Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GYXVxXHEMEnLhVu7760M0jC7sc8.roa
File: GYXVxXHEMEnLhVu7760M0jC7sc8.roa (raw, json)
Hash identifier: RW1NSVazaBBKBMaPwKmdrm3EBiw8caFbbdTjCfo6IQ8=
Subject key identifier: 19:85:D5:C5:71:C4:30:49:CB:85:5B:BB:EF:AD:0C:D2:30:BB:B1:CF
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA746436826CC3E098EF55D8179591
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GYXVxXHEMEnLhVu7760M0jC7sc8.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:b641:20::/44 maxlen: 48
2a0c:b641:a0::/44 maxlen: 48
2a0c:b641:130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:64:36:82:6c:c3:e0:98:ef:55:d8:17:95:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1985d5c571c43049cb855bbbefad0cd230bbb1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:bf:90:85:68:85:37:e6:8e:21:ed:11:2d:
5b:1f:fa:2e:ec:23:c8:6d:5e:b6:9e:02:60:f9:0b:
50:6e:eb:de:c7:b0:e1:75:f4:7c:3d:7c:45:6b:dd:
6d:9a:52:a6:4b:cf:80:2a:52:40:11:91:ef:4b:1a:
ce:21:30:eb:7c:aa:da:c9:7a:e6:ac:20:59:c8:66:
d7:e6:70:20:47:a6:1c:bf:75:bb:59:e3:41:8c:77:
d2:61:95:dc:88:6c:a7:ec:f7:1d:64:99:f7:2a:81:
aa:c5:4e:04:03:9f:65:55:1c:23:41:09:1d:b8:68:
c1:3e:7e:d0:5e:da:72:36:9a:bf:b9:02:dd:fd:cf:
d6:83:5e:2d:a4:6a:a3:e1:ee:f8:d6:56:c2:50:90:
78:8f:e9:ef:b4:94:65:fd:0f:6b:72:72:6e:83:dc:
59:fa:ee:e0:23:8e:c5:7b:01:40:ca:d5:b9:95:bf:
0d:51:a7:a4:ef:98:ef:33:02:a3:2b:e5:a1:f5:43:
7c:d4:ef:a9:70:f4:04:92:fa:b3:21:fa:cf:12:a3:
2d:19:e8:f2:a6:22:6b:46:f7:a8:d2:75:2c:50:3c:
60:e9:53:71:fd:fe:e1:37:51:2f:17:65:f7:e4:4d:
a5:05:bb:3d:d6:ec:34:ef:02:1b:f7:69:17:76:02:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:D5:C5:71:C4:30:49:CB:85:5B:BB:EF:AD:0C:D2:30:BB:B1:CF
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GYXVxXHEMEnLhVu7760M0jC7sc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:20::/44
2a0c:b641:a0::/44
2a0c:b641:130::/44
Signature Algorithm: sha256WithRSAEncryption
43:b2:ea:fb:a9:bd:71:ce:c4:54:d3:ab:f3:f3:ff:2b:b5:12:
bd:22:0f:18:af:4b:1b:67:09:bc:5e:e9:9c:db:1f:05:28:27:
6e:20:69:30:ca:f5:3d:2f:53:d9:2d:98:bc:39:74:13:38:f5:
90:76:87:68:17:7b:34:f2:8e:14:af:35:42:67:b6:b6:70:6a:
27:43:1c:65:60:c7:66:5d:29:8c:5b:ef:1d:5b:e5:7c:33:c2:
17:6b:05:ff:75:61:18:83:68:00:94:ca:24:20:dc:0a:4c:e6:
36:f5:b0:05:13:6f:97:1b:c6:c6:48:97:5c:44:49:cc:42:0e:
88:60:78:b6:4c:74:55:70:4e:bc:ae:c6:7c:0d:5b:59:9f:85:
76:3f:a0:ad:3c:1d:35:3f:0d:c3:07:31:a0:37:90:6a:0c:5a:
7e:a8:5b:39:6e:e1:c3:01:e4:8a:db:5e:35:04:b1:9b:14:52:
74:3d:00:07:17:6f:60:f4:0f:57:7c:38:de:cc:59:62:04:89:
7c:b5:e7:55:a2:d2:68:99:a4:5e:1d:8a:8d:7e:6b:d2:a9:23:
e6:0a:c8:8d:ac:7b:72:b2:c4:d9:c0:5c:4e:50:85:8a:a1:cc:
9c:25:6b:c1:91:ec:81:d4:98:5d:c0:54:36:0d:23:15:b4:be:
ac:53:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:36 2025 by rpki-client