veE/d9YkL5u7r6co1oVVA1fbruC3LpIXAr6
5opByRQ5cujQxBpGSyuCOgSmYM+jQx4v4LQe/4BV1SvO2BeI+RGRRhPokwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBs7BK2B7znTriePKLyvz5RkhgDgMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvR3pzRXJZSHZPZE91SjQ4b3ZLX1BsR1NHQU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGV3GzZ3wMRACABBnwAZP//AAABld+kpyswDQYJKoZIhvcNAQELBQADggEB
AHnUEyEmzFHgtmLsw7zvuNUkiz1g93vQrhi/wKdGFVI/z6c+0LUwgnmtoQu/OMc/
sAH4ebTpRTPiBz2233+V/4VJBntQ+CgGZw3SQoY28JjC/pFmdCXy4IY8vTKyrj0w
1hYM7azXcoFkS61n1fb+VmHZ0AmL3qo8pi5VqwPdHgKPempj/cxxuQ+Zc9e/+g3a
XWduzsARKf+5RcPzgN0QkeMbCosOToGH2DeDZQsxjsygldLP0wM4IVblmncojmET
B2VNHBnr6nJjSuC0i8ow1gIG5hdOS95uAuYwG9gywjqJzyrpXSKlLRUGFHJbo8YM
tRbdOHVrAW/t7NOcvVx2n3Q=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:46:45 2025 by rpki-client