Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GCsCl4ix90A0VAwFS-19Dske1f0.roa
File: GCsCl4ix90A0VAwFS-19Dske1f0.roa (raw, json)
Hash identifier: qiUpeLm9MjRA+fBC5Y0ZR7pcr/0WC/55coLOQBuYTvA=
Subject key identifier: 18:2B:02:97:88:B1:F7:40:34:54:0C:05:4B:ED:7D:0E:C9:1E:D5:FD
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA951B980A7B209537DB0BCB6B4A0E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GCsCl4ix90A0VAwFS-19Dske1f0.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209861
IP address blocks: 2a0c:b641:80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:95:1b:98:0a:7b:20:95:37:db:0b:cb:6b:4a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=182b029788b1f74034540c054bed7d0ec91ed5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:12:5a:e3:d7:0f:07:bf:f4:af:95:5e:cd:
90:74:97:0c:1c:a6:a4:b9:41:12:a9:49:9a:64:18:
a8:c9:6d:13:ed:d0:aa:d9:cf:eb:35:92:c3:23:5e:
f6:e9:d4:81:06:ac:af:b4:e6:c0:4d:a2:23:e6:8f:
c0:45:40:a0:76:3b:6f:d4:d6:52:69:ac:b3:92:f1:
0d:ec:2c:54:f5:28:06:6f:fe:fe:75:b5:23:e4:8a:
ed:99:3d:f1:cf:0e:a7:d8:86:e0:ea:d2:96:96:d6:
6f:85:c0:8f:ce:5c:da:1a:1f:f2:cc:48:96:cc:0c:
42:21:a0:d8:a7:e3:6b:de:e5:2d:a3:b2:6a:2a:46:
f8:2f:c4:eb:0e:b2:d5:08:1e:e7:66:1d:22:a7:2d:
6e:d4:66:ec:1f:d6:17:03:74:40:28:0a:82:97:60:
3a:3d:d6:00:6e:79:b6:8b:c9:fd:7a:8b:fe:80:fc:
b2:8c:c0:cf:7b:ac:f8:d4:09:c3:af:82:f1:99:a8:
49:a5:d3:fe:5c:1c:b9:70:01:bc:ea:a3:9e:34:d5:
86:f3:6c:8b:d3:b1:32:99:de:f8:96:00:d6:a4:d7:
e0:c8:12:f7:52:14:1a:86:86:05:ab:90:df:64:4e:
42:9a:96:64:36:5d:52:5c:c1:00:d7:61:34:f9:88:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:02:97:88:B1:F7:40:34:54:0C:05:4B:ED:7D:0E:C9:1E:D5:FD
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GCsCl4ix90A0VAwFS-19Dske1f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:80::/44
Signature Algorithm: sha256WithRSAEncryption
5b:ac:ee:64:01:bf:0d:03:16:db:52:b2:c4:4d:c8:3b:c0:96:
69:cb:2f:e4:1a:01:79:53:33:77:c0:7a:58:5a:a1:ac:e9:50:
6f:81:f8:e6:14:eb:f3:6b:2f:40:98:4a:e9:27:0f:92:63:0e:
d1:cc:8c:78:f0:79:ec:71:f7:d8:46:5c:4a:ec:c2:c0:9d:36:
0f:00:05:11:38:06:48:8e:b8:45:4f:24:08:70:1a:67:f6:36:
b7:e6:42:96:fb:65:88:05:33:0c:2c:e3:8f:72:28:dc:84:3e:
76:51:a1:2e:c5:44:87:ab:68:cd:ad:8e:9b:2d:cb:9a:fe:8e:
01:0c:c7:7d:6c:f9:8b:d9:75:28:a1:f7:60:38:3f:aa:4e:11:
8b:1f:5f:5f:91:92:a6:a3:e5:8d:b2:2e:25:2c:9d:79:23:e4:
1f:d5:15:63:63:b0:fb:e5:13:79:5e:6e:e8:f8:db:17:cf:25:
88:1b:46:ff:b3:fa:1d:49:33:1c:f1:90:83:39:e9:85:f8:f4:
b4:1d:2f:6b:c7:89:a3:81:c6:ad:b0:bb:6c:c9:0d:5c:5c:45:
7e:7c:74:e8:39:8d:aa:23:c6:2f:2a:fa:05:fc:c6:c1:68:4f:
d8:ff:97:ca:b1:e3:5b:ae:cf:61:f9:8f:e2:28:ad:1a:59:b3:
22:da:54:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:45 2025 by rpki-client