Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa
File: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (raw, json)
Hash identifier: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=
Subject key identifier: 18:68:D3:55:95:9B:2D:20:E1:42:9F:56:ED:34:37:CB:CA:05:FD:BE
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 01942747E1EE524B8D6F335D105C04DB0215
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208227
IP address blocks: 2a04:ff00:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e1:ee:52:4b:8d:6f:33:5d:10:5c:04:db:02:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1868d355959b2d20e1429f56ed3437cbca05fdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:54:54:24:22:c9:e0:a8:07:77:93:3c:2e:
b6:96:0e:6b:98:e5:89:dd:38:75:b3:7d:2b:fc:e1:
5d:5e:27:90:aa:dd:ca:23:29:c3:ae:3f:48:7b:2e:
44:6c:c0:35:93:a4:be:9d:e5:b3:08:75:8e:16:38:
fb:4b:a9:21:11:73:a8:3a:3b:16:4f:a8:a5:43:6d:
2e:07:42:60:df:b4:a6:b6:bb:b6:69:c2:53:8a:22:
1f:62:75:7b:d0:2e:fa:2f:dc:12:3c:3a:dc:79:95:
5e:15:d9:04:de:ce:c7:4d:37:93:8f:e5:11:c5:22:
16:be:28:86:d2:f1:49:ad:e1:80:c3:46:0d:f0:5d:
4a:2b:24:6b:16:58:9e:eb:91:95:55:f7:9c:45:8b:
a9:c9:87:d3:06:48:7a:2b:67:f0:af:ad:f4:ba:f1:
4b:03:d7:21:c8:67:21:14:95:fd:aa:00:ca:d6:44:
56:37:91:14:3e:cd:7d:90:ec:df:ae:ff:e9:0f:15:
6c:95:05:77:39:74:91:39:5d:42:35:69:e7:0a:b2:
a8:7e:28:bf:c1:1c:6a:6f:b2:d1:9d:06:94:a6:6d:
75:64:91:91:c5:18:4b:ab:24:6d:24:85:7c:1b:16:
dd:48:fc:02:27:6c:bd:6b:94:84:c9:96:9f:88:fe:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:D3:55:95:9B:2D:20:E1:42:9F:56:ED:34:37:CB:CA:05:FD:BE
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:200::/40
Signature Algorithm: sha256WithRSAEncryption
2a:30:4a:5f:c8:ff:5d:0d:e8:b6:d7:61:9a:91:dd:d8:f9:aa:
4b:8c:e7:dd:7b:0d:29:3c:f3:20:1a:d3:ee:90:b0:d3:40:95:
56:10:b5:b4:8f:34:5d:b5:09:53:2b:02:f9:96:73:0a:2c:ef:
02:12:a3:18:51:f9:06:d1:2f:3b:74:f1:9f:f4:d0:8a:13:eb:
54:8a:9d:02:a3:bc:92:64:33:ae:52:d1:6f:ed:5e:8f:ac:8c:
80:b3:43:b5:3c:41:d4:eb:2d:26:bb:9e:c2:b8:b0:17:82:61:
63:ae:89:59:f9:58:d5:0b:4f:61:c8:a4:a8:2e:53:96:ec:59:
7c:ae:d1:e9:bb:81:c8:91:a1:d0:c8:0a:20:75:3d:24:61:ed:
ac:6f:7d:62:a1:9a:be:c8:38:d1:ae:d9:0a:b3:44:e0:bf:69:
e8:86:d9:d5:bb:4c:94:7e:e5:dd:f7:1b:4f:f1:57:bc:5f:b9:
a3:d8:e7:3f:9f:70:55:e9:df:b9:72:00:7d:28:a0:df:bd:18:
26:c9:ef:42:f5:d2:59:a8:09:0f:fc:e1:d2:11:64:ac:b0:6b:
ca:08:15:cd:b2:27:15:fc:14:f9:c4:14:4e:4f:dc:82:ee:ab:
b9:70:e8:d1:eb:83:d6:1c:e6:bf:c4:c7:a7:2c:bf:38:96:84:
d4:f4:1f:2d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQnR+HuUkuNbzNdEFwE2wIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk
MGEwYTkwHhcNMjUwMTAyMTM1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODY4ZDM1NTk1OWIyZDIwZTE0MjlmNTZlZDM0MzdjYmNhMDVmZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuupUVCQiyeCoB3eTPC62lg5rmOWJ
3Th1s30r/OFdXieQqt3KIynDrj9Iey5EbMA1k6S+neWzCHWOFjj7S6khEXOoOjsW
T6ilQ20uB0Jg37Smtru2acJTiiIfYnV70C76L9wSPDrceZVeFdkE3s7HTTeTj+UR
xSIWviiG0vFJreGAw0YN8F1KKyRrFlie65GVVfecRYupyYfTBkh6K2fwr630uvFL
A9chyGchFJX9qgDK1kRWN5EUPs19kOzfrv/pDxVslQV3OXSROV1CNWnnCrKofii/
wRxqb7LRnQaUpm11ZJGRxRhLqyRtJIV8GxbdSPwCJ2y9a5SEyZafiP4xfwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBho01WVmy0g4UKfVu00N8vKBf2+MB8GA1UdIwQY
MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt
ZTYzZTk0Y2JhMDlmLzEvR0dqVFZaV2JMU0RoUXA5VzdUUTN5OG9GX2I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm
LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgT/AAIw
DQYJKoZIhvcNAQELBQADggEBACowSl/I/10N6LbXYZqR3dj5qkuM5917DSk88yAa
0+6QsNNAlVYQtbSPNF21CVMrAvmWcwos7wISoxhR+QbRLzt08Z/00IoT61SKnQKj
vJJkM65S0W/tXo+sjICzQ7U8QdTrLSa7nsK4sBeCYWOuiVn5WNULT2HIpKguU5bs
WXyu0em7gciRodDICiB1PSRh7axvfWKhmr7IONGu2QqzROC/aeiG2dW7TJR+5d33
G0/xV7xfuaPY5z+fcFXp37lyAH0ooN+9GCbJ70L10lmoCQ/84dIRZKywa8oIFc2y
JxX8FPnEFE5P3ILuq7lw6NHrg9Yc5r/Ex6csvziWhNT0Hy0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:22 2025 by rpki-client